Kiwibank Limited

- Kiwibank Limited -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 07:ff:26:79:38:26:d7:a7:f3:98:9c:cf:ce:5e:65:b1 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Kiwibank Limited

Company registration number: 1135352
Organization: Kiwibank Limited
Address: L 9, 20 Customhouse Quay
Locality: Wellington
Country: NZ

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ff:26:79:38:26:d7:a7:f3:98:9c:cf:ce:5e:65:b1
Serial Number (int): 10629412004971513283156593804733998513
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6c:6d:ca:df:84:74:eb:36:b7:fe:84:9b:e7:6a:35:89:ac:45:94:fb
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): f3:2d:50:2f:44:1c:e7:43:b9:01:2c:89:49:ab:bd:ee:c2:73:51:dd
Fingerprint (sha256): bc:07:de:46:97:0a:8e:e7:5c:db:55:81:7f:7c:63:36:0c:55:2b:9e:47:57:d7:58:90:7a:81:d3:06:dd:a3:d0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Kiwibank Limited

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Kiwibank Limited

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiwibank.co.nz

Certificate

The complete raw certificate details for Kiwibank Limited in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iAMbGbpOLY91BdlNtqi
uKf/nIaW+I5wHJF351gwRwQ4p4QqFMEb5qW7baGqqXr3RYzCqnbtA676IITdDM4U
HqfMDHwoB4eS2SiBI/H16m77zABQcrvzkYrYpeRvLvJf+0nbnOc95gpDXIUmnWFi
Z8MAhlJOtciiJguiR+V9nk07Iryhc7bmvU+Po9Fe2FQID3N2JuCu79UxjfwN8BGi
cjQ9L9Jo8ciLHy4jkvUAPk3lanKGL+1zF7Z3Y6e6yBf/4tbncbTFOPurlkjL0q9s
/EQbY9nCDqlZwVTox3Aqgaecba+kv2+BMRGoT0/xwHhtAOGReg3FegNBsgeYlQ9/
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10629412004971513283156593804733998513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1135352'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'L 9, 20 Customhouse Quay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kiwibank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kiwibank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1197932'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28040707421168599289648815110490836094944173704959738027638805607572489945426701501557161998997296282300228366395845892542409071805277837423256268987613552685926152131490484979413180548397623655072812613079671882317133987285925966373077896512608269693597650202139185580457709721945864772630455861496457640450534992403923943121995560664808630450747316166277439808223510453020297272682474035904110500819714264577251909816511385597340911797516009083230095533217096285850520780086068049310571371304659246497847431027352557609010505739136660239165173324773724342204742348501796800686196626423058627197751246024224619331537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c6dcadf8474eb36b7fe849be76a3589ac4594fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwibank.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1586 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															068f445fa8b4a0e7b955bf3547ad63b6eb936879
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00506715c44e11c9c564822ffc83c08b887e46e5f52522537592556dbc933aff09b01b4fd36b07a31fc311e33e2e1cda8e0fa2427aa844c50e08be6dfe3e6835d6ff132aebfbf97c449905ddf200ae63676e1a98a41811f4b6a5911af092072d7987ea35a9d8141a97836202063aef42f83c21bdde8c5f378474e70627258f82a34d104005262e468d45b87bd0a67d8a33e1a804839268749d5eed74ad8b59eee2f232eef65a3caacdc3dee8fc029da82a8f4fd1f811db8ec1067f6699eb279ad9994d3761671a6e98f9b87f617ef7ab4ffd61b77d76449dc4e2189907c97dda4639e0624eb591ff7a2fcb34834ceb7cf0f73e6b2a0f1915f25b8b2781678fbcb336f430cec2d7571700e78890b144a495c15f126b50f1021067a23e17824b7a8373f25ff4e55ee86bb621ec9d64552fe5895ffa58ea1cff1ebb2bd20bf912ca9074191ad3c418e36c0b0837dae120dd86263e7eff9cccddb66b7787fdfe00498fb13f522ac78000d69ce83bb54c170abfd0958f8a3f40c88b9e838eaffdf7b9cc88f0a1249cd9131a04816de321c62117c15c983cce773ab5652e78bd8b2619f6bdd95b9649348486c7e4aff0df9f531064885d0a47cd7625c788015b4fe38789c43b4fcd5d74dab574b6f1ca9a36a0705ee56a8f122e38678da3645458497c7ad332a0d1fc498a45fa41be4ca2963a85b435a754899aa0961e4f5bf7785cab68