Best Secret GmbH

- Best Secret GmbH -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 06:3b:6b:32:74:34:38:45:2b:c8:5e:3a:75:f3:58:6c was issued on by DigiCert, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Best Secret GmbH

Company registration number: HRB 56240
Organization: Best Secret GmbH
Address: Margaretha-Ley-Ring 27
State / Province: Bayern
Locality: Aschheim
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:3b:6b:32:74:34:38:45:2b:c8:5e:3a:75:f3:58:6c
Serial Number (int): 8283887704562157519857629297594554476
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 09:d6:68:35:5e:1b:9d:59:c0:fe:c0:24:01:8c:84:d8:fb:1c:8e:4e
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 3d:05:b6:26:70:68:cd:84:84:ba:53:08:37:61:9a:2b:ff:0e:f9:d3
Fingerprint (sha256): c3:78:6f:b2:1e:6b:57:52:59:54:41:ce:32:fe:51:23:bb:8a:e5:75:32:42:c9:f4:34:a7:05:7c:06:1b:95:09

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Best Secret GmbH

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Best Secret GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bestsecret.de
bestsecret.at
bestsecret.co.uk
bestsecret.se
bestsecret.fr
bestsecret.ch
bestsecret.nl
bestsecret.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Best Secret GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP9WGX40+OLAM8C1kLul
EY53VrIoQglFdGElGMkXTB9fYiObOzQNpFXLiXPfgqSsqulf7aES4Z5up15tz2vJ
sDyBjEEhAZe9KiIu27oNL30JtTRomg3+eaBIKUNSBFZtShja+10tith8PIn1+2Pd
Cb9a3vbS7VBtz73pLnvBwkjW5OOAMJSLN9x7e0CUcil4bUfXTGjQhLUtRpT3V7vj
gB22H3uW2XVfIwOSxHvYSHx8nwmLeTmPkzKQCiqbVD+XMWAlgXmcbi1410Q5pqUR
ur7okGQt9cIV3mQUQlr+Sxy1gIXJgbJfVjnLdBz2F8euIDjIPMgQjjz3Yg1+62yA
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8283887704562157519857629297594554476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 56240'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aschheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Margaretha-Ley-Ring 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Secret GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Secret GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '017976452'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23858712368980900607258883298455690577172747948035895161487593936834759590071905778086099483604363400499166872214773239814277078977147121675959688861223522865199070043915915091120491174978168849123471750115474992451766965192501779756455748550052686181936878260759947810103178737335095082151773399896162657784089982452793718932274004303464914356112643547875960551853136602484969187963659165367691994309454823827653770161127722284896191465349055305827956766340701858435547613096761349067789447002117666553845567175013239029373748860209148061636034793161235697116614687837816233577658457908768453663758164664574328733867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09d668355e1b9d59c0fec024018c84d8fb1c8e4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0f90bb6bd1df546bc9141a066f8e00ea444035ca
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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