Best Secret GmbH

- Best Secret GmbH -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 08:7f:36:36:a7:d0:02:c6:d2:5f:56:65:72:fb:6b:c5 was issued on by DigiCert, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Best Secret GmbH

Company registration number: HRB 56240
Organization: Best Secret GmbH
Address: Margaretha-Ley-Ring 27
State / Province: Bayern
Locality: Aschheim
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:7f:36:36:a7:d0:02:c6:d2:5f:56:65:72:fb:6b:c5
Serial Number (int): 11294345247688089375522644262628584389
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:a1:b3:02:65:61:0b:7d:05:2b:a6:c8:77:36:07:75:ba:ec:73:95
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 8a:71:6a:90:47:b5:b6:9f:d0:25:46:12:55:88:f0:f3:83:43:7e:90
Fingerprint (sha256): ca:2c:e2:21:62:df:a9:c9:50:de:a9:7d:04:e8:54:91:88:8f:1b:18:a6:16:4f:8a:00:5f:eb:fe:e0:d1:e6:82

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Best Secret GmbH

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Best Secret GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bestsecret.de
bestsecret.at
bestsecret.se
bestsecret.fr
bestsecret.ch
bestsecret.nl
bestsecret.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Best Secret GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufWNWxtJsNeEQe1mnkEJ
1Zn1Pl1+Wmu9a9P5dn8NSPIAQeNFGWrJcF/WdcCKR1O9ZEdvM5cGWyNxqzNRklaS
UNYkIieISY/9rO9WFbzCgYcFpPc3ghlpyD17LHD0XeeJ7kB8dP0+c5ka5nPLCbeM
Qs3iXrKLti/n50DApmJqQbuDsOHvwky+aAWPTImchYFHi4mADF/bX8H//G9Yibu0
3HM2Wzhnjo1XsgFxwoDT/d7Me2kh7N1dRzAN8QDWXJbNrMMMlITtCSiSyipFvCFS
fxkB+88ytxcfJjsssaQpNkRv7e1vsr6ZWBbFCv7ogNIU/8HKc2F7nojOJGc57tp7
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11294345247688089375522644262628584389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 56240'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aschheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Margaretha-Ley-Ring 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Secret GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Secret GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '017976452'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23475172707398929480189304209383782868651474461696587562521732199100678409792222245573378687373952745352926716661400202953714874370740389613358872872992916242590976124883411414708169034176535874659748138856404044315534481159880729083348236800701480177487730469178095815796615892654692418948864806572963082203250952255669717788518839166336841340706355292519336249007394521557773792010091427942624256198886535540866850451648883357885308839511669050874436110549345929597337971064051503852485475332325404053611550892639954185847263517046173664040565704886675149428840365264538611247690133419346792648040135776044580502297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cda1b30265610b7d052ba6c877360775baec7395
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															86c5c058465179d9bea2aab8d1136b7532cdac4a
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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