www.chiesi.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 5a:a0:5c:24:4c:c8:b0:a2:37:aa:4c:7a:f3:06:7b:95 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.chiesi.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 5a:a0:5c:24:4c:c8:b0:a2:37:aa:4c:7a:f3:06:7b:95
Serial Number (int): 120463155975668867488332449918210177941
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 14:e5:7c:9d:2d:ba:c6:3a:37:e1:d9:af:d0:45:46:c7:86:9d:cf:f6
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 40:0d:30:b2:1a:2f:b2:a9:fe:e6:c7:96:c0:f1:23:07:91:b8:7b:a4
Fingerprint (sha256): e6:7d:c8:e0:c9:fc:b3:4d:96:7f:41:8e:5b:50:3b:e6:40:c3:b8:cc:43:3f:bc:1a:c8:6f:d1:67:85:92:65:7a

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate www.chiesi.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chiesi.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chiesi.it
www.chiesi.it

Other certificates including the domain name chiesi.it

(limited to 100 certificates)
www.chiesi.it
www.chiesi.it
intranet.chiesi.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
foryou.chiesi.it
incapsula.com
incapsula.com
incapsula.com
apps.chiesi.it
intranet.chiesi.com
incapsula.com
foryou.chiesi.it
www.chiesi.it
incapsula.com
incapsula.com
www.chiesi.it
foryou.chiesi.it
videoistruzioniduso.chiesi.it
intranet.chiesi.com
incapsula.com
incapsula.com
intranet.chiesi.com
foryou.chiesi.it
incapsula.com
incapsula.com
intranet.chiesi.com
incapsula.com
incapsula.com
foryou.chiesi.it
intranet.chiesi.com
foryou.chiesi.it
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
Intranet.chiesi.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.chiesi.it
www.chiesi.it
incapsula.com
incapsula.com
www.chiesi.it
Intranet.chiesi.com
foryou.chiesi.it

Certificate

The complete raw certificate details for www.chiesi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbjCCBVagAwIBAgIQWqBcJEzIsKI3qkx68wZ7lTANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yMzA3MDMx
MzMwMDlaFw0yNDA3MDcxMjUxMDlaMBgxFjAUBgNVBAMMDXd3dy5jaGllc2kuaXQw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyGk2P2bgyGFBFOAv+o6p4
cQ6frG/0+s5AzIYsDHNF+RTOWmv4VoLnI74Bph0seA6SqoOVSuonz4Ych6ny1It0
WhQZiT1PM46R+o/8urQc85XRRpoMyvFieEjSrTHpcYn7Oos8Cayx7v1Gv9jQvqUX
GRFtZtn6aG/e1JDdMLm51SfOP5vuoYHg8g/EH6pepRYN+ypQsDb3sT+RmEF9NRJ+
tV0inzKjmspy4GmQE3VYgYqnVbMHYaR1dT1MpmzgbWpioPGgVDBe74fLbYwPmYED
1JRwffaHYi50LtJ1UoQfcSUdDafAMadNBPJadL1pGGS7YdPhd96ZghSpWO7d5Hv7
AgMBAAGjggNFMIIDQTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFEKDbYB8CYRn
/YBXq/Em9XfIIoJxMH0GCCsGAQUFBwEBBHEwbzA6BggrBgEFBQcwAoYuaHR0cDov
L2NhY2VydC5hY3RhbGlzLml0L2NlcnRzL2FjdGFsaXMtYXV0ZHZnMzAxBggrBgEF
BQcwAYYlaHR0cDovL29jc3AwNi5hY3RhbGlzLml0L1ZBL0FVVEhEVi1HMzAjBgNV
HREEHDAaggljaGllc2kuaXSCDXd3dy5jaGllc2kuaXQwUQYDVR0gBEowSDA8BgYr
gR8BFgEwMjAwBggrBgEFBQcCARYkaHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVh
LWRvd25sb2FkMAgGBmeBDAECATAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDA2LmFjdGFsaXMuaXQvUmVw
b3NpdG9yeS9BVVRIRFYtRzMvZ2V0TGFzdENSTDAdBgNVHQ4EFgQUFOV8nS26xjo3
4dmv0EVGx4adz/YwDgYDVR0PAQH/BAQDAgWgMIIBfwYKKwYBBAHWeQIEAgSCAW8E
ggFrAWkAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYkb+3GK
AAAEAwBHMEUCIEunFik2yX2D+aiTkkvxmxtun14UVWZaWwoYLiwhkSLVAiEAso15
1xIfZ42IRzJlK/jD/XDRAEEIdecSppd8Kf1le14AdwB2/4g/Crb7lVHCYcz1h7o0
tKTNuyncaEIKn+ZnTFo6dAAAAYkb+3DqAAAEAwBIMEYCIQCfsUD7s/qJsPsMlGjh
7a65JqRqU9dJzRj67N1XNneC4QIhAN9VQlVx5gV6GQIUndNAXr+Yxf+VYmbgKYop
2ui69368AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJG/tx
HgAABAMARzBFAiEApQMaPfGcGuIYfMroj4fx/xc+G2wL+fuH7Y0B6CuevfECIGt+
hrGAlbCSdweeJu+eK9u/MwxO8GY/GKzPtMZmID4IMA0GCSqGSIb3DQEBCwUAA4IC
AQBzkl+pK5xX+zFlsz9U5yLB6Nncutb7Rud/8eHQVaWqUg/s19tjdJ2rEEAPY1D0
i6eN36XSfS7XBIO1vl+6l1uDLscifKtJllqY9xdiDYwmHhIvAcjO01Jf87UIOPWL
M69s/tNxQQuTJcyGFQ1Pd9HoLokrYGvsATpGedf0VMQ/baCAwoBhstMUAQGEqywn
Ou7vPIEWM0zxCLJlJTSCiZzXqgP6pjx/69M/knwJof0CbPENH6O3o+YWd/jS9ny+
MbNx6U0ANWHozSo1nHjPwNfu81azvKrGnkF2z4+rwKRuqIc1riF6ZpQjkv98du6h
jWX0A0gullXiJVcU04MnyWmZXqI5LwlqLg9aJxUxfV5dGdhEFlXxh3jA/LK4jXS6
lBYEJrsVO/qK63YX2hJykR/jA1/0Ad/7zPTqeLwMP1a6CVuPLvdD8JnPGOioXtWt
dbQ6ZBvwSYWu6BzO3PAgVEr6QT/I93gVwhI3i5KbZtlyFFmjjF9N+YsN9fNvVY3H
iVUNV7oTNq5gR2nIdYMdO5VTEPu70t+QvOIg2HM1HuaYzPhCjJeAabg1Yt4w1D7b
8F2+qtRt9LQv7MHen9otkcZzjyJSF1Ari7notpBoGPlU0sLl0Du/xK+cDmulp3Gc
KM471GoIAQMw1Ba4rfAJxSB5qrg4hcDJpyE7legbX1iZnw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hpNj9m4MhhQRTgL/qOq
eHEOn6xv9PrOQMyGLAxzRfkUzlpr+FaC5yO+AaYdLHgOkqqDlUrqJ8+GHIep8tSL
dFoUGYk9TzOOkfqP/Lq0HPOV0UaaDMrxYnhI0q0x6XGJ+zqLPAmsse79Rr/Y0L6l
FxkRbWbZ+mhv3tSQ3TC5udUnzj+b7qGB4PIPxB+qXqUWDfsqULA297E/kZhBfTUS
frVdIp8yo5rKcuBpkBN1WIGKp1WzB2GkdXU9TKZs4G1qYqDxoFQwXu+Hy22MD5mB
A9SUcH32h2IudC7SdVKEH3ElHQ2nwDGnTQTyWnS9aRhku2HT4XfemYIUqVju3eR7
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120463155975668867488332449918210177941
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 13:30:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 12:51:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.chiesi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30562640282783584555417123673916521871333635038709987628940678140611895324221923013943228344230981025767049614574258355198434502829970100869013212516938321594046953996338099119259295578689148245253517476696054321200247659720204028162172854510545715086524746927682579119550654769549820082883238788798043809671772014448828675213999768212525053272503622412159229202232092431767818147129838200316515946844415705050626600468437522177074717751526966473205720374624043529939460296613874489704140832518741094268704461514879239701886926295655924133725969845506675053449113292145036975950654764570945010146742325855627694603259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiesi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiesi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14e57c9d2dbac63a37e1d9afd04546c7869dcff6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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