C&A Services GmbH & Co. OHG

- C&A Services GmbH & Co. OHG -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 01:39:a6:16:9a:7f:cd:e0:19:2d:4a:ed:93:77:08:d9 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

C&A Services GmbH & Co. OHG

Company registration number: HRA 12655
Organization: C&A Services GmbH & Co. OHG
Address: Wanheimer Strasse 70
Locality: Düsseldorf
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:39:a6:16:9a:7f:cd:e0:19:2d:4a:ed:93:77:08:d9
Serial Number (int): 1628557587550379849427895538880547033
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c4:55:65:b0:b3:59:7d:ad:60:3a:ed:99:77:41:a7:8b:79:04:c4:09
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): c2:9c:9e:87:8a:e0:77:8c:29:6f:b9:e0:ad:78:df:d7:ff:6c:7f:98
Fingerprint (sha256): e8:55:a3:74:a2:60:47:9f:0e:82:41:3f:18:fc:c7:7b:f4:7c:55:74:df:23:6a:2a:45:d5:31:1a:a2:3a:bd:73

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate C&A Services GmbH & Co. OHG

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for C&A Services GmbH & Co. OHG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-canda.com
canda.com

Other certificates including the domain name C&A Services GmbH & Co. OHG

(limited to 100 certificates)

Certificate

The complete raw certificate details for C&A Services GmbH & Co. OHG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1/LJn1vNYb8/pG1rAO/
w+ce420urOD5kqX5f6k9MacoEZmMLDMvl263jObMrH1XEB6u3TtNjZDoDqLiwQlj
WyIJ16J+AwMvHIzvydoseFoWRRb63B6Sby114DPqiGXmLWYl07OyMnb299qAhzsP
/w6+g3vt/tuGALFMmAhjAyMBR88+vJMI+3GtnhF9pQ3QpGbg6C9YaDyJXOjRjHDL
Jty6UitSd+NGzprFId6nXxUZG5xtAGqHIllAJln60kZaTWsfZD4PLTHmlcg/puyJ
iS9uJc180HmkSogCSDn8ILfhFGgJ/vKSOm6Ic8oE5wgwtbqRCafx0hUnm69xj+9n
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1628557587550379849427895538880547033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Düsseldorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 12655'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Düsseldorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wanheimer Strasse 70'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'C&A Services GmbH & Co. OHG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'C&A Services GmbH & Co. OHG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018452270'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25673613471171397633049223930185261469523982952892870247429604298311132240992792261490033543560337554296339733285136458911255688235233381020344211245001754990794504804811840239961691973691658543733594558084990678055879986942776230928691562124171442386875431621924650180186430008277151605248284552719669863853162755219515970710319826239809736066526641478108031483530743831459445704282064944929400563438190120457959920721384816987800462451511084678971243996020203573227579568472471385159781703698992394622401266597039045032626372793046008991229365704646598097387184822546716571643118957363508444541191786422212175554483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c45565b0b3597dad603aed997741a78b7904c409
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-canda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															23f91c2a9f262c60f074407dd2602b0a312baf4c
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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