data.onemarkets.de

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 79:f2:7b:92:30:5c:0b:cc:fb:5a:5b:a4:99:b4:72:6d was issued on by Actalis S.p.A..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 79:f2:7b:92:30:5c:0b:cc:fb:5a:5b:a4:99:b4:72:6d
Serial Number (int): 162095629648399782519628569974561600109
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 17:1f:b5:7b:63:fa:1a:80:8e:49:f4:89:15:f3:1d:ec:d8:4b:ed:1a
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 1c:d6:a6:24:a1:27:1f:8d:ee:41:fa:2d:6d:83:d5:b5:92:bc:ba:ff
Fingerprint (sha256): ec:18:2e:03:be:3f:e1:ec:ec:ce:75:e2:d8:89:36:87:f9:cb:96:7d:99:a3:29:01:40:e7:de:27:c2:5a:75:23

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate data.onemarkets.de

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.onemarkets.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.onemarkets.hr
data.onemarkets.hu
data.onemarkets.ch
data.onemarkets.bg
data.onemarkets.pt
data.onemarkets.nl
data.onemarkets.de
data.onemarkets.ro
data.structuredinvest.lu
data.onemarkets.pl
data.bolsa.unicredit.pt
data.onemarkets.cz
data.onemarkets.si
data.investimenti.unicredit.it
data.beurs.unicredit.nl
data.onemarkets.sk
data.onemarkets.at
data.bourse.unicredit.fr
data.amministrato.unicredit.it
data.onemarkets.es
data.bolsa.unicredit.es
data.onemarkets.eu

Other certificates including the domain name onemarkets.de

(limited to 100 certificates)
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
data.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de

Certificate

The complete raw certificate details for data.onemarkets.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162095629648399782519628569974561600109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 05:59:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-07 05:59:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'data.onemarkets.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781035885987263798943492145795920935564078410812984057181300991889302485248541091439088308479111162046719356336968837769927047997839472045865756543385486844902550771294998400294547914366774446017345219299624622440968866853341276652629065209981215988578832339567664799306992979310224451413380698829015750300136646365145039231995215737829880610033590910715743743621746136282214325816430154829944511916704285252192488589888752148894412112658294156333739472457034164932126015642126027985378058183403837223575790610028478027351492131390752311768176694076634080756330148457122842432518716051334365809288052114489197388338325872986717759476992619602873382236769220525022118713880594927557109017396553943468164107142825979388787982222411517357051526919339420801741887209043733902704098482482469380907780578272544726558297948464740794857439108303499218550703823371363923700734891315584414469679753956671855618672919125400278178474181917566593034661606588093268675922998597205499860507841569958080053610911637945861995256344941040127802729566859185751169630442732004874739006640600968558105899723827251485450006251256293264185658499345808675710713309625064061045593529119977608137582431546126053062530982006618980820155923744931013498814934081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (495 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.structuredinvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bolsa.unicredit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.investimenti.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.beurs.unicredit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bourse.unicredit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.amministrato.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bolsa.unicredit.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							171fb57b63fa1a808e49f48915f31decd84bed1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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