Roku, Inc.

- Roku, Inc. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0a:01:f9:fe:5c:71:b4:30:e2:76:a5:a0:ef:ba:a0:96 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Roku, Inc.

Company registration number: 3582593
Organization: Roku, Inc.
Address: 1155 Coleman Ave
State / Province: California
Locality: San Jose
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:01:f9:fe:5c:71:b4:30:e2:76:a5:a0:ef:ba:a0:96
Serial Number (int): 13302542727262361894653156628943773846
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:e1:90:4f:94:fc:fa:b0:6d:01:06:d7:eb:d3:16:1d:26:05:5d:49
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): c5:5f:bb:8e:32:2f:7a:09:6d:88:9e:40:a8:41:40:41:17:48:02:b0
Fingerprint (sha256): ec:67:b6:80:65:82:05:7a:04:0f:cd:ae:29:8c:b3:7a:0f:53:bb:3d:77:10:2a:a4:2e:fd:ae:28:76:0e:04:a0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Roku, Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Roku, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roku.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Roku, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/5V7o51c/+bU2Dr3WRq
4FJPvU2MwIruZfK2KthRw79exUbe009pj9KT+ViDL6dYtjUy2hOMY1E9H4BmBgad
sPbrYxmlcVEkexUHw8AvnhMYTGBGjHtO6QonfB9VX0mUNyzduufCPY1RhDC5PyR5
L1Lvd/jO4QoeJ+uBd8Ob2F6Y25n3pEE3wdQsh+sR8peexwMyi9Y2Oqg5sP21g82X
6QglZ1pAceFiTj/DQpmDiHD51/iXwoATyK9T6Y/h5ybpNPZiMZxWfKFk7/WgWBxj
R7ZDaI+ikyBkIyxt3D7ZI/UIC1EReILlXfFrX/SG/QSNLqR4A1nbatRl8ioGZbcy
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13302542727262361894653156628943773846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3582593'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1155 Coleman Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roku, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roku, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5886527'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24741887062293473924901401524789951626936886328545565189372004012931283279981836434921855926155124950554082935163813887880379937511494815903301789148558251555379791172253308441452410575505707101143448804182662602327622685158972767687649656904378329516905722278482917337704669725449003876674119694288219651625200993504818741015237899210493311574244988387915352458922611828747173800703073164344220899921364543890464843912302488657922520222565859420836307890592394502618382039113932740958238217475171709348934479815945938146164910068699928341484648229929734668719639464228128970074291759604942930823394993610526807241361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14e1904f94fcfab06d0106d7ebd3161d26055d49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roku.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															b0b2f9c0def8e2bd45c3838c52a77a786417b234
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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