www.rius.at

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:d0:94:8a:dd:fa:0e:e2:b3:e3:75:c3:17:5b:48:19 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rius.at

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:d0:94:8a:dd:fa:0e:e2:b3:e3:75:c3:17:5b:48:19
Serial Number (int): 14375290503230659211951917890054866969
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2d:2c:63:fb:5b:56:e8:ee:1f:07:06:df:c8:9a:0b:b1:b5:76:f1:cb
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): e6:b5:52:f7:ce:61:4c:c2:bb:60:39:41:be:02:4e:38:a7:7e:ea:30
Fingerprint (sha256): ed:9d:08:8f:bd:03:eb:97:1e:df:ba:3b:2a:c7:0a:2c:44:34:cf:1c:b0:81:a9:f2:ae:23:c0:af:c9:f9:9c:3d

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.rius.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rius.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rius.at
rius.at

Other certificates including the domain name rius.at

(limited to 100 certificates)
www.rius.at
www.rius.at
link.jokateszunk.hu
rxodmsdev.corp-internal.rxo.com
pathshalarishikesh.com
www.pesquisacerta.net.br
backoffice-sandbox.neos.app
receipt-preprod.tiime.app
flow-stage.habio.pro
griller.amavatech.com
app-link.eventswallet.com
www.rius.at
app-stage.rius.at
robertoavila.com.br
admin.pixapup.com
kragic.com
www.sistemainterno.com.br
www.dexquarets.com
app.connected.football
flow-stage.habio.pro
garden-tracker.com
www.ratiochristiosu.com
corsifly.com
www.rius.at
pathshalarishikesh.com

Certificate

The complete raw certificate details for www.rius.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIizCCBnOgAwIBAgIQCtCUit36DuKz43XDF1tIGTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K1JhcGlkU1NMIEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwMjE2MDAwMDAwWhcNMjQwMzE0MjM1OTU5WjAWMRQwEgYDVQQDEwt3d3cucml1
cy5hdDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKCHlku5JgDdabSs
cLlIroAslcGdSNVqpDoCNhYCWBo/PkKuTehh+b20UvkM3LJCHyoccEzLV0vCvgro
ILRfcbS2GXUkjx4w9xWvMY/Gy0Scpk4rCXCrhYzq5ToMAX1c1ForVGcIvJv147TP
5mwDJ03gidJT9MCyFqEPl059SM44se+fNuB0v4xi8HFvIKGf+GtPkW/VhVh/Ngi1
m9TNOamzHHxpkdtVHpJOFACJjgzLcG4e0KaPKM4Oo2CfVBp+s6XNSu2K4UmhTRI+
jDcF/XdryUlBoHhNxTVmPi45X4/pGGCYIqlOMqVPI1U/AI4Al95Ipb0uYPs6z/hR
rluT96MNjgC3+F43PoAFu3XR3yfvj3c347cdost3CycJGHHJjjrpjd/dYtcxWq+r
LmupeJOHX83URc0NK/szrLLN1ZSnh7+mXZdTw/Ifaq/9OqgHPdZ8rPeKGUhoEiNf
r0RWVhY2oI5mTRZFrOuPfNVULuyRCSVXVnYIUqlxt81QPFdS9RYfbEsnTP4h+Ubg
MwoOjLJ9g6voM2+t++P7vTQ27iAwkjXk53qZfWAq4f5ee8MWemCyY8ORw5YJEfQQ
3ugdva5WZmLpmNzKaBZUhxRPBvay+ak8KwtEKCdX0TydoTqqh3KdRZ9jBODssCbw
n9OlU0GYKmGGymRdkMKcl+AxKDhdAgMBAAGjggONMIIDiTAfBgNVHSMEGDAWgBTw
nIX9op99j8lou9XUiU0dvtOQ/zAdBgNVHQ4EFgQULSxj+1tW6O4fBwbfyJoLsbV2
8cswHwYDVR0RBBgwFoILd3d3LnJpdXMuYXSCB3JpdXMuYXQwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGU
MEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vUmFwaWRTU0xHbG9iYWxU
TFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRp
Z2ljZXJ0LmNvbS9SYXBpZFNTTEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0Ex
LmNybDA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcw
AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8v
Y2FjZXJ0cy5kaWdpY2VydC5jb20vUmFwaWRTU0xHbG9iYWxUTFNSU0E0MDk2U0hB
MjU2MjAyMkNBMS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIB
agFoAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGWgpwegAA
BAMARzBFAiACxAEGEv4xZ+9pKatu0Vzr/IwegXDf6ZR5RrXj68ZwGwIhAK8TTduq
+uDPIRxx9W1u2/f+n0OP9MOforDK9lIMD9cOAHYAc9meiRtMlnigIH1HneayxhzQ
UV5xGSqMa4AQesF3crUAAAGGWgpw5AAABAMARzBFAiEAgZcM4gtyPb5JYHYdaMNW
VrudqmZzBmjvMAnl21aJyv0CIG4nwQzKTOKmXwSPPJJe0sxxe/Hiq4Wv8oP0No3g
ytCOAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGGWgpwmwAA
BAMARzBFAiEA8R7WxZUARRzvYXNMCEbN9V7JnnHzNn64hyk53zIOHeoCIDay7iyX
xty7tkudoc9/JCcHZbKJS7xLuL8+mw0o1SekMA0GCSqGSIb3DQEBCwUAA4ICAQCh
080fRiRrsmUgkXAKCKmlRJ4Ik1tBC9EEq+mjk+fEjj4yW2kEN1753vMurCNqcUs6
H8Sv8Dp2rR6uQvosFVbh16ZL/5x5FMFDq677hJ5pFzzqrFp36XAD1oWb0f+m1Pod
LuSD8oGuYA1/6YYR2pwmgIcu/6KLTCk3pB8YDXBxyDaMbSDVdiWFdbKG+kQMcNMg
mw574AHvJG4B+oE6MrQ4cuvbn+ka2UmeylWOUvWHwj6ZcL1Bt11Gs7hOC0djqnWZ
z35skxal9nxbMevURhP/6hVSEQD/wk3Z3gxXFMUymW4l8s9ZpG5rhUyp8jYATQC3
NNT+l6mhp3lctGMm8jYEk2s44LGFXU5cKl6jEcKKkRQKSf/fXaqHkILPmbMDjzv8
JBuGBFYdA5eFuyWtT8qoYrqilDx3BmQc6Ab+NpRwlg6Yp8MpvvU3Mofx4omSb2ww
BVWqLubCcb557q8aPAuXU2OyPe6lNLUTo10LmSEpYNn/qtJ/qVH3GmT5E8oiX++h
BH8ZJebVR/d76aq5sJfwE11C+w989VvMYsFzqt+v69E494q/flQhHq7jTigR2ym4
SjCzPKobHeNJ/X/YPj8IsfagyAERYSDsb3347RCHHcY6BPdrsMFPB5nOH9woRoyq
/rWJcMuOWafDgjMRN5sxTdi9186GKWH8Z4ZtnK7w9g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14375290503230659211951917890054866969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rius.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654903781662254313451200794617676709022293235752168081085285906438619091387875291824908876390568458505962738992855916136391344522528333150986567806557970576338062085852569342550094673777472276924569567636382883599288728755334851940857342044112382759397848279923562241529420340049173208808391685423783389921361455229845190311092207257689676029518544435296454405906517934660529060658413164980857800179095147175070171777061357816348627983351122333862916206190838550337907383035307766749707811095149450144820744230252001001133527646062833437771006268790481526214984483142025107050704692618498130445156244933097060332106428911454025077128669401628764878887903055736847729511093568750780829232712271312306859431142066675386410894264828974140878970562179504333530010265926781025704901966902554204334244404871883522569836600102416310317520599365633199607888787720159993087524927583856217160947625800415397892121499369089741541462538285835695341241298041064680399618398078934973908680747660024696648360700233400555591405284077738277507391613740220969557502723561802441631155090676779669627265669362856495033092307667541327110408813190598732257813103232594611858935072297091606647696756705954314262299965869488902572260042095323906312227010653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d2c63fb5b56e8ee1f0706dfc89a0bb1b576f1cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rius.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rius.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001865a0a707a0000040300473045022002c4010612fe3167ef6929ab6ed15cebfc8c1e8170dfe9947946b5e3ebc6701b022100af134ddbaafae0cf211c71f56d6edbf7fe9f438ff4c39fa2b0caf6520c0fd70e00760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001865a0a70e4000004030047304502210081970ce20b723dbe4960761d68c35656bb9daa66730668ef3009e5db5689cafd02206e27c10cca4ce2a65f048f3c925ed2cc717bf1e2ab85aff283f4368de0cad08e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001865a0a709b0000040300473045022100f11ed6c59500451cef61734c0846cdf55ec99e71f3367eb8872939df320e1dea022036b2ee2c97c6dcbbb64b9da1cf7f24270765b2894bbc4bb8bf3e9b0d28d527a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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