REWE Markt GmbH

- REWE Markt GmbH -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 09:d1:b9:7a:00:b9:51:34:1e:59:5c:7f:0c:4e:17:7a was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

REWE Markt GmbH

Company registration number: HRB 66773
Organization: REWE Markt GmbH
Address: Domstraße 20
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:d1:b9:7a:00:b9:51:34:1e:59:5c:7f:0c:4e:17:7a
Serial Number (int): 13052003917334558879506145395461724026
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:41:28:36:d4:e6:a2:13:76:a8:03:9e:eb:9a:12:cb:6d:a2:a5:88
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): cc:67:29:a4:14:a6:72:e5:e9:7d:a4:03:9c:72:46:90:0d:b9:3a:ab
Fingerprint (sha256): f8:e5:3f:80:2e:a8:70:0f:16:22:b6:db:7c:11:4b:a8:a7:da:2b:0f:46:ff:67:0f:18:04:c1:bd:f7:73:3a:78

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate REWE Markt GmbH

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for REWE Markt GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailing.rewe.de

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for REWE Markt GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyETZYRLCUUwSKgtvY4Gk
VorGKud6JJ8G5gLyIwcGiHnPJg2QXKo6Q4GE7U4wEZv6Q/97lWCEQZeknYobVsvd
wOPKXfQxJ9/mTtmqWCGdNOjT8ARTlFbmipalQQkfTXnXhUj3PDC0wmJhsHXxtxbW
Oow0VWFzkm7r1O9x4BcCsZsodnlwumhWVoJf5aarfmc0xYacX1IXHhc4ywt/IJgD
IymmMkf8LxtvVoAQVNcWTWbNeuPpEdBtiIsLrttezjtFcg0pc3HFkXNwu4gfh4kA
F+c/EKmsT6IJbuA8Js7r7yPSEheDBN7qlVCYtqpQVME4a+1zHhhW/gQbuxulQlVp
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13052003917334558879506145395461724026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 66773'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domstraße 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REWE Markt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'REWE Markt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30645951'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25281611768261224442962155849743155532521285701598913390172122161323099094849307177768903932722113498615680938041226554261536320859504257224903201554942499323195398497527538772934301633478590665759476237293215016297182385377027846021880503075582675592075783651150848759908277800892092294780464757534835362240916190600641516022207084095343793885734695747433300989020291029609407363054715586755530620076018733826897973267407624422558047987097414262741343890182176255938513152737371858677899675198656575225948911209665223888233086368490267466816528721916916251179699581931825803141105576869246964543731985945127395092829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55412836d4e6a21376a8039eeb9a12cb6da2a588
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.rewe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															5e6a51beb6525543218f87350414147768b248f5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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