OV SSL/TLS Certificate for nice-services.de Issued to Fraport AG Frankfurt Airport Services Worldwide

Certificate is witin its validity period

Issued by SSL Corporation (Entrust OV TLS Issuing RSA CA 1)

About the nice-services.de OV SSL/TLS Certificate

This certificate with serial number 39:8c:0e:ac:f5:9b:81:a4:92:fd:7a:24:f2:c8:c9:5b for nice-services.de was issued on by SSL Corporation.

With 11 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for nice-services.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 39:8c:0e:ac:f5:9b:81:a4:92:fd:7a:24:f2:c8:c9:5b
Serial Number (int): 76493214976925307329767157103153695067
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 87:ec:47:27:5a:1f:7a:92:63:13:8d:bb:c2:af:05:ee:f3:61:2c:77
Authority Key Identifier: 68:0d:45:ca:35:c2:e7:9a:1b:f0:b3:84:dd:d5:da:7f:0b:89:c1:11

Fingerprint (SHA-1): f5:76:33:be:26:9e:c7:12:3b:81:14:97:0d:f4:11:ba:4d:87:fb:f6
Fingerprint (SHA-256): 0d:88:c5:0a:96:01:d7:f7:b9:c7:08:2f:4e:d8:a2:1f:67:e7:88:b1:30:c1:8a:8d:de:0e:e2:67:26:ac:c8:9f

Issuing Certificate URL: http://cert.ssl.com/Entrust-OVTLS-I-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/Entrust-OVTLS-I-R1.crl

Check the revocation status for certificate nice-services.de
11
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for nice-services.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

nice-services.de
www.nice-services.de
nice-services.aero
nice-services.com
nice-services.eu
nice-services.net
test.nice-services.de
www.nice-services.aero
www.nice-services.com
www.nice-services.eu
www.nice-services.net

X.509 Certificate

The complete raw X.509 certificate details for nice-services.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIHzCCBgegAwIBAgIQOYwOrPWbgaSS/Xok8sjJWzANBgkqhkiG9w0BAQsFADBR
MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSgwJgYDVQQD
DB9FbnRydXN0IE9WIFRMUyBJc3N1aW5nIFJTQSBDQSAxMB4XDTI0MTIxODA5MTM0
NFoXDTI2MDExMzA3NTgzNlowfjELMAkGA1UEBhMCREUxGjAYBgNVBAcMEUZyYW5r
ZnVydCBBbSBNYWluMTgwNgYDVQQKDC9GcmFwb3J0IEFHIEZyYW5rZnVydCBBaXJw
b3J0IFNlcnZpY2VzIFdvcmxkd2lkZTEZMBcGA1UEAwwQbmljZS1zZXJ2aWNlcy5k
ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkBZK4Ry9Bn3IzJdasj
3xSt4xYR+8nWAxaRPmhzpsc9LcBRazJB12nPq2caDpN4L5r4DryqTacSRf9CdG/f
iT7e4bxH6ao8vwQhPOBku14xH8xjhQg6dEG/7x6P+TSifihoIF0YRXWeypTn18sA
d2dGSLixxLQmJhpncvTaDLXqoAdbreSDRnKPlxlH/oMooMVwjMFWxV5UUia6lszt
88bIazeZ1jsOxNRYEppN86CI8UT/qKZCvM/5hV/9s+v/wu1FuuNVjyK+04Dm1c+x
yx77TA/z6faAG5wOli++7MLoHoWCVi2xDwhOmh+v0qdCEcdEd6GILFVsnpGu2Hdl
g0kCAwEAAaOCA8QwggPAMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUaA1FyjXC
55ob8LOE3dXafwuJwREwaAYIKwYBBQUHAQEEXDBaMDYGCCsGAQUFBzAChipodHRw
Oi8vY2VydC5zc2wuY29tL0VudHJ1c3QtT1ZUTFMtSS1SMS5jZXIwIAYIKwYBBQUH
MAGGFGh0dHA6Ly9vY3Nwcy5zc2wuY29tMIHyBgNVHREEgeowgeeCEG5pY2Utc2Vy
dmljZXMuZGWCFHd3dy5uaWNlLXNlcnZpY2VzLmRlghJuaWNlLXNlcnZpY2VzLmFl
cm+CEW5pY2Utc2VydmljZXMuY29tghBuaWNlLXNlcnZpY2VzLmV1ghFuaWNlLXNl
cnZpY2VzLm5ldIIVdGVzdC5uaWNlLXNlcnZpY2VzLmRlghZ3d3cubmljZS1zZXJ2
aWNlcy5hZXJvghV3d3cubmljZS1zZXJ2aWNlcy5jb22CFHd3dy5uaWNlLXNlcnZp
Y2VzLmV1ghV3d3cubmljZS1zZXJ2aWNlcy5uZXQwIwYDVR0gBBwwGjAIBgZngQwB
AgIwDgYMKwYBBAGCqTABAwECMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD
ATA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Jscy5zc2wuY29tL0VudHJ1c3Qt
T1ZUTFMtSS1SMS5jcmwwHQYDVR0OBBYEFIfsRydaH3qSYxONu8KvBe7zYSx3MA4G
A1UdDwEB/wQEAwIFoDCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUAlpdkv1VY
l633Q4doNwhCd+nwOtX2pPM2bkakPw/KqcYAAAGT2RSW5wAABAMARjBEAiBFL1uO
akYZMl84dKTmlirxZ39rsn1bGbqYkVMAhpkEYwIgcWdO0JAbR4cX7ScxMj+AtRws
xSHdX57phj8cWBG5tVwAdgDLOPcViXyEoURfW8Hd+8lu8ppZzUcKaQWFsMsUwxRY
5wAAAZPZFJbdAAAEAwBHMEUCID1ZDAu0gYv6CtPBEaln4gF71IrXmIMN05tJfvZu
t3blAiEAzCQl/D6AOwucwvJQhnNT41LSx3QVTixBsLGLVbiofa4AdwAZhtTHKKpv
/roDb3gqTQGRqs4tcjEPrs5dcEEtJUzH1AAAAZPZFJa7AAAEAwBIMEYCIQCtZY9q
faoT0UIelzaBo0P8RVwEAwvJ2ajXyF2pzj7nLwIhAKx6n0yINqAP+qh9HpmwGbj2
XSAd23Ky7azlUFbVA7WrMA0GCSqGSIb3DQEBCwUAA4ICAQAH7K6kUSUzjl7fLZKy
MX4dG+rjmGqYoYjK6eu1tZIhD7q5JOueRt+Qx98z84astPAPFjBx/XP/objPC6po
qGavCEUj5s/BZUe/O85VdN9tw9U+P+p3nuZ9kXReFdg2d6KC3sBsl9fnhD+tTne1
XdjAyiNZlUNK7l5IseRnYIHUtLD6DNmO9vxOy3eIaWKeb0VCWMjSdgtOuXjKaQe2
fNbX3Xa7VK0I2L0hc4AAFPgtXjLg5N44IVD9Ft3y9dgE+RFH6XqF+GltvjsfpqeA
tZMHlWboxgPVkZ6bfTFAIK+q/Kh47zt7s0Dj0yUjwOi5wCGfVluewG1LUyKL71pj
YA6725yFxQjrRb62gluPjHcm3jjHvmncrRFyl+zYtuVbk9CcB4vJYkbhdAfxO35x
kbg5cMeZoW2gqQXy/HZsSZIeTWTPkMWvX7dUnqWml46PGgsBnfgSt0bAD1zgZ+b1
YMRKQAnZOqzj331P5pu1yIyFl1TBRpRufbNQDi9tDBVmAXZxd1Cg50XMVMIrN2Ee
uCa1iu3ZDg+mKr0te5xkD6JQYaB4v88RTrEjIsQO6MU7zlxeOiYqn/H5BVBTBJ7y
NeGT52fktzX5362usiayqUduWjDQpibzV2AhshGwVNPffiCHHHPUJPBycTTt1VR7
tC9CVgDHSRC9o67xhC3ERBl1hA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQFkrhHL0GfcjMl1qyPf
FK3jFhH7ydYDFpE+aHOmxz0twFFrMkHXac+rZxoOk3gvmvgOvKpNpxJF/0J0b9+J
Pt7hvEfpqjy/BCE84GS7XjEfzGOFCDp0Qb/vHo/5NKJ+KGggXRhFdZ7KlOfXywB3
Z0ZIuLHEtCYmGmdy9NoMteqgB1ut5INGco+XGUf+gyigxXCMwVbFXlRSJrqWzO3z
xshrN5nWOw7E1FgSmk3zoIjxRP+opkK8z/mFX/2z6//C7UW641WPIr7TgObVz7HL
HvtMD/Pp9oAbnA6WL77swugehYJWLbEPCE6aH6/Sp0IRx0R3oYgsVWyeka7Yd2WD
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76493214976925307329767157103153695067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Entrust OV TLS Issuing RSA CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-18 09:13:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-13 07:58:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt Am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraport AG Frankfurt Airport Services Worldwide'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nice-services.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21334960591776198764189675894378043552076633228199617770632546623564005942219172642588979774154306839282755116887377714919402412905222135633882131585832642458407669666497631255280358122040864580475787706025665085269480044475316456159492023179488514904075452679696895541754345944887963034910637909552718463803448786490609827613265894724543936225697965604804262621069969512269581949912309594730907967763401855958786073279679447565694807298080976576812347069373512424183631564285453116468634930802260177007783934167720112334350448583132378498602297217951927014151234499118165553554162974497394266959912378241889381745481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 680d45ca35c2e79a1bf0b384ddd5da7f0b89c111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/Entrust-OVTLS-I-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nice-services.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nice-services.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nice-services.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nice-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nice-services.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nice-services.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.nice-services.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nice-services.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nice-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nice-services.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nice-services.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/Entrust-OVTLS-I-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87ec47275a1f7a9263138dbbc2af05eef3612c77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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