Registered Mark Certificate for Principal Financial Group, Inc. Issued to Principal Financial Group, Inc.

Certificate is witin its validity period

Issued by DigiCert, Inc. (DigiCert Verified Mark RSA4096 SHA256 2021 CA1)

About the Principal Financial Group, Inc. Registered Mark Certificate

This certificate with serial number 05:2b:cd:cd:e6:69:e7:11:8d:51:45:0b:9d:ab:03:f4 for Principal Financial Group, Inc. was issued on Thursday Jun 5, 2025 at 12:00AM by DigiCert, Inc..

This Registered Mark Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We did not find any compliance issues with this certificate. We hope this Registered Mark Certificate review for Principal Financial Group, Inc. provides you with the detailed information you were looking for.

Logo for Principal Financial Group, Inc. embedded in this certificate. - All rights belong to their respective owners.

DigiCert, Inc.

Organization: DigiCert, Inc.

Country: US

This X.509 certificate will expire on Thursday Jun 4, 2026 at 11:59PM UTC

Certificate Details

Serial Number (hex): 05:2b:cd:cd:e6:69:e7:11:8d:51:45:0b:9d:ab:03:f4
Serial Number (int): 6873582950893221629576052666385761268
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 6d:5a:29:66:5e:d5:53:ff:43:09:29:3f:4b:7b:28:48:2c:81:ee:eb
Authority Key Identifier: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (SHA-1): a5:13:b5:da:9f:de:1c:f9:3b:76:24:e7:14:c1:df:8d:1f:ec:80:68
Fingerprint (SHA-256): 6e:dc:57:f4:d9:cd:87:c0:16:17:56:d2:e0:3a:c8:c3:84:d5:49:4a:54:52:8c:2e:0e:dc:52:a7:60:ed:5c:4c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation Information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Principal Financial Group, Inc.

DNS Names

Email Addresses

IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for Principal Financial Group, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

None

Extended Key Usages

None

Extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

principal.com

X.509 Certificate

The complete raw X.509 certificate details for Principal Financial Group, Inc. in PEM and ASN.1 format.

Certificate (PEM)

Public Key (PEM)

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6873582950893221629576052666385761268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3381855'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Des Moines'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '711 High Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Principal Financial Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Principal Financial Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5074931'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24754777196985743152012738982728473111854184803813006964850172272294480405212560120507388681497946329025673855031861512101380668687909528562314571230954286086958994671453665314146345047977761855337004971707748608811883856137478852885485058358525259998167358329585272860927784255486783120122678294039893888330470032741403166279829830713454479344592110150959069464350441490427526020839949428408262925174342819767166184567301912360454089416924124888860170920331577118030931425637916403970921674452584534795146921130717843545886195140020550181744976926511244541322745714997191105879452983442719353659930233261000883890283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d5a29665ed553ff4309293f4b7b28482c81eeeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'principal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															7de6f7a77e970e5c8cafd766a58d95b43fc8ff53
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAACo1YyXIbNxC95ytYzBUAsS8uyYcwSfnAVOXkq0qeMCIrjKSSFMr21+d1N2ZIjmM7PlCNAQb9envd46vn493i49+H++fr5e7l5fHNavX6+mpeg3l4ult5a+0KJ5Zy5M3Hw/7+r/866FprK95dLo7bp+f9w/310hmP1X77+tPDx+ulXdiF98mU4sa/y8WH2+ft708Pf+4P2+vly/7+k358Xr79YbG4etm/HLZvH5/298P+8fZwc7z5cPhne/N090EP+6fhsL1ayRE6fLfY/3G9lOf8Op7JajFAtXPBxFqXi+GTLFpqy8XT9bJVkxOeQ//hevnjr/xvueI7V3dnV29uP22fbtx49538PZcgP96+7BY4/JtL1hRfVW4m+jpY7ZpJNmmXjPdeh2BKDTpkY1Ptq0HDJTl5ZXVMxjqvvDU21HEVswkxsJ7BKl9Mckl5Z5z1CtpidSpWE0tQKRjr/VGHaFrDvc6b6rNGMJzGCzkAhzW5+HHlg/HBE0pvXKyqGpfw1JqGS4E85L4Q7XjZ16SscgXvqWyiC12GfbU14AMS2JkAuSq4uzanHeCkTEdCLkeoarGsXSimwYIGR9WoRr/VYmIq6tKNn6cwWVvyuofpyzBcBCLA8QzMGsdONq5U8jHgwgbTCGVsQXmTXTxo2Nbk0A5/aj36iCClHfInu6Ouxie/6H4wNvMVzStyeVJwZ4sqmuKayIPIVsFKh4Cb0lqX4VYH+xHWlghfMDnCARG5WfKIV83wi+bN7OnnBeyEx+l8pqBHBN2kCMVQ6WOAVaVE2GwbNmpo712irCQDAbTkogVohNuDyN1IHAkOBkSTWoWTEGoR2WtrwhvJ2uxNidAfobiOMNQM1ma2BvCISDu8EKH6iEQMKcDX2WbRD6AwdQdEzcOZLRRFyYUgaHG5yKiGNFBQk3XYCC7xI33aXSekJiqGFalzrReLzz2DfkuIrqd4YDM2AAi2DuxMAEhUIBRh77rMmqku4VG4uFHBMpiz7Z3mW973O2F8gUZKG4Qx+NHj9DpKwfZs4RRl+3F5zHWeos3GI4rPhfgOZdKOSCwf42DFDYrzAChsPSGC3HVZPKlUyeAGaHKRXiDwpOMAVnGOVCS/LuCqKBUZS1QFRFb8iFxdGrK5XMLQCgUWXBKJWtxUPz6RcjZFk51d5F+iIzrAG/pso2/TLjKJktgnp/opEnlfdKxLBXrHYfTI4wIPcZYyDnUJa3O5JNgIZ4MduZiSwlGLn3dayEBWoyJQVJiOqss3Z0vc3ODOznedltiIEy19m5dOQRf1Iz2hVnDbVNiodNxYc5wKGzJKOnjKYskvh3jmLvPvkZpDrOOVzhHSbiWajWFeRrW3QqwtlC5kdWnU5nJJJIUWQJRJZOerQwJEGxkIVTK0emKgUKWyDpK6UBjdqTTokTMhUJnXMiYGNdIxL5DflpgPnR1OgEnJdZlyAZVB1IV0R32Mz6hdFREn2gstM+3BY3B+xX42PvfsO+gRHCpykERV3A/wKNfcy06iyfLQ69Fq1i4B7zKYKeXJwxXTAMICvspofQ7R4NQRn6mZDzezNXm5jMkG7gmN0VFqsVM1TQqxy5wgR5pNWk49kXpuo9+DopjQSmpigmL6klQSGfxR0LytJJGeCKSSy0IOB/mj+ZLRwBLQPwrDsxmewtrVCa6awd/M1mQgWnKhN6ROv8MjI9N9k02ev8Iia+eRfxTDTiAOLSr5MjHIDMtmtp7aifMYk0r7NpWs6XbrplNq9tZ8Tb5Ae2zUpxL1lHCqE0rFzhlIUS1UjmLwReSBmiVVHbqjq6V7TGSM5pXqBIGhDdQfHtGg54EN0lQjPErhWIup10iS0ZEYZrAy0jG/8JChhHnYZDWe+Z8JhKIajSOzEClbaK7JLDsG0LyIQwdjZeYFjtDHX86BI8yMNnGLJOTMsJrGa/w0nCJxVAYjbVJ9tMD1KRXsJy531MRBhkBO8GE0gnTL3MVMpXhuEXkQeiBisU3aLkvIqhCONO12M9/1yJ7HOFsi/rEopYiZMPVYmaGejw+u9ERgUTDaPp0IQQnzRoPxTeQvWrNUBYWl8xfF432HcprI48/xlxQuJvLV6Rtp9b3PpYJ85iqjDPVDVwuVlexGywld5t+hA9NnO/psn29/lidyRp+dYQaqlWoYQwwxC4YZzlTRrmZomFL7E7SyjEGUiZPxgR/6ICIyfmM+MQ41YN6WDX126FkWatr29BWBDeBDslELiPhGqIKv9mEL2tUMDePLBo2ALQpZKG8H7ZUYmsiTCoyrnfK3y8jHQgyPS1KQOsMzfJBRJdGnCOUA5Xflj5myk2Q6CIXyHTspwOO0wHsjy4+IGl4lGy4QztfdxzaEaeIGcOEQR5nAPEGVH/0kA/boaaCvRfhuNGc6Q7hw1TR2fzVnpzQdv/zpzxX978fbfwH42ssKJREAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER [0 117 0 85 89 83 174 48 150 0 128 108 210 235 82 8 166 201 158 147 24 40 172 16 86 180 66 28 85 54 21 76 95 117 172 0 0 1 151 65 55 177 155 0 0 4 3 0 70 48 68 2 32 17 69 206 3 99 27 225 215 172 183 63 141 159 187 181 205 46 227 7 48 238 248 56 59 195 235 100 177 107 25 60 74 2 32 58 92 145 124 8 83 53 21 141 13 17 146 159 64 106 29 186 21 151 190 228 51 236 68 58 158 190 118 129 182 51 212]
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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