DV SSL/TLS Certificate for *.rockburger.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the *.rockburger.it DV SSL/TLS Certificate

This certificate with serial number 60:39:5e:32:16:38:77:b1:d5:b8:f6:cb:fa:e9:b0:26 for *.rockburger.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.rockburger.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 60:39:5e:32:16:38:77:b1:d5:b8:f6:cb:fa:e9:b0:26
Serial Number (int): 127903759031076213247881950358338646054
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 5f:cb:ec:8b:92:ec:06:76:0c:1e:8b:69:1a:72:80:b9:fe:18:ac:51
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 8a:3b:70:30:94:36:5f:36:a7:9b:3b:d7:a8:e1:81:31:59:36:e8:99
Fingerprint (SHA-256): 64:2c:03:f5:cb:26:28:6c:27:e9:b5:2c:7c:ed:55:8c:df:3b:43:05:cf:d7:0c:00:4c:33:0a:7c:15:24:8e:3a

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.rockburger.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.rockburger.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.rockburger.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHdDCCBVygAwIBAgIQYDleMhY4d7HVuPbL+umwJjANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNTAzMTUw
NDA3NTJaFw0yNjA0MTUwNDA3NTFaMBoxGDAWBgNVBAMMDyoucm9ja2J1cmdlci5p
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvIyGL78XFppvn79jTG
OUazLJkNB3tWw/ygAj8Xr/AG1xGfANjsVR8beoBfR5xqAXdI5HkqARPJLU/nYJUh
vpNmrzRzXAWa6eFIAyh4GWlLku600A3U+UqmaVSaBa6aAGBcxuZaHXLlyxjy3lG7
XdcgJ/e7M9YSGtJ0a3RwExE2uDEeuPx4GxwDpC3efSMgLtnMnsH+11Epdlf49gJe
s41/U7SxPNZXt5TGabyNX7mTQB2s+0xyalbpUXcMuwoazUuOVGqhFlc7NneqSWEN
OmXds/XMzaU9T/0BASoF20zrtcUUAO51jBqPSt0kspeS8IPE/vCxA5Y9G7aRsIvV
cu0CAwEAAaOCA0kwggNFMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUQoNtgHwJ
hGf9gFer8Sb1d8gignEwfQYIKwYBBQUHAQEEcTBvMDoGCCsGAQUFBzAChi5odHRw
Oi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxpcy1hdXRkdmczMDEGCCsG
AQUFBzABhiVodHRwOi8vb2NzcDA2LmFjdGFsaXMuaXQvVkEvQVVUSERWLUczMCkG
A1UdEQQiMCCCDXJvY2tidXJnZXIuaXSCDyoucm9ja2J1cmdlci5pdDBRBgNVHSAE
SjBIMDwGBiuBHwEXATAyMDAGCCsGAQUFBwIBFiRodHRwczovL3d3dy5hY3RhbGlz
Lml0L2FyZWEtZG93bmxvYWQwCAYGZ4EMAQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsMDYuYWN0YWxp
cy5pdC9SZXBvc2l0b3J5L0FVVEhEVi1HMy9nZXRMYXN0Q1JMMB0GA1UdDgQWBBRf
y+yLkuwGdgwei2kacoC5/hisUTAOBgNVHQ8BAf8EBAMCBaAwggF9BgorBgEEAdZ5
AgQCBIIBbQSCAWkBZwB1AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnG
AAABlZgF0J8AAAQDAEYwRAIgLjQsSE1/aEmc5hzdH5fM7KeQCqfrpgrtuWxORd7a
ENACIHv4gJdYi+JXLVQAWx2jGFQlYCUVBYyC9AzePhPchqoNAHcASZybad4dfOz8
Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MMAAAGVmAXQ1AAABAMASDBGAiEAna5fGTwi
abbK7e4z9xsqvHxyejTgg6snw77zorVHWBICIQCEVP3cQ/aF/Dwz4gpO3FKXrhtL
st1XK89CkJ6qQ3ZeLQB1ACUvlMIrKelun0EacgcraVxbUv+XqQ0lQLv83FHsTe4L
AAABlZgF0MwAAAQDAEYwRAIgQS5aCNqMGNHlSKkFn2NS6EYm3Z2uKnucnM2ESRgW
w+kCIAiBEqeQKd1gDkqRmAlcp2p4vdwxuyq7XYC+Q2OHRbg0MA0GCSqGSIb3DQEB
CwUAA4ICAQBMXPDKp0WICi55Pe76NELhgAhbeaKeu9+dCNaaRyr7+5uFxi0WsSpr
wKzaFxF5GuqFMudY2ch9/avB4AJ2aFeRpDPQcG9I8rnXrH8Nxo5CAdrrKFTBOgJ0
JM7V381y8uViynaB2uDKy2PG+/Y1/GAmiWzvfrelZhtaZDVLrBVVrCU0fZHlsNVU
IbjzK6NOHl7L4DZwvXNcA6dGq3+BDpN9VP8D/0QYNi+FyQsI72TEOHt4iqpaL6WB
V56JX30ARkXlczmF8xLtdMYkjXzUWWXic1MZmb4znAGEL+pb1dZiu0DM5MS6nNzT
0pgVWxsUfhOfbvjR8896tBpNT6tTjTxckzYCz7lMh79kBfyAkPgekDi46XXE2zbx
MeyIe0pkg5OYhMhVrfWXMpDl/B1ddOlWlexn1upFvtD7e6dfr+xst/IOvuWy/73+
el3vq/MsamsGxlCPduCxF0AjRRZ3Og91lj9MJSxqm6SF1MKuU/YmiMC/NDxdpqoU
255GEHnRBMmvYX8vpMrkpgCPIwTUIjUNmPCQzrx0uG97AIvdz0mvrNhLGj/nk3tq
fAjKw6pg4UG8NTCXVmiLA6gZPI7C+gCrV5n5wg8o9BPmtSs2REENS9SaTiGQJmlt
PP9HVL7fvMK3mJvACsF8xnlh+JcbTiJcsQHfUM/01QlFmfp8dxDuZA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8jIYvvxcWmm+fv2NMY5
RrMsmQ0He1bD/KACPxev8AbXEZ8A2OxVHxt6gF9HnGoBd0jkeSoBE8ktT+dglSG+
k2avNHNcBZrp4UgDKHgZaUuS7rTQDdT5SqZpVJoFrpoAYFzG5lodcuXLGPLeUbtd
1yAn97sz1hIa0nRrdHATETa4MR64/HgbHAOkLd59IyAu2cyewf7XUSl2V/j2Al6z
jX9TtLE81le3lMZpvI1fuZNAHaz7THJqVulRdwy7ChrNS45UaqEWVzs2d6pJYQ06
Zd2z9czNpT1P/QEBKgXbTOu1xRQA7nWMGo9K3SSyl5Lwg8T+8LEDlj0btpGwi9Vy
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127903759031076213247881950358338646054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 04:07:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-04-15 04:07:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rockburger.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23705572697936415805235747158020379175123645949544299565446660651798137238381530918517410375502221335519090198756935065692637352494549151486412278820364216789773139113738068633704571842797603074158383757383443427305473978390480564539415823326277472705926133988262452601724878412769292221698425464556762005243250114335080316121684451710434737813690001796268397870355307002604771271686186077330053848339410629556957594036014265667261429264958856278084604950354749539800774246427134507338982583696525820953197094642200561775795080357983281617308941313330372022277434267452792725356639974292226064673825896141772863927021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockburger.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockburger.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fcbec8b92ec06760c1e8b691a7280b9fe18ac51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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