DV SSL/TLS Certificate for www.farmaciacalvisi.it

Certificate is witin its validity period

Issued by Actalis S.p.A. (Actalis Domain Validation Server CA G3)

About the www.farmaciacalvisi.it DV SSL/TLS Certificate

This certificate with serial number 3f:94:07:c1:de:dd:2e:55:cb:49:a8:c6:cc:7f:ff:b2 for www.farmaciacalvisi.it was issued on by Actalis S.p.A..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.farmaciacalvisi.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 3f:94:07:c1:de:dd:2e:55:cb:49:a8:c6:cc:7f:ff:b2
Serial Number (int): 84509981006388508894625802847418056626
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 66:08:1f:d5:98:a9:99:a4:b8:8f:6c:d1:78:25:77:7c:d6:5b:ae:fb
Authority Key Identifier: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (SHA-1): 27:e2:a2:2f:19:b7:f1:8b:8e:2d:3e:78:9c:b9:a9:79:ee:26:c5:85
Fingerprint (SHA-256): f3:da:19:b8:b9:aa:ec:f6:02:9b:d2:f7:ec:4e:68:63:61:a5:14:e8:ea:bf:57:d0:c1:52:09:91:07:27:82:68

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation Information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate www.farmaciacalvisi.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.farmaciacalvisi.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.farmaciacalvisi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHiDCCBXCgAwIBAgIQP5QHwd7dLlXLSajGzH//sjANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yNDEyMjYw
NzA4NTFaFw0yNTEyMjYwNzA4NTFaMCExHzAdBgNVBAMMFnd3dy5mYXJtYWNpYWNh
bHZpc2kuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPy42ESyHG
Ym5hJFmRkHyXLLWmkC/Bc796M0Cd+W0xCNVwQ4DybfcI7CZf7zgKJJIveZQeiUAG
yiIvLG9IhnZV8bBETe3bdF2FEmJ9UVM3y4VX9w1kDeyLfQfschAsXla8ID8MdlA0
MulKgMcMFFNX02eOoySzS5Huz0w4skHZ1Ivr/mPUEvYJCymTIfS2tC7emc7adkr7
kzbq5qWnIrIiIHG3a5ailZTo8SxW59O6io/QWGKpXkLNirrTameZ7QAmbNQEGCph
rTH/jYSBQCFAWdM1UluY2bNI78k3CWI23Vomo0loIZmVAeOJDGjPqKZPnmp7Ocmf
Mzr8I5t2k/2JAgMBAAGjggNWMIIDUjAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaA
FEKDbYB8CYRn/YBXq/Em9XfIIoJxMH0GCCsGAQUFBwEBBHEwbzA6BggrBgEFBQcw
AoYuaHR0cDovL2NhY2VydC5hY3RhbGlzLml0L2NlcnRzL2FjdGFsaXMtYXV0ZHZn
MzAxBggrBgEFBQcwAYYlaHR0cDovL29jc3AwNi5hY3RhbGlzLml0L1ZBL0FVVEhE
Vi1HMzA1BgNVHREELjAsghZ3d3cuZmFybWFjaWFjYWx2aXNpLml0ghJmYXJtYWNp
YWNhbHZpc2kuaXQwUQYDVR0gBEowSDA8BgYrgR8BFgEwMjAwBggrBgEFBQcCARYk
aHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVhLWRvd25sb2FkMAgGBmeBDAECATAd
BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwSAYDVR0fBEEwPzA9oDugOYY3
aHR0cDovL2NybDA2LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9BVVRIRFYtRzMvZ2V0
TGFzdENSTDAdBgNVHQ4EFgQUZggf1ZipmaS4j2zReCV3fNZbrvswDgYDVR0PAQH/
BAQDAgWgMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQAN4fIwK9MNwUBiEgnq
VS78R3R8sdfpMO8OQh60fk6qNAAAAZQB1SEbAAAEAwBGMEQCIDt6q8WsVDTQRX4r
ue40lypO/UcdHEYZVD2PdfI6kFvdAiBPA/cGFqATmrf/ewYTDKDNj9iB3Uzm5+s3
UJ/jdNjIMwB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABlAHV
IR8AAAQDAEcwRQIhAPeUSo1vuazi73d2wY79OT9pRxIfyyL0qUqhefT6cdI8AiB/
rUqzcuydTWIUK1GOwXh+8mPx42Ssx3F6c/QGoL+meQB3AN3cyjSV1+EWBeeVMvrH
n/g9HFDf2wA6FBJ2Ciysu8gqAAABlAHVIToAAAQDAEgwRgIhAKaVStE055TeCmcH
wVd64FLrcrmU88qSrLvJXSeOkK1WAiEA9trW85xRsMR5YI7WEFIsaXiz5ca4LMEg
mdgEvPS0xyUwDQYJKoZIhvcNAQELBQADggIBACmJ+KBGXUPEBAf3q6TIwHXgokkx
DjoUJ7/OydsJQvMyRJRAa+J5oFv95xYcVv2j4SmLe3E2CJqc2tVDkmTIzvdapp+W
AnOUEPMRmne1EXbNvcPd4MPFhBBSRyriMXyFPuNBL0iLvNnhSau66XPJMYBHKE/c
NZx2SchvzMl7bH3TaVEMVIACRSBxRQLB5y6Qoq7DUtCGxpKCg18t0u6jP3ZM2+Ef
snoXrKD3swaM5QLxqGWcVEmGws1DpIQwKuD05hXBOm12GUvjJ+KfYSORuJ+4gLoe
KuuPpBEMf2E/9tlCeiq2sskohrR8j1Ukp0CEnGqoFsCr5rTXMHaece8aW2KbVyVF
IVRLhSSXO9Zi8+T+ybfh6kYDGG82fVFvGIKPV02Pen9gaJeZ6aDlMOjdc0dTBEJT
SYYl26u0Qayrf9o7a90KnJ8FSy922yU1dXnKqxHOdqqnsL5mpmjlJWnqXUgTF0DP
m+cSYLB9iATWTduPi/nOeEibl+qj1+lnjzHlskUPOrHV2btL1HxV6Ij8sHOyynnx
s8jwzTtM3knRF5k5Dn7VnzEcMDPrEGXh2qUnDhmFkxTRXYnfW0SxZwkc6Cw807T9
/qW5Kv1CpyN7LV1cTWPp9jXRca9mhxFyBVK1eNDxM1OeDyETFIg+ARDYLVfIOhm2
ehd1e69EL+by8lX5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8uNhEshxmJuYSRZkZB8
lyy1ppAvwXO/ejNAnfltMQjVcEOA8m33COwmX+84CiSSL3mUHolABsoiLyxvSIZ2
VfGwRE3t23RdhRJifVFTN8uFV/cNZA3si30H7HIQLF5WvCA/DHZQNDLpSoDHDBRT
V9NnjqMks0uR7s9MOLJB2dSL6/5j1BL2CQspkyH0trQu3pnO2nZK+5M26ualpyKy
IiBxt2uWopWU6PEsVufTuoqP0FhiqV5CzYq602pnme0AJmzUBBgqYa0x/42EgUAh
QFnTNVJbmNmzSO/JNwliNt1aJqNJaCGZlQHjiQxoz6imT55qeznJnzM6/CObdpP9
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84509981006388508894625802847418056626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-26 07:08:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-26 07:08:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.farmaciacalvisi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18152453236822175795920455298705212491417657895422998748726631845667163300927595887489208134853513006196099209597712974365440190000399993460774298756906397963297623124718673215387814255984994448303685813099305191859664984469581177976405292474459912331042023241065421501205852550221088892422561502396176212386551860765730968813426078632225956280301610830163932963517597478504134325078276876100801289187358374276237441166084847987577662862046295402273581274732224794296669094427313238729673725852400243941388577077710851422397683879459618540398417936524958977924754038898567245841058834176949151889447132708949313453449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmaciacalvisi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmaciacalvisi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66081fd598a999a4b88f6cd17825777cd65baefb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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