www.governikus.de

- Governikus GmbH & Co. KG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 60:52:69:37:73:cf:9d:e4 was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 60:52:69:37:73:cf:9d:e4
Serial Number (int): 6940725662618459620
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 9d:ca:2a:8b:bc:41:b6:d6:85:ea:a0:52:a7:50:4e:31:85:32:75:80
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): 84:68:52:f6:7a:ce:c2:b3:f3:60:6e:62:04:3e:28:06:de:d5:dd:2c
Fingerprint (sha256): c0:d9:0a:66:7a:a5:8e:2c:75:d4:1d:1e:53:da:56:c3:1a:74:cf:f4:c5:1b:28:50:79:76:5d:93:d7:3c:49:87

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList

Check the revocation status for certificate www.governikus.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for www.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6940725662618459620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-24 13:02:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772512470813345649909512857266564839190775545914786726522506405699194396129040734916100953607356407703318568164045481578165266203781164107625012050133880223205945720770923658291307911680885875576811498449940858212387067792850573757804559993755796860888903184936722154742161104745786519116514797609790109840423519488666546188212023097056042667557781782617726348856987052099043875908439097548487717906020496778361469907108922437688722742449176965413043467586546150414025312369501058357137770826200255412853608813522833978632206433107304277535638006035408702158302710851078446107989201079231195280586553360149306419421040837866576347315388490489282049939219875147839638536666345132388855992021449389592106201371801619065729832049284641924167155962818852323040234307826731737607494118403582892867507546151507343650958462814077756194934269914394761551346416229327426394420868916149235845297911986009389220549439590330000810440653247854290674436946390963244019643401404562393165443423205664889830869676529711521348778800445015152877308759805464713777271380480078269387486189307707043863710298722367440008723071995183283836608959135598227624936223497299060529166136989433650461880400530967069012640198106823399959491207662618725572540251251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dca2a8bbc41b6d685eaa052a7504e3185327580
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governikus.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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