DV SSL/TLS Certificate for *.zambelli.de

Certificate is witin its validity period

Issued by Starfield Technologies, Inc. (Starfield Secure Certificate Authority - G2)

About the *.zambelli.de DV SSL/TLS Certificate

This certificate with serial number b7:60:17:42:8b:82:04:2f for *.zambelli.de was issued on by Starfield Technologies, Inc..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.zambelli.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organizational unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): b7:60:17:42:8b:82:04:2f
Serial Number (int): 13213586881280869423
Serial Number Length: 64 bits, 8 octets

Subject Key Identifier: 1e:20:dc:86:e9:d2:7b:c4:52:d5:3d:b6:88:91:51:01:ec:10:02:70
Authority Key Identifier: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (SHA-1): 0e:24:96:26:8f:9e:34:b1:89:65:67:37:ec:fa:16:87:50:dc:fe:d4
Fingerprint (SHA-256): 96:a7:6f:96:4e:5b:05:53:84:03:60:53:ee:03:8d:cd:3d:20:11:1b:3a:df:33:76:1a:c0:d7:a4:cd:35:94:e1

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation Information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-805.crl

Check the revocation status for certificate *.zambelli.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.zambelli.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.zambelli.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHtzCCBp+gAwIBAgIJALdgF0KLggQvMA0GCSqGSIb3DQEBCwUAMIHGMQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEl
MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEzMDEGA1UECxMq
aHR0cDovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMTQwMgYD
VQQDEytTdGFyZmllbGQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcy
MB4XDTI1MDEyNDIzMzIxOFoXDTI2MDIyMzIzMzIxOFowGDEWMBQGA1UEAwwNKi56
YW1iZWxsaS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALvOV7yT
8BI5B1XUeeawzsfOjfHh5T6VuGYX79hazQ7n9lwg54zJNQPMLuVpoOfzaMEmRSD4
kWiVZBZ1hzdGSMPeofbdhnDj4leXM1gonra8FAKIOTu8nez0BonnINzUcQBU5nNm
5LrihAyWrQeP5T2xCcWqQFjoU4UK6GvT1X3HZX7WG+gQ56Uv3YMiouwhwNC3yyC/
Ph95HyKBRBRsVCUJlQREG3Onf2BOqWxgaosdds0vxHkA8wCdzG+00gM5keP921Vy
MERxLZaSbhLSVHZtoJE4hhqOj+AFha2Qm3UQD3UZAY0zYmnqfiQ728G46xH12XIs
xwVFCB5o4G8hPHQ5NKR7vtmOrhZq32FqD15e80NRLycrV2sJ3qANXVRNDZ9YX+oa
oxIAJgPTlrp0PdqEhoA20L5XtvxDB0hjWfR9G4VU7NMrnZsErEsgDoytdodMbbrd
+ThfvdIoTDzmIm505hr7KiCCqHvBUVTMzXyrtB9HoAnb+uKpr9wzCyT7QZpxcdjl
EuMZn7bfG+RfaMezif8wH5TireekRyPjYL7ssVUQRb/vFQHHkV9OXlKZID5XPE4b
13WTSNjDto60K1pSsJO7n7yx9c8z/UafMm3jIFO2B56vVxgvlXKLgC+eEPAVmVl9
hJabrIqINlu8OkBBHpcmbcBrrcUQDOrO61gvAgMBAAGjggNTMIIDTzAMBgNVHRMB
Af8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8E
BAMCBaAwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5zdGFyZmllbGR0ZWNo
LmNvbS9zZmlnMnMxLTgwNS5jcmwwYwYDVR0gBFwwWjBOBgtghkgBhv1uAQcXATA/
MD0GCCsGAQUFBwIBFjFodHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2gu
Y29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATCBggYIKwYBBQUHAQEEdjB0MCoGCCsG
AQUFBzABhh5odHRwOi8vb2NzcC5zdGFyZmllbGR0ZWNoLmNvbS8wRgYIKwYBBQUH
MAKGOmh0dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3Np
dG9yeS9zZmlnMi5jcnQwHwYDVR0jBBgwFoAUJUWBaFAmOD07LSy+zWrZtj2zZmMw
JQYDVR0RBB4wHIINKi56YW1iZWxsaS5kZYILemFtYmVsbGkuZGUwHQYDVR0OBBYE
FB4g3Ibp0nvEUtU9toiRUQHsEAJwMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgA
dQAOV5S8866pPjMbLJkHs/eQ35vCPXEyJd0hqSWsYcVOIQAAAZSaqMTzAAAEAwBG
MEQCIFFG8xGzTtHr5f3/XQY/xVKifNS10x9u/k5h6Aph1GxWAiAT0G8dWmImhRfy
QHGcaeuFDY53mCeIcD9WjWz4gVhC3QB2AGQRxGykEuyniRyiAi4AvKtPKAfUHjUn
q+r+1QPJfc3wAAABlJqoxY8AAAQDAEcwRQIhAK3yWfPCpzXRot1tN2pwx1bj3yVg
ok3ptfccfBhh5HveAiAcV1W1IUdGGqhCVfLt1wLs5jiKesutmeElN/vqWFgDIwB3
AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWwyxTDFFjnAAABlJqoxskAAAQDAEgw
RgIhAITr9mjJs5kAtOYm1ACDI7vXTQ/ESjb+6dsVfP3cy8OiAiEA5cCuLC2bFiQL
GwJ3J/nEUOdKbo3J5qte6cxuzAnzHxAwDQYJKoZIhvcNAQELBQADggEBANcb0iB3
2zo1l3j5u01YYB9DjtVfST/VDadNCIw0S5MaR9V1szT6Jaxd/wlP/iq3M28fKweo
lcI4ZB12dmhcGv4Qy62YkMoU06BF8FTWbb89xXORGry5Jc1ROiZWmJHVqE5U69gU
YXEZRQu7kLdIq+pRdxDrpHWI5wc3HWbwPY5zpGeluJwkXHV3+u1UFgygrgXk078K
DzsEnIsE5lGksV8eFNbTngYBJt5dpupMzzyq3f538ZrjPiDD5wDReLdKrHe6lqg0
EQ/fH8geOB4pkgHqyl6DWmck+XJekptyEA/XMp8LGr9gFx0UTSieqZWSDo5p7dJ7
gCJYRXxKNajH5Ao=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13213586881280869423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 23:32:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-02-23 23:32:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zambelli.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766181740948688758293286017253068457321841100976474541475577436323393330067318505800809618349102816549090118683680794675682936189186886449714269180743815796762978577791707124607840987281610624564404122891329071463797546795542643578911159001509733025100653301434582657536943526973286694488869256880069487135787722095009105672384714293116627528676222237239067356745083935591142238226960387796107175191185167072282374480281104483124652538415947535486315339385598249203520542235682536996413560706222526778437870865779011101931631474103287677920846018650319696893047184167516616456486784863851835841932524243494079381157381964997881060172686860514119124136735279963862127330883800833577680322165026896585883612197065674561198426170136026668550710148354608476165037789222486859813258804198524499130616869870139920819540962138499840429786469062538333993985552304868340260643441831952286377643634813689895918843483491301518682797468316060524625471693622423743092479475614108108455633211525565241096238635802420132771104121080884080047864475882284260885069476755489360864923181309881211752083725366486102457850515142296188366634324247330846031764177210836797023349213588811599123710898841552796229366501938965739194305775787389229645416847407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-805.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zambelli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zambelli.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e20dc86e9d27bc452d53db688915101ec100270
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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