bildung2.gfi.ihk.de

- IHK Gesellschaft fuer Informationsverarbeitung mbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 76:7c:dc:51:13:fa:fc:73:67:e3:ad:00:db:76:29:3c was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

IHK Gesellschaft fuer Informationsverarbeitung mbH

Company registration number: CSM040200758
Organization: IHK Gesellschaft fuer Informationsverarbeitung mbH
State / Province: Nordrhein-Westfalen
Locality: Dortmund
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 76:7c:dc:51:13:fa:fc:73:67:e3:ad:00:db:76:29:3c
Serial Number (int): 157497216866855997458216110581699979580
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: af:64:17:d5:ca:f5:31:20:ec:69:17:33:0c:67:cb:15:67:13:9e:bd
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 90:e5:6f:4d:47:03:3d:60:44:85:52:f5:a8:f0:e9:6e:6e:1f:9d:f2
Fingerprint (sha256): 00:a8:aa:eb:6f:12:2b:77:b4:9a:61:46:6d:07:8e:f9:02:72:81:36:06:1a:09:a7:3d:1e:6a:23:9b:fd:44:3e

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate bildung2.gfi.ihk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bildung2.gfi.ihk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bildung2.gfi.ihk.de
*.bildung2.gfi.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for bildung2.gfi.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157497216866855997458216110581699979580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 10:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 11:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040200758'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dortmund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IHK Gesellschaft fuer Informationsverarbeitung mbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bildung2.gfi.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1007632837933550563594169729920297696949958914357907783629359929992925487369176234599352903115547747967876505039964593258822129112299307248075168246088927822200946219914416531350738107269187654201044133711738858803478021161267787457771832637150945232793408157655484371510495787834244903813875599178001711629327819466680623278316120881821112164002029758865216582221813159778849654647586190982583765286786849442050156127186025724948888330968866056258119288673895494077397283315747458895486247782670057037050072686027622076900179691061471782585304962584591544010950476223037881445119447229888780255815274420214425665914673948121364392590658194614740014212533929860945106342640594106465228627776282919058475711978667275140886414106186462554563995523268176924160400019330372892220150344693485414827129524601042438968370009319055722318200190866111200252042020841961363462101274080221315515671205279709448618195968535932986938469599325865770701228906104923803839855157960764807465043601400934446977631990951148715860932103561002213040684325578567845956370827328629964103260286306439107861746208451594596280808851174108808962932540488466813779616270239774495155540894519442054469421511981300652290110544273142474353219098920540091467336275527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bildung2.gfi.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bildung2.gfi.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af6417d5caf53120ec6917330c67cb1567139ebd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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