egw-test.postfinance.ch

- PostFinance AG -

Issued by PKI SwissPost EXT Machine CA TEST G3

About this certificate

This digital certificate with serial number 1e:62:77:04:0d:81:6d:c9:15:76:5c:ea:dc:ac:1f was issued on by Post CH AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Organization: PostFinance AG
Organization unit: PostFinance AG
Country: CH

Post CH AG

Organization: Post CH AG
Organization unit: TEST
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:62:77:04:0d:81:6d:c9:15:76:5c:ea:dc:ac:1f
Serial Number (int): 157766011302809175415017542560558111
Serial Number lenght: 117 bits, 15 octets

SubjectKeyId: f3:d7:2a:93:62:c1:14:b0:82:6e:95:77:6d:b2:66:4d:ba:9f:59:3c
AuthorityKeyId: 9b:73:2f:f9:53:fe:3e:66:02:08:a8:28:de:95:d7:2e:db:b9:09:8d

Fingerprint (sha1): 35:90:c8:5e:21:cc:21:d0:af:43:78:25:6d:53:de:a4:52:aa:5b:dd
Fingerprint (sha256): 02:b1:f8:22:7d:38:22:ba:1d:c6:3a:e5:a8:95:3a:ea:fa:cb:71:4f:63:78:df:64:a6:43:38:bb:7f:04:a6:f5

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/9B732FF953FE3E660208A828DE95D72EDBB9098D

Revocation information

OCSP Server: http://gold-pxmt-g2.ocsp.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D
CRL Distribution Point: http://crl.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D
CRL Distribution Point: ldap://directory.swisssign.net/CN=9B732FF953FE3E660208A828DE95D72EDBB9098D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate egw-test.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egw-test.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

egw-test.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for egw-test.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJo5GWwkX+IsDySQrbGb
fwBYGq8S7kESZuk1qQ9vdvCJaxPHMoV1MZtkpHStGQQ80lzeo+/KcXafK7VC/4sD
npif1OViXNUM39Bwqw9WzNyJ/B3apkCJsce5aP0H0QmLxEgSbIl47UJjPEmkdnZx
INNSUWMCBstq5lqaVTdzred2siY8vMHFDdH55xEQCN4nYvlKSMOUi4X2jPTBe+wx
+uTZGPkeuz7V+5uooffwfp2tiudbXNwFx1QC9ieLTE028KVpnOfXJXTs0NqVTLLn
IkKYtbhJtEQahJHPAtTbEU2VIcQ360H6QKoM7yQN/XygOz5JF6+jWZogZ5wUKsZq
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157766011302809175415017542560558111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TEST'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI SwissPost EXT Machine CA TEST G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-25 08:00:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 08:00:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egw-test.postfinance.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.1 (userID)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'be001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25828664430584388540072088864993182474968945288946716998912801283667722240125446947546175270136038540842572554921099740107060932014641457469641076454662616905256078881450364461208897022531888763509481068003873384086347024906889680486853140335716205929731781739405361738034762476015077512429928026273687480838304512075202676021129473446359758058420690426540379004110928973960102471680887955539948833964961846071525201783644061556116051121375006976724327072629548455369012309543143256303007327707679741487136144128695937559522938135853085843528025089031989368627501908494855163131548108303965399505785187033170628209373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egw-test.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3d72a9362c114b0826e95776db2664dba9f593c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9b732ff953fe3e660208a828de95d72edbb9098d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=9B732FF953FE3E660208A828DE95D72EDBB9098D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'To be used with PostFinance e-banking services only.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/9B732FF953FE3E660208A828DE95D72EDBB9098D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-pxmt-g2.ocsp.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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