clientrvk.testweb38.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 3e:69:e2:21:24:33:ff:56:65:3c:68:40:82:8f:01:58:14:1e:50:76 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:69:e2:21:24:33:ff:56:65:3c:68:40:82:8f:01:58:14:1e:50:76
Serial Number (int): 356318704690984645986471771028282046964387696758
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 1e:8e:4d:45:7e:0f:d4:8c:01:19:f4:a1:1c:70:f4:fb:2b:c6:95:01
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 3e:10:5f:de:53:2b:87:9b:35:c9:a9:9b:fa:ce:2e:c0:be:39:5f:68
Fingerprint (sha256): 03:67:91:fa:f8:2e:f8:b5:66:d2:60:1d:fb:6a:1e:9b:1d:90:d9:00:d7:13:e0:15:5d:60:93:e2:ea:0e:c1:6f

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate clientrvk.testweb38.swisscom.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientrvk.testweb38.swisscom.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientrvk.testweb38.swisscom.ch
www.clientrvk.testweb38.swisscom.ch

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch
cw000130.exotrack.swisscom.ch

Certificate

The complete raw certificate details for clientrvk.testweb38.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356318704690984645986471771028282046964387696758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-11 08:51:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-11 08:51:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientrvk.testweb38.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674800911298730018980186227727781654987649296693095305802458122764800882482436801420344286897000147917453385113256767810465687029893025328669751199779344747522545960206700256765423573649328556181207830069465371281360663246629938847768905274318694198914340361240862976935171037840578397048215582663291895019652034436997627946109118456502414189904100123656300378766870759560599034847721540233688348133376338308612457368601817233089042365255245187468025939874689590250002089808622462518507225026608163424231326193668953759255291305185500046259380660343217043432392288652582843655004834867680628968664864668089638567782405847642542071694543135385554541217182342001026599057705971398861009572890109809560617501095448359673337292352467506233075533950865898315671700130757403712011248354709538716161481951732444001791010885170386944005897841950871238931707002534792977809031700835269719541280747406926885540300529672533353326946625843016392612993482162339121358807253770764480824435417154902125927601253729012869048361203138850704068171369832998585749571472730041911621806733394044048413033221890111575672187572033949649676476527723170060379789738539470288165364765166647822750741540474327247851739163398472459657825806868708529689682694011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientrvk.testweb38.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clientrvk.testweb38.swisscom.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e8e4d457e0fd48c0119f4a11c70f4fb2bc69501
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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