schaerer.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 4a:2a:dc:d5:6b:1d:fa:7c:8f:ad:ca:6f:a7:7a:84:93 was issued on by D-Trust GmbH.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

WMF GmbH

Company registration number: CSM040975010
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 4a:2a:dc:d5:6b:1d:fa:7c:8f:ad:ca:6f:a7:7a:84:93
Serial Number (int): 98585427195004794050100061976917607571
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ed:69:2d:f3:11:6f:e7:13:b1:55:bb:b7:d7:dd:2c:88:73:68:6e:42
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): a8:2b:dd:b1:d9:1e:0e:a4:00:86:67:5b:4a:cf:31:46:1b:bf:92:f2
Fingerprint (sha256): 04:97:39:73:06:5a:19:d4:8e:10:ca:0d:e3:41:44:55:e2:0d:84:93:59:f4:91:6f:fa:88:4f:54:a4:d4:cd:de

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate schaerer.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.schaerer.com
schaerer.com
virtual-showroom.schaerer.com
soul-select.schaerer.com
coffeeblog.schaerer.com
usa.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
login.coffeelinkng.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com

Certificate

The complete raw certificate details for schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnSge2FvfPgkDJHIBGqnW
ifgq00pp+9+sgXuxbMKNEhQFqZyEVqNhhaUihRiClE7BJQVVSBRrnpcKEG27qZS7
1bc14zszL91eoNhmnejaEZVlta498h1WwsVI4Vv8JPlmgZDvTkQxZeaay84mge0w
gAY7z45mDqmET7iWwGBS3gkcSjM7Gj4tr1/sGchqH7Z2jMfyBShEzDNQw2rBBMCH
d3Csq82CHPTupKcNWaDaYLOe5mlDvblesDCz+fpJsvqqITN7rphxt3WNv3N3iDJU
H42C45y461WI4UU+zXE33tJAw2r4rIl47g+RR9UZuPg58524pRLAQvew73z2i7dy
NZudbOnBtXFmc0jv+N9AFp1DqNnJwYX43ZcxZvHM3Y0NTISiVHSIoRZjeqfNQ6qV
yl26YAeGBg0e4zJyHPAfh0Zuz1ErqOJqMGLtrQ1j19jqbe3xihdvmDDNJieBwR2S
615+vFcdtVM2GhKU56C4MCk2lv8VLvjMKK0jD2GFpnGr/l4zZmbGERtjuFP48EmZ
n7Torxk733J5CdmCZ8jEe1zWNbqCuekMmTW1fnyPF5AruCbveTV0CXh3fQMte/io
OPLxfoWbseG9mE9hGgZzBCCwyBX0Bzx7Pi7sMaw7k78fO5HT4Wevo1T6uIGhML8R
37yQ+LmkGZJv7WZlr5Et1CcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98585427195004794050100061976917607571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 11:05:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-16 11:05:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040975010'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641143483188701606796445172136821032744338652441130930073272276431678380190870300603752059027191055232243991908934318350241076819206952584865141720893962554126895760339786776715910942248063328701289147907782179588516981197533844390282890768124042794398458256983069691882037225150477117709790532970334410199135653672547112413617403098155232523793231393786270358046782209264234510780344457946947055214377538687146815249686675758475618671764965893746311295626954745208314581299200173653234349493291577291305728909476034834411159002875547106156693771875874479553973817317904489804724206848680682731529924714799654100553561655847880987023625522995473097377723234423092243421609068130579186703305705162131075476093999819240826765521328524954989348236850009715691841961318782546007372322218783606022970092558727783796154957176181111000753019581021403564033042525842627510597142990300353777003212474507651218676237890144525988936724608972931566525317382998924054708337918431354155725119044527716838661830928217463925018760828753921304483923504196928931360683519798827534493924870744954964130592311587932791881053522319945873263614008595591030782691850072458675492472066097951165992825297649707763884541491635027054126337505807085856137008167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual-showroom.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soul-select.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeeblog.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed692df3116fe713b155bbb7d7dd2c8873686e42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005681cdc594ed6103dd40d8a1ff8198e918c4e482f6e299132ccc3a8245ac7823f01a7e5052c69fadf10c583cf5126d39d3cd2a3e84d211d43ef6e593f8df1e97fcfde8f787caa2759223a984a9a516b6fd8169ae55511cc425c5745c0ffed377ea846d30a9815f2566e5b3b54a24e7dcb3e5665a84bee94d09c555184e13a159d6623d2835a42bd4a269d89d1fb6b0cf88aa95b5821fd1cfcef12116caca3f335e742e672ae9b023c9f03756d2ca0c0a9d3899d1201f1a377e09c0744205dfbe772c116841d08440457e50d6fbb94eac57b7afc1e98ae328c3da9b0332d97d2c7b68d3c2e63f0a8c362d6266c690d3d304ae1ee392617e43ab2e14163d77c47e