marcrufeis.de

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 46:ec:2c:b8:96:bb:f3:30:0d:47:d9:fa:40:40:9e:f1 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marcrufeis.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:ec:2c:b8:96:bb:f3:30:0d:47:d9:fa:40:40:9e:f1
Serial Number (int): 94272248814212762744662184185378676465
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4e:07:da:78:e1:51:b8:88:c1:cb:11:db:72:75:c3:69:bc:e2:a2:b3
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 35:70:af:fa:08:80:52:f6:2d:e8:9c:36:38:e2:a9:69:e2:6d:0e:16
Fingerprint (sha256): 06:cd:b8:99:c0:84:64:c3:a5:8f:cd:7e:60:10:c6:4f:ee:09:f0:14:96:80:fa:25:f6:b1:d6:1e:af:c1:36:c8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/AJlZHmxJd4I
CRL Distribution Point: http://crls.pki.goog/gts1p5/G6xhm51JigU.crl

Check the revocation status for certificate marcrufeis.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marcrufeis.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marcrufeis.de
*.marcrufeis.de

Other certificates including the domain name marcrufeis.de

(limited to 100 certificates)
workout.engoyan.com
weather.bowvie.app
marcrufeis.de
docs.bitsrc.io
v5.rnfirebase.io
app.protofleets.com
marcrufeis.de
inventronic.com
craftedarforminecraft.apptget.com
admin.uri-call.com
marcrufeis.de
appstaging.zingoy.com
marcrufeis.de
huntish.com
www.castellani.eng.br
marcrufeis.de
marcrufeis.de
weather.bowvie.app
sehat-pay.com
admin2.timedoctor.com
marcrufeis.de
getworkplan.io
twidie.com
legalemirates.com
marcrufeis.de
marcrufeis.de
play.fiteasy.live
kobratransport.dk
connect.agendaboa.com
marcrufeis.de
motu.pursuitofequilibrium.art
www.harrahdentistryandbraces.com
penzionstaraskola.eu
portal.k9fit.co
www.marcrufeis.de
www.cabanadavid.ro
marcrufeis.de
marcrufeis.de
editeur.joliemap.com
trailway.ondagoapp.com
partners.streamsgate.tv
baby-dumbo.telapps.fr
the1689.org
www.thecoldhearts.band
www.thecoldhearts.band
bma.com.np
dev-links.asmmbc.net
www.marcrufeis.de
ht.appvancing.com
tprogs.com
marcrufeis.de
jattosblog.de
virbnb.com
www.science-master.jp
dy.wearsafe.com
softie.dev
www.readitnoww.com
v5.rnfirebase.io
hbvolleyball.com
cloud.hyperqube.io
citycraft.io
marcrufeis.de
www.allridex.com
tylt.mx
react-cash-register.jusemon.com
dropyourmind.com
www.rsluxury.mu
tempo.seb-noirot.com
fouone.com
datahosting.clonck.com
app.pentest.castifydev.com
chrisasfour.com
gujaratartcorner.showitmax.com
xolotlart.com
listexpenses.takeoutcode.com
marcrufeis.de
www.cabanadavid.ro
portal.outdore.co.uk
www.marcrufeis.de
dragnflow.com
qa-vpf.falabella.tech
quabyt.com
nifdex.com
functional.software
events.ceyentra.lk
tempo.seb-noirot.com
www.publications.adap-2017.nastad.org
hesrealequipment.com.ph
ydin.com
www.vinasa.net
owlcam.us
photography.marcrufeis.de
pruebas.vvmovil.com
cfaetm.webeduca.pt
kuroi.app
marcrufeis.de
maps.1mark.work
marcrufeis.de
ydin.com
listexpenses.takeoutcode.com

Certificate

The complete raw certificate details for marcrufeis.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIQRuwsuJa78zANR9n6QECe8TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDAxMTcwMTA5NDhaFw0yNDA0MTYw
MTA5NDdaMBgxFjAUBgNVBAMTDW1hcmNydWZlaXMuZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDDhfqhpCDsg4qyOwYIeiCukct9aPm2CAFjenDxVZmc
t78vb/mNlIU92/Y8+vfODwjcpe1bWuv18flhBLcRgJWaR2hkgkJk+0jgdi+HBWDR
Eqm31loKK1sI5nOLmv192sKTdQMaxMRgduRWnmr188vvVQXOV1YuXx89IJ9eM+qI
fJlJQi2Pb9Jo9Q+fBjEf2QoNcgL2uys5bSWD4SfgnSrElwmI2y3Hm3rMwCh1Twci
mFc0QuCivvCxGW8ay3hffEaRG3PdK38fgLQXXZxsDVkgpXGiKJUmJ2RIjseXW8j4
R3Zvf4MzPy9guP7Q4KuXkYtnfFykHBUxLoO4UjI2cUhfAgMBAAGjggKFMIICgTAO
BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUTgfaeOFRuIjByxHbcnXDabziorMwHwYDVR0jBBgwFoAU1fye
Dd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo
dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9BSmxaSG14SmQ0STAxBggrBgEF
BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjApBgNV
HREEIjAggg1tYXJjcnVmZWlzLmRlgg8qLm1hcmNydWZlaXMuZGUwIQYDVR0gBBow
GDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRw
Oi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvRzZ4aG01MUppZ1UuY3JsMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX
+6sAAAGNFS6P8wAABAMARzBFAiEAvxh1h3UMRec9iOOKJg0oNr2UfHyXu5y7rFmk
23YOxf8CIA9MAL7ACUsgcZZcCmRFgqtrVBVmyeU6B/aeF8D4f6ChAHYAdv+IPwq2
+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNFS6P6wAABAMARzBFAiBNUFvK
Z81K0YC7HNSNSuJrxiFSJNTbxjpzFjBoISc8IQIhALMVopbmCJ5aPSsfV/mSQT95
9hRWC2zxzBA0WmFLLzI8MA0GCSqGSIb3DQEBCwUAA4IBAQCTmoRqK2Oa9MYYZ2Gk
R5giJPsZaT8NYznDyRPBjavjl1U+Atv39+d+/B/jpuolUFKtW6T1/p3CNZ0vtMuR
4izFknB/6BRJZC7Ivryp42KI0sgUSludSvFjXPe2WChWSvyqqHPyRxl9CWIeZ5eA
WL0LVGUpbE8z94aDOcdth+tsa+0MqQYWlfzbElsHpzlaQhols/kUK4M828Bv2xtU
6h43NdHW4IrHFBHtv3KSk+k7HvWzUfPm0P5dZ4BZ+JAtoKJHPxUBDar/+XgrdIEV
/925XBFQP1BTll5AAKksUX+1EX9mSGciAm4U63eDXd1shQtnT2aGx7CbctHa1tTM
oDsB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4X6oaQg7IOKsjsGCHog
rpHLfWj5tggBY3pw8VWZnLe/L2/5jZSFPdv2PPr3zg8I3KXtW1rr9fH5YQS3EYCV
mkdoZIJCZPtI4HYvhwVg0RKpt9ZaCitbCOZzi5r9fdrCk3UDGsTEYHbkVp5q9fPL
71UFzldWLl8fPSCfXjPqiHyZSUItj2/SaPUPnwYxH9kKDXIC9rsrOW0lg+En4J0q
xJcJiNstx5t6zMAodU8HIphXNELgor7wsRlvGst4X3xGkRtz3St/H4C0F12cbA1Z
IKVxoiiVJidkSI7Hl1vI+Ed2b3+DMz8vYLj+0OCrl5GLZ3xcpBwVMS6DuFIyNnFI
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94272248814212762744662184185378676465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 01:09:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 01:09:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marcrufeis.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24682536989925873400084598629420882344876535085447162733473006925302697995236978687517550647478645885350475867893329181858522896217674468539467455901666126201292729620351258565550561290636122822058165553637390927568464661245359645757069520697183524676337526862425550874628828397335057725793327807737939370850010968539398979403930767297111797640919403794145077450910604106529439252430178361882760370545310345036096104131112681701236599999489881496233422994979895231694152862777085754212570132635049199689372986768462143351212640101212744404534189165184996814159676614538175832098256304111736456925945872424253011347551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e07da78e151b888c1cb11db7275c369bce2a2b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/AJlZHmxJd4I'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcrufeis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcrufeis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/G6xhm51JigU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d152e8ff30000040300473045022100bf187587750c45e73d88e38a260d2836bd947c7c97bb9cbbac59a4db760ec5ff02200f4c00bec0094b2071965c0a644582ab6b541566c9e53a07f69e17c0f87fa0a100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d152e8feb000004030047304502204d505bca67cd4ad180bb1cd48d4ae26bc6215224d4dbc63a7316306821273c21022100b315a296e6089e5a3d2b1f57f992413f79f614560b6cf1cc10345a614b2f323c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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