dahlem-ingenieure.de
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 1c:f6:82:2a:55:f2:ea:8e was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dahlem-ingenieure.de
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 1c:f6:82:2a:55:f2:ea:8eSerial Number (int): 2086998595675024014
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: b5:f6:58:74:03:ab:3a:0a:cd:ff:d0:62:1a:ae:de:60:1d:aa:05:55
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): 10:7b:69:70:e2:42:88:db:b9:99:67:7d:4e:84:3f:51:60:79:4b:a6
Fingerprint (sha256): 06:e9:07:57:89:40:d1:c5:4a:23:96:e8:14:7d:d3:6c:d6:c4:5c:c0:9c:e1:fa:f0:fb:53:fa:31:42:e8:58:7a
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-570.crl
Check the revocation status for certificate dahlem-ingenieure.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dahlem-ingenieure.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dahlem-ingenieure.de
www.dahlem-ingenieure.de
www.dahlem-ingenieure.de
Other certificates including the domain name dahlem-ingenieure.de
(limited to 100 certificates)
dahlem-ingenieure.de
www.dahlem-ingenieure.de
portal.dahlem-ingenieure.de
exchange.dahlem-ingenieure.de
terminal.dahlem-ingenieure.de
*.dahlem-ingenieure.de
terminal.dahlem-ingenieure.de
abacus.dahlem-ingenieure.de
dahlem-ingenieure.de
sharepoint.dahlem-ingenieure.de
www.dahlem-ingenieure.de
*.dahlem-ingenieure.de
*.dahlem-ingenieure.de
exchange.dahlem-ingenieure.de
exchange.dahlem-ingenieure.de
dahlem-ingenieure.de
www.dahlem-ingenieure.de
portal.dahlem-ingenieure.de
exchange.dahlem-ingenieure.de
terminal.dahlem-ingenieure.de
*.dahlem-ingenieure.de
terminal.dahlem-ingenieure.de
abacus.dahlem-ingenieure.de
dahlem-ingenieure.de
sharepoint.dahlem-ingenieure.de
www.dahlem-ingenieure.de
*.dahlem-ingenieure.de
*.dahlem-ingenieure.de
exchange.dahlem-ingenieure.de
exchange.dahlem-ingenieure.de
dahlem-ingenieure.de
Certificate
The complete raw certificate details for dahlem-ingenieure.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG0TCCBbmgAwIBAgIIHPaCKlXy6o4wDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMjMwNTA4MTIxNzM2WhcNMjQwNjA4MDcwNTM2WjAfMR0wGwYDVQQDExRkYWhs ZW0taW5nZW5pZXVyZS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO/QHByMgyKjqx8/Ah9GZ1ge61hNpBl1oJ7egUZAnDjJgy0jE0jbHHpkPaxVTEM5 ppKN2f679CgzxfhxP5h6Lln/qNwOS+deen4crnonOTPJWeV9Sj8LXQKSMCzryqPA xKt0YNQ8YUUX78BSu9rSLxw8Krcv7nNhSG43Ta56CbTT1li6jw0y3SQkUSp+TJcX Jd8NeFrjLF8W4r0ZrskPu8tP41Scl4WMXlZcKZ7HFwsN5TUwJ8NHO8fkzGlG8qKp UQ5YXkl7O+oBi4mPAa6OOZ0xgY16mMxquutkKQzhUF4QiO1uWixyKStWyYic0kYR uBAbAqqW1Ps3jwf5YBh3dtECAwEAAaOCA2cwggNjMAwGA1UdEwEB/wQCMAAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9BgNV HR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcy czEtNTcwLmNybDBjBgNVHSAEXDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUH AgEWMWh0dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3Np dG9yeS8wCAYGZ4EMAQIBMIGCBggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0 dHA6Ly9vY3NwLnN0YXJmaWVsZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDov L2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcy LmNydDAfBgNVHSMEGDAWgBQlRYFoUCY4PTstLL7Natm2PbNmYzA5BgNVHREEMjAw ghRkYWhsZW0taW5nZW5pZXVyZS5kZYIYd3d3LmRhaGxlbS1pbmdlbmlldXJlLmRl MB0GA1UdDgQWBBS19lh0A6s6Cs3/0GIart5gHaoFVTCCAX4GCisGAQQB1nkCBAIE ggFuBIIBagFoAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGH +0u9YAAABAMASDBGAiEArvb+fxWb+s8jTBL1KJkLrSAtESYji+7z0WhkaSILyC8C IQDBivJW5wCkNooEFDuXd4s9Ym1/5CzbHCEfyK0bSk112wB1AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABh/tLviAAAAQDAEYwRAIgBRgwMBMvm8N/ YZLTWF2Rz+3VEKS75A4XrwRXqe88vn8CIDLTBTCY01etxn67qYT9oaoyzOZaYHC6 CvvomY7C2JSuAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGH +0u+uwAABAMARzBFAiA5FidfTH+xiesgncaKFir+2GeJr8tNkwTZm1QqxxE7OQIh ALf15JOUngZcbYZ9R5Tgel77Us0Hbx7rhN6p37wfV9gaMA0GCSqGSIb3DQEBCwUA A4IBAQDStpVjxa2fc5tYBENSvx0tWMz55PWBGSusKuRTrETNfFStgrsliCNfxvDT aehU3THVrbX8NtaWGF/dmhAo69Y6rDRxNeWG6oZZP1iJ3pwPdhFCx8G3YZhAjzbQ /+GF+7D3DQz7J2aF+lItKBvDzp/M8IIAu276ptlPkeJv9PofqGUTB+wf/0zKte5x B685qifUfHKJldvnqrf/FJbmrPYso4n5IktIseqY9Ba97m4OgU1Na5a/0rZ+TSO4 19Cjeinnbsi7vabhlZFqrwRpsNbdM9paJ1jVVuDSH0Q2Hzj15mzxt4KuZA1FSkP4 gyIygbb2WhsVB1Lkj4o9QgY9VCuV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79AcHIyDIqOrHz8CH0Zn WB7rWE2kGXWgnt6BRkCcOMmDLSMTSNscemQ9rFVMQzmmko3Z/rv0KDPF+HE/mHou Wf+o3A5L5156fhyueic5M8lZ5X1KPwtdApIwLOvKo8DEq3Rg1DxhRRfvwFK72tIv HDwqty/uc2FIbjdNrnoJtNPWWLqPDTLdJCRRKn5Mlxcl3w14WuMsXxbivRmuyQ+7 y0/jVJyXhYxeVlwpnscXCw3lNTAnw0c7x+TMaUbyoqlRDlheSXs76gGLiY8Bro45 nTGBjXqYzGq662QpDOFQXhCI7W5aLHIpK1bJiJzSRhG4EBsCqpbU+zePB/lgGHd2 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2086998595675024014 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 12:17:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 07:05:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dahlem-ingenieure.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30273577659308469269213434562050448070768854341052987382005774670679164960135963895106371734120758631814631569771030188125976447481968848487536320204517136488253613949630480612316284200806469785387950720016492949395558254096380129750330886637943268199583137362281189290341273979527428734166720235797468112107826252075716704958279936223333983160438640243394478173668315437769088357073999044107839023302246582676170342269806646441448754625749646942409924737467366085421110422579520212325527394565994609658649639898512572585817821932058208511891390795581314079674504415670569025168596901471797449006840538357641631987409 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-570.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahlem-ingenieure.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dahlem-ingenieure.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b5f6587403ab3a0acdffd0621aaede601daa0555 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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