blog.epo.org

- European Patent Office -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7a:43:fe:7b:eb:82:6f:b0:c0:be:09:c8 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

European Patent Office

Company registration number: International Organisation
Organization: European Patent Office
Address: Bob-van-Benthem-Platz 1
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:43:fe:7b:eb:82:6f:b0:c0:be:09:c8
Serial Number (int): 37839370995124697646111787464
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d7:ee:a5:2f:1b:18:1f:97:27:ba:3a:e6:65:87:1e:aa:7f:bd:8a:f3
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 6c:73:ed:60:66:35:1a:39:1a:9f:37:10:d5:91:83:08:df:74:5a:03
Fingerprint (sha256): 07:60:e0:87:00:b0:87:aa:16:e1:33:63:78:fe:b8:89:29:81:f8:18:34:47:b5:00:76:86:eb:b6:d6:04:0f:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate blog.epo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.epo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.epo.org

Other certificates including the domain name epo.org

(limited to 100 certificates)
register.epo.org
hybrisapp-i.internal.epo.org
umprest-p.internal.epo.org
vhepop02ci.hec.epo.org
pthw-mn.epo.org
advanced-search-services.internal.epo.org
register.epo.org
gvw209.internal.epo.org
epomail.rsrc1.epo.org
vault-d.internal.epo.org
wmail02.epo.org
data.epo.org
ci.internal.epo.org
elk-p.internal.epo.org
ops-o.epo.org
besba01.rsrc1.epo.org
tools.epo.org
gvw049.dev1.test.epo.org
containerhub.internal.epo.org
ops.epo.org
umprest.epo.org
wcm.cooperativepatentclassification-d.internal.epo.org
gvw633.dev1.test.epo.org
nationaloffices.epo.org
GVW295.RSRC1.EPO.ORG
documents.epo.org
epoqueac.gpfs-prod.internal.epo.org
sapprodwd1.internal.epo.org
cmgprod01.epo.org
mvcsc01.internal.epo.org
gvmail03.epo.org
besba01.rsrc1.epo.org
register.epo.org
*.nautilus.internal.epo.org
translationportal-o.epo.org
sapprodcs1.internal.epo.org
mnw084.rsrc1.epo.org
tas-d.internal.epo.org
register-no-apigee.epo.org
gshahmp03.internal.epo.org
MNW352.dev3.test.epo.org
epo-appsentry.epo.org
webserv.epo.org
VDI.INTERNAL.EPO.ORG
GVW1119.INTERNAL.EPO.ORG
gvw438.dev3.test.epo.org
fileaccess.internal.epo.org
nationaloffices-o.epo.org
gshahmp02.internal.epo.org
blog.epo.org
gspstn01.rsrc1.epo.org
jira-o.internal.epo.org
remote.epo.org
ops.epo.org
hpa-mn.internal.epo.org
opd.epo.org
developers.epo.org
gvw697.rsrc1.epo.org
register-o.epo.org
vhepot02ci.hec.epo.org
data.epo.org
hybrisdh-d.internal.epo.org
mnw286.rsrc1.epo.org
register.epo.org
MIMDEV.DEV1.TEST.EPO.ORG
GVW1119.internal.epo.org
tcloudex.test.epo.org
infoclient-i-new.internal.epo.org
pensioners.epo.org
GVW1043.dev3.test.epo.org
haithhd01.internal.epo.org
medxfer.internal.epo.org
api-i.register.epo.org
cvc.epo.org
api.register.epo.org
register-i-no-apigee.epo.org
epoextsa.epo.org
fs1.sts.epo.org
bi4you-int.internal.epo.org
translationgateway.epo.org
admintools.internal.epo.org
*.register.epo.org
gvw566.dmz.epo.org
vhepoh02ci.hec.epo.org
translationportal-o.epo.org
haimnhd01.internal.epo.org
tools.epo.org
forms.epo.org
wcm.trilateral.internal.epo.org
epogateway-o.internal.epo.org
activesynct.epo.org
test.epo.org
saptrain.internal.epo.org
register-i.epo.org
ops-i.epo.org
gvw629.dev1.test.epo.org
mnw231.dmz.epo.org
forms.epo.org
translationportal-i.epo.org
vhepop02ci.hec.epo.org

Certificate

The complete raw certificate details for blog.epo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jg2pWxhrTBhZ0fOIkHE
2z5IAsJlNv5sQz7iHILGqb5qqOVPCS3CqRsfpZuMlcHbOdkPk6EyeTdr8UavSy5w
FQfd7yn9Nn/L+ZhJzXnwpTeiR77rirKaMRTv7hP+Z1YWTkMXL0NjyWaOPfcYAcPe
I3mWxmWxhFmuqGbI+Qo+OeaN4KrrzCCxtrpRRPUf+ZGHBalDNgbBYa6w7eqfiM5X
akDT8gfV0dia0TOCmkDhNSzRqsiD5m2Clm7fcd4wWCsVn2PDg+qKObAGiQeTphrP
t0vHdzUexjHbapae6IaDmTbQeWqfUzHyOsOTF+vnYdvhJAQbqqx7EklnBk6PrsJH
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37839370995124697646111787464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 10:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 10:26:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Non-Commercial Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'International Organisation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bob-van-Benthem-Platz 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Patent Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.epo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28857392787702790592406695511470047472469933529937327971632633738072236690373481235569805998774895595001687079840647902092476425941816548156159505755903966221689175798260724797186698340193342618235810162275800870593974430478765220537868400640425229528830495661538591509602978873720734868735167569548194697084908468775229166719275822373564193895209534901828015534509723611505060670934982907234127425675523764092295582616583242262902549266980730822391583431843701687716873765941370559034781267989419229951589236378013800900989274759050582483260408897846838732513478963800968019523326008646855101075436893312676742186919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.epo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7eea52f1b181f9727ba3ae665871eaa7fbd8af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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