analytics.1and1.com

- 1&1 Internet Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:f3:04:a2:43:35:ce:87:76:1a:78:7d:13:ce:34:9f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 Internet Inc.

Organization: 1&1 Internet Inc.
State / Province: Pennsylvania
Locality: Chesterbrook
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f3:04:a2:43:35:ce:87:76:1a:78:7d:13:ce:34:9f
Serial Number (int): 17212558071444239538868844247481463967
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 12:f4:10:12:33:23:0c:7a:9b:04:b6:31:34:51:3a:b1:a0:53:ca:fa
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 80:eb:5a:22:76:14:e7:b3:6c:fb:ac:73:f8:0a:16:9b:50:b7:0e:78
Fingerprint (sha256): 0a:98:86:7c:21:27:e0:55:2d:e6:f1:a2:bc:4f:61:31:4c:97:9f:c8:7b:b7:7f:c3:14:0f:e3:ef:cf:bd:11:f2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate analytics.1and1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.1and1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.1and1.com

Other certificates including the domain name 1and1.com

(limited to 100 certificates)
incapsula.com
winshus63.1and1.com
whstatic.1and1.com
kontakt.1und1.de
help.1and1.com
sslext.1and1.com
listlocal.1and1.com
www.1and1.com
postmaster-contact.1und1.de
mywebsitepersonal.1and1.com
mam-hipchat.1and1.com
winshus124.1and1.com
*.nltconfirm.1and1.com
help.1and1.com
mri.1and1.com
backup-panel.1and1.com
analytics.1and1.com
*.1and1.com
mike.1und1.de
winshus107.1and1.com
cloudpanel-feedback.1and1.com
contact.1and1.com
microshop.1and1.com
xadmin.exchange.1and1.us
passwort.ionos.de
mypersonal.1and1.com
domainconnect.1and1.com
smd-static.1and1.com
mybusiness.1and1.com
upselling.ionos.de
ias.1and1.com
pics.newslettertool.1and1.com
premium-feature.1and1.com
timsato.tool.1and1.com
*.1and1.com
dav.mailxchange.1and1.com
1.exchange.1and1.us
websiteanalysis.1and1.com
mbe.1and1.com
testing.rankingcoach.1und1.de
vacation.extranet.1and1.com
winshus131.1and1.com
location-marketing.1und1.de
domainconnect.1and1.com
nlt-qa.1and1.com
admins.domains-web.1and1.com
telesales-diy.1and1.com
winshus100.1and1.com
admins.domains-gmxnet.1and1.com
surveys.1and1.com
login.ionos.de
domrec-services.1and1.com
websitebuilder.1and1.com
winshus126.1and1.com
caas.1and1.com
onlinestorage.1and1.com
cloudpanel-api.1and1.com
sem-admin.1and1.com
mywebsitepersonal.1and1.com
ipc.help.1and1.com
winshus100.1and1.com
mailxchange.1and1.com
mybusiness.1and1.com
cantina.extranet.1and1.com
newsroom.1und1.de
order.1and1.com
m.help.1and1.com
loginapi.1and1.com
api-staging-caas.1and1.com
osfepre-us.1and1.com
analytics.1and1.com
ias-stats-services.1and1.com
1.exchange.1and1.us
timsato.xtool.1and1.com
serviceportal.1and1.com
api.1and1.com
community.1and1.com
digital-success.ionos.de
login.ionos.de
admins.domains-gmxnet.1and1.com
admins.domains-web.1and1.com
mailxchange.1and1.com
ohpcontrollerqa.1and1.com
onlinestorage-help.1and1.com
phpmyadmin.1and1.com
widgets-mw.1and1.com
smtp.1and1.com
widgets-mw.1and1.com
winshpus9.1and1.com
newsroom.1und1.de
winservicesus.1and1.com
newsroom.1und1.de
api.1and1.com
vacation.extranet.1and1.com
smtp.1and1.com
help.1and1.com
incapsula.com
admin.1and1.com
winshus115.1and1.com
contact.1and1.com

Certificate

The complete raw certificate details for analytics.1and1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwBWbi4FsGu9xLc/ZwiHG
CcQK7uRGE8DOwbyLAD/ZudpgHaZFVL+3+AgVDwXQwsNcfoTcrCVGGSgBbKyyrCfa
4RAswcykB1hiRnFxSMj93y/A0q4BmSHLPyeRaBYB+YS2xl+E9O+E2CKFhNAuDT1e
3hTpaBIGnzZ2W0oSKZca3Fq/U83MhumW3x5GK3ANDmPn3ER+/0z+pxAzNs3cta51
C0SdloiD/I5Kywgqy96skAN072lLfYTDXnT4f9oZQ9A4m4D/boGR22681B+nPSPo
jpNmcLP5D/ylYaeMh4Hnd6IiHgnTYgACN8qbnandfX1XBIXQ5g68ahYUd+4IlbfQ
jHpQcDWmfmazVO15QmV+Q0OEZHuvyc2HPJ7eP7kb/WzIpNgNh+v14Ah2cNiyVuNh
0j7TcMZwXSoEVpgjgXr+lkJVBQQ1s4/7F1RF0O+F85WGT1gJkxuN+PleKxUSNQbC
pFfCAlkaVsSyLVLdTKWJ1ZkxByeV4eUxjqW7aZ7KUVpNO0aVg2g0BfLonITga/d2
Kf87x5f6IC1uQ1mr9ZGFq3jbIAGpUi3MOhntTrl4MBufXlgKLmBl0TfhroDirVcm
AT5infnpYh16Gz7ard5Jvsh8cMOg+j+bWFMnzEVY2mitsW9NPpn5fnMYNQqwYx9M
YwqH8B5ExtOsnY1NAYG5eEcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17212558071444239538868844247481463967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chesterbrook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.1and1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783636002101674257233524974566166277072104070506035985141963717504022033962072346312256854343428061932607658180015832164645793428957825525586029817082153387826637807405241311418980167475911578202999373894309726844674517101200820060301489830607744487278297744140160020533284769333900565606274537688334358937175027378626572214864132820780095654013146262459377274376890271620889596625830139604480615746655314833765335248071773206185929214179194746862645829798578485467468328332248870498504178255483786970404295388894056058202442311235094114690496429667150889186461905376491147479097202384135702613926865293118437206451678412485706616871634786757021856518247803522814777679572196810324927466874086598902691551301447942715720471825624440650895322968483320303479216873395023822412999425235783525368406079647268484651710059561989551243645381091925281670976382017963442744198186735151139303351602999791055986437022173275205217078174493757865004761453791582747851570704537644487901144723842147573505790387145374884672582604531063093556603408943690823091731541420670652123336989840191710109021740320605914840698050534978570319497238446330283405635938533620664802639569943846248706471862457594820513335531390288360634767950592207913183484672071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12f4101233230c7a9b04b63134513ab1a053cafa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.1and1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016189260a060000040300483046022100b53d0b8b873911745290ca293753004f644afc17c0678a73808754bd71435877022100f3aff484039e6b243df7a8b7abd718c723ca8150051b28f196b0b385a1c21bc10077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016189260a700000040300483046022100828e8de6382289b45d0ccbd8041c6f018d81913ae3685cd741d8fff7bdfa6350022100d5bccb9c3c9f3dfb81bc4f189390cdfefff0dfe0a77e21db2b3349e6c1ea9c09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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