pfportalmo.postfinance.ch

- Die Schweizerische Post -

Issued by PKI SwissPost EXT Machine CA

About this certificate

This digital certificate with serial number 2c:70:dd:1f:ba:6a:6c:48:67:ff:bf:a8:d6:43:ec was issued on by Die Schweizerische Post.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Die Schweizerische Post

Organization: Die Schweizerische Post
Organization unit: PostFinance
Country: CH

Die Schweizerische Post

Organization: Die Schweizerische Post
Organization unit: PROD
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:70:dd:1f:ba:6a:6c:48:67:ff:bf:a8:d6:43:ec
Serial Number (int): 230750210894455130384414295798989804
Serial Number lenght: 118 bits, 15 octets

SubjectKeyId: 59:09:5f:31:cb:35:50:bf:4c:a5:ca:a9:08:72:26:f1:87:be:31:b8
AuthorityKeyId: c3:e2:9a:34:fb:79:b3:63:36:83:5f:b5:83:6d:16:65:ac:12:3e:e2

Fingerprint (sha1): 84:3f:21:89:fd:35:9c:27:65:b2:4e:8a:72:a2:19:dd:34:4e:52:e3
Fingerprint (sha256): 0a:a9:92:00:d6:6a:be:f6:74:f2:99:ec:e1:97:d5:4c:69:86:98:c3:37:30:68:8d:49:5b:98:38:3d:44:31:05

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/C3E29A34FB79B36336835FB5836D1665AC123EE2

Revocation information

OCSP Server: http://gold-pxmp-g2.ocsp.swisssign.net/C3E29A34FB79B36336835FB5836D1665AC123EE2
CRL Distribution Point: http://crl.swisssign.net/C3E29A34FB79B36336835FB5836D1665AC123EE2
CRL Distribution Point: ldap://directory.swisssign.net/CN=C3E29A34FB79B36336835FB5836D1665AC123EE2%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate pfportalmo.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfportalmo.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfportalmo.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for pfportalmo.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatxkqcAHcS7fuU6/6xn
TD+SFSA1y0PB6I3WEEURc3LPbqXi9+tGIANbJWiwt2YdZ/1vH0CtuH7ibVkerV+e
9x59ku8YJ3Q75JhyFMTE+20TnV+edLO+u6nXPKoS/5wVm3NmU3BO7f3SvPaH9Xko
RNIJSCkaucdE3iC+dJx7q8F4nQ38MULjfjwYHcOJbG/IYQmHHEzndlvJ0N4Y/nr5
kuqL3a31fqjRoBp+OoOQObHRDjT87SoCAYB98IEcuZg5VWKtMe+iyiO7FmmUck0l
R4iv65LIZWuJoGgPyv7CyJP3H6eEuVw7TtDIPJAsXXKkkWuHCi0iZVzqQullGx+U
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 230750210894455130384414295798989804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Die Schweizerische Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PROD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI SwissPost EXT Machine CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-12 07:49:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-12 07:49:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Die Schweizerische Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfportalmo.postfinance.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.1 (userID)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p202'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25458441309951803693488231680643613448143212384986575824427022217439372660366358485546285577577424115994883781374748917749419070601465094203228003291280046230908158710249017496973714703092028540756227569525387944740848656603656201090326585907859362523134613558468369993723765657270760656933687551703508126148341657195316327040692406719759215217900460038129063522970499797427705621513700318951851103000977069635410918019319627300042162627989931463211442479723025020220142995038554287374976141288446105829469829447929980061550029479361638927503927561453833251021719061861032466074311080601615228965572804397921927664879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfportalmo.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59095f31cb3550bf4ca5caa9087226f187be31b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3e29a34fb79b36336835fb5836d1665ac123ee2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/C3E29A34FB79B36336835FB5836D1665AC123EE2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=C3E29A34FB79B36336835FB5836D1665AC123EE2%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 111 32 98 101 32 117 115 101 100 32 119 105 116 104 32 80 111 115 116 70 105 110 97 110 99 101 32 101 45 98 97 110 107 105 110 103 32 115 101 114 118 105 99 101 115 32 111 110 108 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/C3E29A34FB79B36336835FB5836D1665AC123EE2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-pxmp-g2.ocsp.swisssign.net/C3E29A34FB79B36336835FB5836D1665AC123EE2'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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