www.homecredit.cz

- Home Credit a.s. -

Issued by Thawte EV RSA CA 2018

About this certificate

This digital certificate with serial number 06:93:b3:87:60:af:4c:0a:cc:d0:8b:a6:28:30:a0:ef was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Home Credit a.s.

Company registration number: 26978636
Organization: Home Credit a.s.
Organization unit: IT
Locality: Brno
Country: CZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:93:b3:87:60:af:4c:0a:cc:d0:8b:a6:28:30:a0:ef
Serial Number (int): 8742276889957590033868562066423455983
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2a:3b:c0:26:90:e0:d6:7c:a8:d9:3b:61:a9:6d:4f:0d:b1:e0:a9:43
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39

Fingerprint (sha1): 57:ad:2f:a4:66:6d:13:63:3f:f3:49:b6:3a:69:ee:76:12:8a:54:ff
Fingerprint (sha256): 0c:c6:af:fe:42:2c:4b:70:42:fd:04:c6:10:15:7a:c7:74:09:67:fc:b9:40:9f:bb:a1:67:b1:57:73:dd:f0:46

Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl

Check the revocation status for certificate www.homecredit.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.homecredit.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.homecredit.cz
homecredit.cz

Other certificates including the domain name homecredit.cz

(limited to 100 certificates)
smtp1-ext.homecredit.cz
m.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
mails.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
zabezpeceni.homecredit.cz
mails.homecredit.cz
blog.homecredit.cz
www.homecredit.cz
m.homecredit.cz
partneri.homecredit.cz
mdm-mail1.homecredit.cz
chat.homecredit.cz
callme2.homecredit.cz
www.drycodetechnology.com
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
*.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
posta.homecredit.cz
nasplatky.homecredit.cz
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
vpn.homecredit.cz
partner.homecredit.cz
signalr.homecredit.cz
nasplatky.homecredit.cz
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
t.mailkit.com
zaplaceno.homecredit.cz
vpn.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
kariera.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
smtp2-ext.homecredit.cz
t.mailkit.com
callme.homecredit.cz
callme.homecredit.cz
wiki.finance.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
t.mailkit.com
kalkulacka.homecredit.cz
pujcka.homecredit.cz
zabezpeceni.homecredit.cz
posta.homecredit.cz
callme.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
prodejna.homecredit.cz
www.homecredit.cz
ns3.homecredit.cz
api.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
konfigurace.homecredit.cz
vypisy.homecredit.cz
blog.homecredit.cz
confluence.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
droidquiz.medpeer.co.jp
vypisy.homecredit.cz
api.homecredit.cz
autoklient.homecredit.cz
sip.embedit.cz
ns3.homecredit.cz
www.img.homecredit.cz
prodejna.homecredit.cz
o.homecredit.cz
posta.homecredit.cz
partneri.homecredit.cz
callme2.homecredit.cz
blog.homecredit.cz
blog.homecredit.cz
liveshop.homecredit.cz
blog.homecredit.cz
u.mailkit.com
mdm1.homecredit.cz
api.homecredit.cz
api.homecredit.cz
kalkulacka.homecredit.cz
smtp2-ext.homecredit.cz
old.homecredit.cz
konfigurace.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net

Certificate

The complete raw certificate details for www.homecredit.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKKInJ3SEgym8TePZPpD
LsnH5zUj910nmg0BD3Sj2DvmXBXuoGUB1fyXhVZX59P5yrIaoQj2xlqqa+2E17Yh
mmgujc2bA2/becVsMU9LksGskoteMn1AJ1YqCcntbedIltX8SjJfes2Hduadn5EE
6Jbh1D+wOEP7q1ZGteiVfdPBzCVzDZcpu6zLULlFxFaeGLaMq0P6cKTIfANmuzJU
WjAVwZmGrvVUtlbLbZJrdFobsmhvoMGjPB+Oadt4FCLlZpgcjOQZulTRuGvePCfJ
Rr7ador9iLyms5gGVRKpQ5hVoXJOkanMryJpUQSD5POnhDpD6DmSQ9rIvpW80wNS
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8742276889957590033868562066423455983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '26978636'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Home Credit a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.homecredit.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24822856098290967806544232749368029633243495862487240912208425710054051385444753604783048356441215621197952067313656025006403085788871918384443033377371075741922161604225069634138654403238983414878062804917083253115843196095577885207671708359148507936680316751412150624449350440622176588007143366287270140979065368665879309685327375447292664785190633925240771950433005441508275170248265776756312200292486968780777575051555227513019387102250901120876499118288499492938650569668027345532342863103883730733476711357156977303117441481103628424714789338289458760287028150010334644946660709206119378062696999505275987907241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a3bc02690e0d67ca8d93b61a96d4f0db1e0a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homecredit.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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