color-explorer-test.rmpaint.com

- BASF Business Services GmbH -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 7e:29:4b:d0:d6:6b:20:4a:d1:86:54:5d was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:29:4b:d0:d6:6b:20:4a:d1:86:54:5d
Serial Number (int): 39045035225953139462802658397
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bb:78:42:44:31:27:f5:47:28:59:6b:54:bf:a8:ba:7b:ea:b3:1d:a1
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 86:4f:e7:5e:f2:78:be:a6:60:0b:b5:2d:ba:da:29:ae:5f:4e:54:eb
Fingerprint (sha256): 0f:6d:dd:e4:7d:95:48:b0:e0:7d:42:e9:2a:e7:9e:dc:cf:f2:61:bb:d4:2d:97:f1:1e:ea:9c:26:ba:2c:14:a2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate color-explorer-test.rmpaint.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for color-explorer-test.rmpaint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

color-explorer-test.rmpaint.com
lacour-test.coatings.basf.com
color-online-test.glasurit.com
coloronline-test.glasurit.com
formula-finder-test.baslac.com
formula-finder-test.baslac.com.cn
cts-formulafinder-test.basf.com
colorexplorer-test.rmpaint.com

Other certificates including the domain name rmpaint.com

(limited to 100 certificates)
www.promoshop.glasurit.com
www.promoshop.glasurit.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
test-knowhow.glasurit.com
comlib.glasurit.com
knowhow.glasurit.com
color-explorer-test.rmpaint.com
www.rmpaint.com
www.findadblue.de
msds-prod.baslac.com
colormotion.de
www.surfacepolyamide.info
www.promoshop.glasurit.com
in-touch.rmpaint.com
in-touch.rmpaint.com
knowhow.glasurit.com
www.promoshop.glasurit.com
comlib.glasurit.com
www.surface-polyamide.eu
www.surface-polyamide.eu
rep.basf.com
refinity.basf.com
www.premiumpartners.rmpaint.com
basf-cis.com
techinfo.baslac.com
colormotion.de
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.premiumpartners.rmpaint.com
agro.news
www.promoshop.glasurit.com
in-touch.rmpaint.com
techinfo.baslac.com
ton-schaum.net
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
knowhow.glasurit.com
color-online.glasurit.com
productivity.rmpaint.com
www.rmpaint.com
rmpaint.com
*.basf.com
productivity.rmpaint.com
test-knowhow.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
in-touch.rmpaint.com
www.promoshop.glasurit.com
www.premiumpartners.rmpaint.com
knowhow.glasurit.com
color-online.glasurit.com
agro.news
color-explorer-prod.rmpaint.com
agro.news
comlib.glasurit.com
www.concept1865.info
www.promoshop.glasurit.com
www.agilis.rmpaint.com
aware.rmpaint.com
color-online.glasurit.com
productivity.rmpaint.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
www.surfacepolyamide.info
techinfo-test.baslac.com
comlib.glasurit.com
www.concept1865.info
www.premiumpartners.rmpaint.com
www.surfacepolyamide.info
comlib.glasurit.com
color-explorer-test.rmpaint.com
clayfoam.net
colormotion.de
in-touch.rmpaint.com
www.premiumpartners.rmpaint.com
knowhow.glasurit.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.findadblue.de
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
productivity.rmpaint.com
knowhow.glasurit.com
msds.baslac.com
in-touch.rmpaint.com
test-knowhow.glasurit.com
agro.news
www.premiumpartners.rmpaint.com
in-touch.rmpaint.com

Certificate

The complete raw certificate details for color-explorer-test.rmpaint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fduv7uI9eKZcTwa1A6E
9eyj/Aw0Lo3/LtGBcm9obJqnT7qdsQ2xxbT1moVq6C/X07u2mNbkyjrrX6CWERCz
HxENrxQHCXzfh0sZjlG9SkRKik3ujLiETQDH1Qe/QBonaZjWDOmCvIJxxUBkMrhN
yQpYsG+aDOetkSn1l8+f2UBGfp7uflQK152z7h5P0I8SeJA7c4wpcxPU7HM+MUOu
nL5rdiKZ2K35drjVwsCnpRcyuZwsrz2vXqfQTjMeJDYKsKy/Zj1wXkRKMjnUhtut
lKtW0/XVUbvUn3ikh/yhYWYaIEJYDb1Es4Th5kUkYbo81J9SUYCkMA44jKj7Ss9h
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39045035225953139462802658397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 13:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-05 10:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'color-explorer-test.rmpaint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29535538626122551029668034066513502267028647020609176703102547738953649367291700055281261621500540935769119725652211218980923696811325455194701940644843842695332090109229727544187250527306029128600245723500783202060731327514471643967233080691836558542675162732083855774599476045190616102406802398739713508182131807295637360398393157460401525948714267732359121109483236625701482344093487696359683409850915022121029064073840939245006792275959796383276074070141797331771273938702511248690056044815372620738540363778522942235780804473026470134788033885503365742751707436543213473757655800069417630993305283997913314189651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color-explorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacour-test.coatings.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color-online-test.glasurit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloronline-test.glasurit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-finder-test.baslac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-finder-test.baslac.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-formulafinder-test.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorexplorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb7842443127f54728596b54bfa8ba7beab31da1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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