click.news.hypovereinsbank.de

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:49:ce:f7:4b:81:9e:43:3c:f9:a6:51:75:9d:d3:0a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:49:ce:f7:4b:81:9e:43:3c:f9:a6:51:75:9d:d3:0a
Serial Number (int): 17663199384979516573591976195450065674
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:5f:5b:f2:e8:ad:d7:a0:69:ec:33:9e:18:4c:84:7c:74:76:4f:f5
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): dc:8b:aa:87:35:b8:d4:f6:e1:53:78:e9:85:93:ca:c4:8e:67:44:02
Fingerprint (sha256): 15:e5:11:c7:27:f1:5e:31:f6:e4:7d:80:96:83:39:5d:33:42:b3:93:17:f1:c1:44:47:77:eb:cf:88:b3:9a:6d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate click.news.hypovereinsbank.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for click.news.hypovereinsbank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

click.news.hypovereinsbank.de

Other certificates including the domain name hypovereinsbank.de

(limited to 100 certificates)
www.hypovereinsbank.de
pfp.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
produkte.hypovereinsbank.de
communications.qa.hypovereinsbank.de
hbci-01.hypovereinsbank.de
blog.hypovereinsbank.de
res-findata-uj-v3.unicredit.it
angebot.qa.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
webtraining-qsu.hypovereinsbank.de
banking4business.hypovereinsbank.de
www.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
communications.qc.hypovereinsbank.de
ucforms.qa.hypovereinsbank.de
my.hypovereinsbank.de
about.hypovereinsbank.de
forms.hypovereinsbank.de
workingcapital.hypovereinsbank.de
virtuals.qc.hypovereinsbank.de
mcatalogue.hypovereinsbank.de
ial.unicredit.it
hbci-01.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
sucmetrics.hypovereinsbank.de
kampagne.hypovereinsbank.de
communications.qc.hypovereinsbank.de
hypovereinsbank.de
forms.hypovereinsbank.de
ddx.qc.hypovereinsbank.de
finanzkonzept.hypovereinsbank.de
contact.hypovereinsbank.de
MQ.GET.HVB.HV.GWXIGW00.MQEXTGWGET.HYPOVEREINSBANK.DE
www.hypovereinsbank.de
multiweb.it-v.hypovereinsbank.de
geschichte.hypovereinsbank.de
privatebanking-standorte.hypovereinsbank.de
il.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
communications.hypovereinsbank.de
akamai-san228.exacttarget.com
www.qc.hypovereinsbank.de
hypovereinsbank.de
press.qa.hypovereinsbank.de
immobilienfinanzierung.hypovereinsbank.de
kredit.qc.hypovereinsbank.de
tpas.application.hypovereinsbank.de
res-findata-hv-v2.hypovereinsbank.de
hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
hvbforms.qc.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
ucforms.hypovereinsbank.de
dossiers.hypovereinsbank.de
www.qc.hypovereinsbank.de
hypovereinsbank.de
click.news.hypovereinsbank.de
stats.hypovereinsbank.de
dossiers.hypovereinsbank.de
www-gimb.qc.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
antrag.hypovereinsbank.de
communications.hypovereinsbank.de
ratenkredit.hypovereinsbank.de
webtraining.hypovereinsbank.de
angebot.hypovereinsbank.de
hvbforms.hypovereinsbank.de
antrag.hypovereinsbank.de
upload.hypovereinsbank.de
uat.omnichannel.hypovereinsbank.de
euroweb-sin.application.hypovereinsbank.de
kredit4business.hypovereinsbank.de
geschichte.hypovereinsbank.de
hbci-01.hypovereinsbank.de
forms.hypovereinsbank.de
my.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
akamai-san228.exacttarget.com
virtual-reality.hypovereinsbank.de
kredit.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
tpasgw.application.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
www.hypovereinsbank.de
ebics-clearing-itu.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
services.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
empfehlen.hypovereinsbank.de
pfp.hypovereinsbank.de
allianz.hypovereinsbank.de
antrag.qa.hypovereinsbank.de
ebics-clearing-qsu.hypovereinsbank.de
retailevents.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de

Certificate

The complete raw certificate details for click.news.hypovereinsbank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r+0uXAIjHf6YAkylP/X
oNPq4Bk+EKsRJ2rXQYDDlL5D0HSOmSNU8DAhCGdVsOeYBR4P0i7IU8eNGRoyl46/
rMfV0dubK4nkv/+MMrFaPdQp07hUHQbNGJzxK2JzEjW2w5NSaMUNeLltfE68THpG
JMWyrOYv3LDJYSjs3u6Ase0BTgJcL94OgdgUwAgwtikX3H+nhBd0iNBN0FPoDpju
6QqR1yfm/13SygOPmma7ic31rQHCUrHuROo72hhJexqHchYtYaodyf5DIL45vUtm
1YVldap8lHyjCGg5ZOjjM/8MAVT0rm9rX3X7d6YvyCv30twfmh0+FemlN17L4q5Z
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17663199384979516573591976195450065674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'click.news.hypovereinsbank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27109530992247317574167524970198885205444865148731282733042352261453969149358230032713920279936305605314380877934461520386534436492795817622842866354668653171423779100904681117941861606340869253148419273810763565611461170829849296139067386838069437270836715476803526344152211795698489992461222534850709141547238588663756974381143707982098014862481573534928038390250009769145765068618937474189046850049564942709227728496721982197055666888401409217055527209770390017381816517778270606181766642642277508168767349909664381755432140634608481775646866875241158249474887426982004629256563978105660911563816908482337628379421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a85f5bf2e8add7a069ec339e184c847c74764ff5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.news.hypovereinsbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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