www.vdivde-it.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:02:a0:3e:46:53:8c:3a:49:da:1e:8e:e3:ec:84:b8:27 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vdivde-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:02:a0:3e:46:53:8c:3a:49:da:1e:8e:e3:ec:84:b8:27
Serial Number (int): 269166842721032483586787260057807529228327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:2d:a9:47:0a:3d:91:10:24:0c:54:79:4f:97:c3:3e:c6:c3:af:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:6c:45:aa:a3:9f:89:97:c1:96:97:fd:b5:c0:f2:1d:1f:9d:63:59
Fingerprint (sha256): 17:d2:2e:87:d5:67:a0:5d:c3:9b:bd:19:63:5c:d2:7f:04:61:12:b4:56:79:7e:21:7f:5f:6c:b8:fd:6b:49:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.vdivde-it.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vdivde-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vdivde-it.de

Other certificates including the domain name vdivde-it.de

(limited to 100 certificates)
analytics.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
nextmatch.vdivde-it.de
zim-foyer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
app01.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
transfer.vdivde-it.de
upload.vdivde-it.de
survey.vdivde-it.de
wikibzf.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
*.analytics.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
mail.vdivde-it.de
survey.vdivde-it.de
vcse.video.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
ssl.vdivde-it.de
vcse.video.vdivde-it.de
wikibzf.vdivde-it.de
app01.vdivde-it.de
exchange.vdivde-it.de
vdivde-it.de
stellenangebote.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
vcse.video.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
zim-foyer.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
bl22.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
ssl.vdivde-it.de
analytics.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
vdivde-it.de
app01.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mail.vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
ssl.vdivde-it.de
app01.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mdm.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de

Certificate

The complete raw certificate details for www.vdivde-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISAxcCoD5GU4w6SdoejuPshLgnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjUxNTMxMjlaFw0y
MDA1MjUxNTMxMjlaMBsxGTAXBgNVBAMTEHd3dy52ZGl2ZGUtaXQuZGUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCp3tPSsNSyv01LmUZ2xGUHQlH7WWXs
G+emiIY5ygWfzdyj/77Eq7jkNp0/AYwdCxAdYvOYSkjiUoZ6YoNz4kC2G0qE6ujJ
OgAgosZ/13eEtvt7bt5fNmQBEQKFCdG6JllcysZQCtIOQZGvH5unbDCwyOcspIaB
5zMPTq3hKaP5zbQXndCE4Bz9w9jqEbX8gtkAzqGnl69fDKgykJSUJVzLbZLqHdPW
Rcumyj9r49rcNXD5iU8zdMugJkS1XDt0uZSafbEOsAUpb1l/kOBOvyfwrR6OzRKY
VMrGH4Nsp7O6UD/Wo7bGcIpF1KGtzBPbvSZZ4k3rI0HFGl16HsJc3lmO5lmky7pi
u4oF3/le++mOgsov/D/os+fGWyzw/oG9q+B/64TwY682Z0Ju+qcM6rx9ORmow4po
eyjwXYgbfjsvl2e7Kpd1JXbhFiV32PK/+url/HkioqLImAOVQVsUK1jogHeFtIH0
iLokKY32ixbuDRvScJr54IAgYNxElCnGJm2GO3g+S3mSb1ZhwRp7FKp7EplsVIEI
KWcvsK6Ol5+scqV+c6qlaBvELHcEfRy+pVy8wWRbjf57R6rGeORZFVlU/XWZrKkL
Yo4PpVAvJgp1BNZz47OMGaFFGiWTUs6XwaP2uskWgqsvxMCNgom14cIUYQ3YfTYH
znlzVNNXSyr9eQIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRR
LalHCj2RECQMVHlPl8M+xsOvCzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy52ZGl2ZGUtaXQu
ZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC
BIH3BIH0APIAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXB9
MGpTAAAEAwBIMEYCIQDpD+q7pKc6QXU6QZYZcOsN69kSe10qrLh8OazNDaK6jgIh
APni4ffyjGuv20XF+5mBoyGqJuWSN3MPp9C0wHkFzME1AHcAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFwfTBqiQAABAMASDBGAiEAqvt0sPOyobKV
nPfdqPmeNY81iQsedJVD9tTQL8WiDwsCIQDqd7wRn+TR4mW1VyWYh1T6Tag6M+qh
po/4C74kyFecvDANBgkqhkiG9w0BAQsFAAOCAQEACILFg4R/c2oOFgPXnXIC+5Q6
Ox6NMQhh9BYKZ753vz3vFHEMvZcKbp/Hv9qnW5v3o+kegTaKwTl0dqIlMvM3G39A
vkaavRP/dw8GY0iqMxvtf5H0+VSgk/54onIvj6m7ghGtfkWNAu9Hj80JjQ4nr8Aj
bNIRG2zngszd1PsHF0YsCnQFROulLH6rbdbhRurgNgmaWz3XOEMOYaXURRmpcm7m
ROyNPiDu6uSBEetx+9Sdu6fRGyXIoVPKc1pgsCNiE1/T9y8EoGWJ21anDsoVKXu7
Ga710DXP9Wi11IvTfaANT99Vx6pO1bWL4iXJqkRvnzfxzgEUQmWt9UB4azWuhg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269166842721032483586787260057807529228327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 15:31:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 15:31:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vdivde-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693010849908775680548736265541979744344905472768142183951800051986652983442613417689079294213100984842585790346818049181968228608557791373919445456943820072145071668262925393265047816475745850061732565607087498957608620846667301203477109751284889235468881505191383278249520863624354420812576781055613816054729647897095301881997636776510481976807015066930901181916222454162148878690045008898145661977813118631767019513793155906044180289545328870689730913737099327583751104800115267751244744842416802640364632572039823233644149091970751969763618225473918628301635045314950552824874753320843778048504734252820314036410822102921684792053806247923164218596730460042954009825671320656226969130024579675942879809317104668189013892875125682180880412509677944399575419065094726304923673732076635754148938413506626294178963520942781723524779341185950993718570118938791866208255537325263671581066341439304100742833232200626697826869432398594561274055761599276520626336990566122324255163247983009737329343011724047894013913676460830222938608200021757107234999525399972460964765408080215854988133790769074990356873696947566882672014415131879790089233471415546825108807880974627378851899503798442131538000634647460226358522901314633554715571060089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							512da9470a3d9110240c54794f97c33ec6c3af0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdivde-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707d306a530000040300483046022100e90feabba4a73a41753a41961970eb0debd9127b5d2aacb87c39accd0da2ba8e022100f9e2e1f7f28c6bafdb45c5fb9981a321aa26e59237730fa7d0b4c07905ccc1350077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707d306a890000040300483046022100aafb74b0f3b2a1b2959cf7dda8f99e358f35890b1e749543f6d4d02fc5a20f0b022100ea77bc119fe4d1e265b55725988754fa4da83a33eaa1a68ff80bbe24c8579cbc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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