app-qs.kaufland.net

- Kaufland Stiftung & Co. KG -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 35:7e:b9:a5:60:ec:ce:26:4a:d1:cc:89:8f:ef:ec:fb:52:66:fa:6f was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 35:7e:b9:a5:60:ec:ce:26:4a:d1:cc:89:8f:ef:ec:fb:52:66:fa:6f
Serial Number (int): 305402576797001721764836415932532898976189839983
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: dd:27:e1:0f:03:9d:46:a6:8f:8d:85:c3:d4:36:53:e8:de:bc:b6:92
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): 5f:4e:ad:0d:a3:3b:57:f1:c5:73:61:5c:2a:52:e0:29:f1:21:e9:25
Fingerprint (sha256): 1b:e0:58:27:0c:fe:59:64:d4:5d:1f:bf:ae:96:3d:08:17:2f:a8:5c:fd:8a:d1:39:c1:67:57:c1:73:d7:12:87

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate app-qs.kaufland.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app-qs.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app-qs.kaufland.net
app-at.kaufland.net
app-et.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for app-qs.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305402576797001721764836415932532898976189839983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-02 12:04:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 12:04:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app-qs.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849835629553903309222515858733446369221768985617027107564858204821298244865656171595970161831659604423109765143190261136956169850270315635863981004845470805847535296058235290926540655991620319517472531524556393058142395821401049333290808797167838725976056727626315822261510191070903940958334558237662373651303462899183262412842120673032986855869561726485929482368819633249671985253244353825851308586068632834418321935593944364079149431469158522467284172624279064290145843473943848218984979277742382506892100823935572583136805050557233488434243198938064968768702222136995819803345280401158860786808129476122649139377788142165394105150624040303617958989751164086613128080558444359921227308439918351489649960833992135297568611227059506731902533963777725487770502532056950935000339906208364080537803508258196875867417962779442025038882886649833877232539879907248047179536141553316698203721043573736442722705937366202621970687187060420223512994819750158925260722146252023905812912398560514726251812264108283930637048460470776492831461295775553951526122897253551924491816132162083035506109629944846263300371499800372070068121857495048805947357688894239966603111575250453994647618366160885536510926186337580721266942886461724072922542894711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-qs.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-at.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-et.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd27e10f039d46a68f8d85c3d43653e8debcb692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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