spiegel-de.spiegel.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:db:f3:7a:f9:27:00:35:ca:b4:84:14:da:bc:00:41:a1:21 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spiegel-de.spiegel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:f3:7a:f9:27:00:35:ca:b4:84:14:da:bc:00:41:a1:21
Serial Number (int): 423294622999328940568699588123597805297953
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:40:cc:d0:a8:94:0a:a7:3b:9e:dc:3f:e6:38:65:43:48:84:64:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:f5:10:ae:ad:20:a9:54:61:a2:50:0d:53:d5:d8:ef:43:70:13:7b
Fingerprint (sha256): 1d:c7:ff:fc:a1:8d:1f:0e:51:ea:00:55:39:f3:f4:61:de:70:70:f8:f2:97:64:26:54:84:01:4b:b2:36:bc:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate spiegel-de.spiegel.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spiegel-de.spiegel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spiegel-de.spiegel.de

Other certificates including the domain name spiegel.de

(limited to 100 certificates)
jira.spiegel.de
service.spiegel.de
pushmanagement-ui.review.nextgen-services.spiegel.de
staging.sportwetten.spiegel.de
tippspiel.spiegel.de
gutscheine.spiegel.de
ssl.1.damoh.spiegel.de
digas.spiegel.de
amazonproductprovider.qs.nextgen-services.spiegel.de
shop.spiegel.de
imode.spiegel.de
review.assets.spiegel.de
newsletterversand.spiegel.de
vcdn02.spiegel.de
sftp.spiegel.de
qs.spiegel.de
vcdn1-secure.hls.spiegel.de
advent.spiegel.de
digasred.spiegel.de
SPIEGEL-Verlag Rudolf Augstein GmbH & Co KG
video-secure.spiegel.de
apiegel.de
cdnstatic.secure.spiegel.de
gcp.qs.www.spiegel.de
akademie.spiegel.de
cms.review.www.spiegel.de
arztsuche.spiegel.de
vcdn01.spiegel.de
einestages.spiegel.de
magazin.spiegel.de
eurojackpot.spiegel.de
derspiegel.eu
arztsuche.spiegel.de
m.spiegel.de
derspiegel.eu
gcp.dev.www.spiegel.de
advent.spiegel.de
www.spiegel.de
akamai-san8.exacttarget.com
newsletterversand2.spiegel.de
bento.app
fa.review.wisl.spiegel.de
gcp.prod.www.spiegel.de
tracker.it.spiegel.de
www.stepstone.de
m.spiegel.de
click.angebote.spiegel.de
einsurance.spiegel.de
cloud.angebote.spiegel.de
sams.spiegel.de
aubapi.spiegel.de
arztsuche.spiegel.de
review.www.spiegel.de
review.journalsuite.spiegel.de
service.spiegel.de
contentgarden.spiegel.de
static.gruppenkonto.spiegel.de
www.weltski.de
review.journalsuite.spiegel.de
bento.app
cdn.secure.spiegel.de
cdn.secure.spiegel.de
www.weltski.de
bento.app

sportwetten.spiegel.de
click.angebote.spiegel.de
dev.www.spiegel.de
digas-review.axelspringer.de
m.eurojackpot.spiegel.de
prod.warden.spiegel.de
service.spiegel.de
view.angebote.spiegel.de
kopfsache.spiegel.de
www.weltski.de
ivwbox.spiegel.de
www.stepstone.de
aubapi.spiegel.de
contentstation-qs.spiegel.de
microshop.spiegel.de
gluecksspirale.spiegel.de
streaming.hls.spiegel.de
dev.fanexperts.spiegel.de
dev.talk.spiegel.de
sportwetten.spiegel.de
lotto.spiegel.de
microshop.spiegel.de
spiele.spiegel.de
staging.sportwetten.spiegel.de
elvis-qs.spiegel.de
vpn.spiegel.de
eurojackpot.spiegel.de
dev.www.spiegel.de
cdnsource.review.www.spiegel.de
osp.spiegel.de
spiegel-de.spiegel.de
static.gruppenkonto.spiegel.de
sats.spiegel.de
grafana.review.cm.spiegel.de
magazin.spiegel.de

Certificate

The complete raw certificate details for spiegel-de.spiegel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISBNvzevknADXKtIQU2rwAQaEhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTQxNzA3MDdaFw0x
ODA4MTIxNzA3MDdaMCAxHjAcBgNVBAMTFXNwaWVnZWwtZGUuc3BpZWdlbC5kZTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANkZ3/Z1bz+ulFqERDQ6tp+y
OTORCRa2jro1lxp74qh5pePJJm/zMpTZCXQ3vyhA5eYYW9mhpoCihp7aXqpUsbul
KZIunDU/WKCj9ddfBbQI6WOjrXcVAOFaPkP+5TKEZRwUZ0aZ3A2Zc9M7rkaaexc7
bkbbMV9S2spy8gOZSRDbgKoY7bHN6r9WiBK6VLwwHEJOQy/NAvQRSMCYlLJtvRlC
QYMnC1UGhW62RgPV24OxGZhz/RSD/4RvwqLUYQIy2t4zz7uJE1k1NgfEjTZ9lftZ
vXbrmGAMoQiqut43nd86giqPWgXL4xJzx06+NDRhhue3Zq4nkMubp2T656x7wS8C
AwEAAaOCAxwwggMYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUjEDM0KiUCqc7ntw/
5jhlQ0iEZP4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghVzcGllZ2VsLWRlLnNwaWVnZWwuZGUwgf4G
A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M
gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl
bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl
cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y
Zy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ACk8UZZUyDll
uqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABY1/Vp18AAAQDAEcwRQIgH5QAKB7S
rELJ1yR3jFHStYELv9Viy7epW1EGl6G5jAMCIQCIFbMKoyxPm/qqT0NjQow7DzNs
SNc352G1TPhbCVbGlAB1ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79k
AAABY1/Vp30AAAQDAEYwRAIgVulGeOEXxvmca/1Nxqv7hQpJVk5ZxxIw9Xd9Jp5Y
L80CIEWWuEzQVT7boX17ttqdjweI4aZ6TKRH1jBW/VwLUlULMA0GCSqGSIb3DQEB
CwUAA4IBAQBr6SbQzOpQSZe/8YPZuh1Pb/KltZe8+Ac2Hx4BYnI3JtCja78Tmy+5
O83Ep/l2lQo+jWWzfCGpKEtWhts+MQtjBjb9dk5nC3CXbbwYj65gS+H8cu/EEgh9
JYmS+mWMIaBl275YLiwmWqC5oqqG8HxpGzgLy6kaLu9W3t+XIrQTjKsbFW3WTyOA
JxcEPbm6foM+iOALodlSZMuVmkgPHG/upCtUUFhMswAy1lb4qrIM2d4RMAA+iTpe
GDnwNWivlN+IzMxRdkrodjQ8BJ0QDmpXoo6et2Ck+Y/hHN+TrNXHjk/3hq+gVBsx
+ZTKJgWcJtgoZGo2SZtsE/cDd5egiQCY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rnf9nVvP66UWoRENDq2
n7I5M5EJFraOujWXGnviqHml48kmb/MylNkJdDe/KEDl5hhb2aGmgKKGntpeqlSx
u6Upki6cNT9YoKP1118FtAjpY6OtdxUA4Vo+Q/7lMoRlHBRnRpncDZlz0zuuRpp7
FztuRtsxX1LaynLyA5lJENuAqhjtsc3qv1aIErpUvDAcQk5DL80C9BFIwJiUsm29
GUJBgycLVQaFbrZGA9Xbg7EZmHP9FIP/hG/CotRhAjLa3jPPu4kTWTU2B8SNNn2V
+1m9duuYYAyhCKq63jed3zqCKo9aBcvjEnPHTr40NGGG57dmrieQy5unZPrnrHvB
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423294622999328940568699588123597805297953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-14 17:07:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-12 17:07:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spiegel-de.spiegel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27406471543893250277094657234681766699062730298504581867963300966683958461376482470733274895695418353026183287179803285042917440988415518549601763235319798841085080762249044638228683807449959937703425084327527281139905447652189921332498388310477818081740863020038533243043415974579213474381371465022291637168609948784541686648725580946172010411855776017224917205903484166504871486006453320871788394450173924834450345603841524199604275018958619077066618521260462232189789397848376593411624445393814780305114106981507932310273254056809254624226840056853864037144825323953691974408152025851753075950451996307267232973103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c40ccd0a8940aa73b9edc3fe6386543488464fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-de.spiegel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001635fd5a75f000004030047304502201f9400281ed2ac42c9d724778c51d2b5810bbfd562cbb7a95b510697a1b98c030221008815b30aa32c4f9bfaaa4f4363428c3b0f336c48d737e761b54cf85b0956c694007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001635fd5a77d0000040300463044022056e94678e117c6f99c6bfd4dc6abfb850a49564e59c71230f5777d269e582fcd02204596b84cd0553edba17d7bb6da9d8f0788e1a67a4ca447d63056fd5c0b52550b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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