schaerer.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 4c:3a:ff:df:02:31:4a:9e:68:66:43:63:b1:4e:6e:7d was issued on by D-Trust GmbH.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF GmbH

Company registration number: CSM032794395
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:3a:ff:df:02:31:4a:9e:68:66:43:63:b1:4e:6e:7d
Serial Number (int): 101327670580456357962081372567669468797
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 64:32:58:a8:b0:a1:00:79:32:99:cb:1d:bb:db:aa:b4:f2:71:c9:fc
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 0c:c5:96:08:31:50:3c:1c:89:de:7d:eb:f2:da:b5:ee:23:ec:4b:9b
Fingerprint (sha256): 1d:eb:5e:f3:c7:17:06:81:02:d8:ed:36:fd:e2:f6:12:4d:78:f5:e8:78:35:02:9d:fd:5c:a5:a4:00:fc:ca:a5

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate schaerer.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.schaerer.com
schaerer.com
virtual-showroom.schaerer.com
soul-select.schaerer.com
coffeeblog.schaerer.com
usa.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com

Certificate

The complete raw certificate details for schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101327670580456357962081372567669468797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 15:44:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 15:44:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032794395'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687926432644795786045739570872622906947847015629038388394283380425071820375315786748761560785851066507940168449830870024243532621666566241917021686801398774305619162827141699387469765641545151687107473768892949456386234211561718910300994071763115799260225953705851329811940579751379482627005773736507122232286124017591781394109444979879697511193062378999667636122380477217027901462804056869788112843998117535569608118162854871981388383724739280399997879957806714879120301316170585322070208463035559268669645875248333870668779767001578682567251848314679796381036831448148614930107420422520099558738121405552954925006106262238397493467775328272208451131999807831337990974404348707383473428722238654096674855053581926085449324838849924035776036383960677177576810399671885453611380047618905781616233314413967912007428631919103043316759153417328101030326763927495472104851749260346129952696247919782881476900641559806985825483171293242722986856534783305937957695949708877328013768985942338426352931583359743963634643412594953690082637587364508680075052432091530713175087813906792561194701175668778100225693749637151737841473479667496778277187049875885743295956039113848045490968369730260792261203970721034553292151065441627178763679986963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual-showroom.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soul-select.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeeblog.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							643258a8b0a100793299cb1dbbdbaab4f271c9fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b3604222cf1fd81a6b73bcf8ce74dc57b53129a86ba0499d860e01400b79f6c91ee2f718db3a4f11e136c83c878f5f8c5e3e1e12421e49a83fcfe2bee34258ab110567e5c48b01690d667aeac0680b18494a9d4d17f4047244bc50f129df46ef88ff0f2ce1b821df8f676d354a4eda1ddb4c122e3a4984c1f1a0acc906095edec0d29a67d01520b97ffe8fb34aa30cc7ab4918b765168bed3c4b1b62b4cb22032b405d594de4dc7d5ad57189c62bff71d0bcd2dad6f3bcd4380e0a9304166583d0405e9430b5e7ff5f4faba441f74eacaf163ba6167b7ac5c20b27ff6e9cf2a665a24afdf6e4e9bf6f9d36e204333cc1c48160418d5618307088503ae6b0ab2