webanalytics.1und1.de

- 1&1 IONOS SE -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:8b:b9:1a:2f:de:99:f1:cc:ff:3d:62:2f:99:7b:83 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 IONOS SE

Organization: 1&1 IONOS SE
Organization unit: IT
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:8b:b9:1a:2f:de:99:f1:cc:ff:3d:62:2f:99:7b:83
Serial Number (int): 12688535545924388802467669727197625219
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:0c:9d:44:f4:d0:d2:48:f2:40:2f:5d:cd:91:26:2d:e8:97:16:df
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 06:a1:6c:04:7e:5c:be:ad:9e:a8:18:a2:e0:47:8c:66:0e:b3:34:9f
Fingerprint (sha256): 21:c2:74:b6:11:11:4e:24:fc:21:e2:bd:3c:3d:06:30:a5:2d:c3:6a:df:e5:78:a4:28:a3:df:7a:87:f1:71:21

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate webanalytics.1und1.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webanalytics.1und1.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webanalytics.1und1.de
webanalytics.1and1.co.uk
webanalytics.1and1.es
webanalytics.1and1.it
webanalytics.1and1.mx
webanalytics.1and1.pl
webanalytics.1and1.com
webanalytics.1and1.fr

Other certificates including the domain name 1und1.de

(limited to 100 certificates)
col-ext-mamproc.1und1.de
incapsula.com
sma-static.1und1.de
listlocalcheck.1und1.de
kontakt.1und1.de
home.1und1.de
pixel.1und1.de
www.he-roes.de
postmaster-contact.1und1.de
domains-center.1und1.de
upselling.1und1.de
img.ui-portal.de
kst-offensive.1und1.de
*.navigator.1und1.de
edit.1und1.de
clientsmartfax.1und1.de
kundenshop.1und1.de
comsproxy.1und1.de
pocketweb.1und1.de
sd2dav.1und1.de
mike.1und1.de
apitest1.1und1.de
microshop.1und1.de
*.1und1.de
pre-mobile.1und1.de
hilfe-center.1und1.de
telesales-hosting.1und1.de
community.1und1.de
webmailcluster.1und1.de
tnt.1und1.de
maps.suche.1und1.de
upselling.ionos.de
webservice.ccsys.1und1.de
www.he-roes.de
img.ui-portal.de
sd2dav.1und1.de
www.he-roes.de
0700.1und1.de
reporting.smartsurfer.1und1.de
forum.1und1.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
webservice.ccsys.1und1.de
mein.1und1.de
account.1und1.de
www.he-roes.de
*.home.1und1.de
de-mail.1und1.de
premium-feature.1und1.de
sem-admin.1und1.de
activator.smarthome.1und1.de
pixel.1und1.de
privathomepage.1und1.de
hosting.kundenshop.1und1.de
auth-proxy.1und1.de
shoplogin.1und1.de
pre-auth-proxy.1und1.de
wl.portal.1und1.de
wechsler.1und1.de
vertrag.1und1.de
newsroom.1und1.de
hilfe.1und1.de
homepage.1und1.de
mbe.1und1.de
incapsula.com
pre-kunden.1und1.de
www.email.1und1.de
prelive-advertising.home.1und1.de
info.1und1.de
dopas.1und1.de
wechsler.1und1.de
img.ui-portal.de
as.1und1.de
static.1und1.de
pre-dsl.1und1.de
digital-success.ionos.de
1und1.de
pre-upsellingtool.1und1.de
*.1und1.de
osfepre.1und1.de
myapps.1und1.de
phpmyadmin.1und1.de
mobile.1und1.de
webmail.1und1.de
domain-center.1und1.de
dm-jira.1und1.de
listingcheck.1und1.de
www.he-roes.de
chat.hilfe-center.1und1.de
www.he-roes.de
seo.1und1.de
wmde.1und1.de
newsroom.1und1.de
m.1und1.de
winshde16.1und1.de
newsroom.1und1.de
digital-success.1und1.de
images.preisvergleich.1und1.de
incapsula.com
webdav.office.1und1.de

Certificate

The complete raw certificate details for webanalytics.1und1.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw273bmaystqsD2hwt4Vq
XQai4y69ec+5PR+iGT/hhPbMppu3k6a6rqnv31X3ByikmSJRxWW3FbIME6vamrqC
jsCknbNWE8hGLG59AjvTh8DbC+uiN1R2+7DLr9Q4e9C/r7LmJU2lwVVmVEoGNspH
mM7x7z6zJZ2JJtc24JTWI4VRmb1ZsXd9ILa6ML7DHBqQrg2lgFxQ68Yc3ZzEmx8R
oy5t50tIUa8qsrR8EsbosgJpCGFbhrlbeMeKVtV6t3CN8PdDJft4/KWoGi2x1qBM
ChUnFHxuLBRcHZnmm+8kzlxuz8ZIQqTHk5K+HSZCzBrIH/XkaXTwO4gTNjEkK5he
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12688535545924388802467669727197625219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webanalytics.1und1.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24671189102933646073738872855339214913632065441530698079332957105273576854738504564956072039412110836892780250011174502022026984758059463609762062463473095520732279651252773350670488454869398953829369347238099774458591682611799338058105999551706538585243623534103316907122931160580203064042210067746840445259269219763912813991757067997762336581567231185834311258604072540280442609262376585704829500116672490636033171143738253678137477889933194088291361937323792269260322269947435591076099105716757748515250357340806694204584211333763106942633210555321793615233181825055572809585635453845393698487951200032872465981029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							940c9d44f4d0d248f2402f5dcd91262de89716df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1und1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webanalytics.1and1.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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