bf-tools.net

- BurdaForward GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:28:49:ff:c5:ff:f8:90:ae:84:1b:24:e0:52:81:19 was issued on by DigiCert Inc.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BurdaForward GmbH

Organization: BurdaForward GmbH
State / Province: Bayern
Locality: Muenchen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:28:49:ff:c5:ff:f8:90:ae:84:1b:24:e0:52:81:19
Serial Number (int): 20147612691475635742646173429667103001
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9a:5a:aa:98:e8:aa:b1:34:a3:f5:f1:36:83:e2:10:96:e2:0d:e4:42
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1e:f0:8a:bd:e4:26:5c:02:3a:1b:2a:38:9e:d1:c8:40:60:3f:40:7a
Fingerprint (sha256): 22:ed:f1:28:7d:15:65:9f:3e:df:87:1e:eb:f7:e5:c5:8a:49:54:c0:53:7e:0d:2c:42:7a:15:0c:46:b8:fe:6c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bf-tools.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bf-tools.net
video-dev.huffingtonpost.bfops.io
fol-staging.cardscout.de
m.videos-stg.huffingtonpost.bfops.io
videos-dev.huffingtonpost.bfops.io
sloma-stage.bf-tools.net
autoren-stg.netmoms.de
a.bf-tools.net
videos-stg.huffingtonpost.bfops.io
sloma.bf-tools.net
autoren.netmoms.de
www.cardscout.de
autoren.finanzen100.de
cardscout.de
video-beta.huffingtonpost.bfops.io
m.videos-dev.huffingtonpost.bfops.io
autoren-stg.finanzen100.de
www-staging.cardscout.de
m.videos-beta.huffingtonpost.bfops.io
videos-beta.huffingtonpost.bfops.io
welt-staging.cardscout.de
video-stg.huffingtonpost.bfops.io
twc.bfops.io

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbX+8LdrIzyHnf7RWLv
xNKJZo92mfujisoxJ4aFerqzhq8guqDULbe2zHCpVYTnTDWvUjkVfBX/4i1CzX+I
f6UnQtm1Nw40E/JVpA9CLFYClE8jxoVurguPhjC/nq7uxZdocjJhEs4k0r+yGO/U
r5LlUxMCXu6BMVRAMX59XLdI+7xBVX/apJVil30ZWren2VnBUMTMzo1IXws9qDy+
EEOGpErUyZTHQ0TX9GImN7UJtrbIgbByiE+EFj9v+tbmZXOAOC98GPhIw0cC7MgC
AHVIT4/lAjapkixHEVcP0n0gLngXqugpgmL+WUg0/UxWrGYc8q0bLr0mYQGE3tb/
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20147612691475635742646173429667103001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BurdaForward GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20951043477315665650312638599983815450782430055588360928920701578474225565162725865396482417287704892742750133684717972442269593288076483431866079898975680100487657327112308397453423704649420395698148555646556730250798634373359284264267126069154770493062847216743371391296822588275688026707510929613620361661768995699352812071439259799339471935159280726875703281403504981256689671185175876662875932663835492448923868018628410900742977755357933719272175166950717220911723486999121598208110724264024898972157741471255173818957845872929430664561718871858249009469689325333269204775112601334781925817538465947135994429229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a5aaa98e8aab134a3f5f13683e21096e20de442
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (631 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-dev.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.videos-stg.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-dev.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloma-stage.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-stg.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloma.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-beta.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.videos-dev.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren-stg.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.videos-beta.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-beta.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-stg.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.bfops.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162fd2c85080000040300473045022100efd61087c6d81e02f8dd2ac50ace83fcd20912c1f39a5890e088c1461415eb3e0220772a52b2bc75df6d48bdac0a803a15348524be8e5807e2a38a80c0394dd3072c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162fd2c869b0000040300473045022100e2ba73e46b04a4bd7326b8957e4311f57d8eb6cf02d8cff61417922312d1fea802204c8b72fa94166063d4d66b4681a3c21ab1b4bac087b083f8aa3989bcb675b610
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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