expe.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 6a:5f:ad:ba:ad:45:6f:f8:38:2c:a8:91:55:57:78:4c:cb:0d:84:4e was issued on by SwissSign AG.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:5f:ad:ba:ad:45:6f:f8:38:2c:a8:91:55:57:78:4c:cb:0d:84:4e
Serial Number (int): 607286726449490823351848021721033356055770137678
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 18:67:3d:b9:79:a4:7d:65:b8:25:62:b1:3b:7b:20:90:bf:97:16:f2
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): c8:ca:a3:0b:b6:cc:76:e5:36:f3:90:6c:9c:3e:a3:a3:1d:0e:05:27
Fingerprint (sha256): 23:93:52:61:df:fc:0a:5d:20:e0:73:7b:60:51:4f:28:fd:00:90:a1:8e:c8:42:0e:4f:c5:37:b8:07:eb:b7:ee

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate expe.funkemedien.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expe.funkemedien.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expe.funkemedien.de
expe02.funkemedien.de
vc.funkemedien.de
expe.vc.funkemedien.de
expe02.vc.funkemedien.de
expe-cluster.vc.funkemedien.de
expe-cluster.funkemedien.de
join.vc.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for expe.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 607286726449490823351848021721033356055770137678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 09:04:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-26 09:04:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netzwerk und Sicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expe.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709129124518298992508074214831653321502146725410777240865420589557234931800193406814511460354276180199034398967960785318388539448062994264889173889391458637161422972273892077109454907907794047170567105810233433609067968219809176057859658436299302523595208498230437047928735726560312769361105607291096509965095485844455725473123013418080228427820594516399074674252374844155364021019470922622706745108320627594488354178402106066465848631869201078663680384359796831082706286625171692514706944679020263919104040285294550075745898263966567745339339903188960507309990347634265842117337410699105065427028744771051815991453341104374110823751769660330722655139704704359504975736048948268419885591653747307533165337438057730047482393148551265396066857141400521353679319838958226462987205547283847323441880915024227768537730959966443040312619163516140204714809707397208131846896487964830291801064830377374806061728379747485064946336700666600392735043211283544500925075796153361537866990375194494270130258624110034487684595102059429805179735426402735730766563032027555011448779508592146343133004383273874460676217260092933535850955166805307998466749480609628413156575951829681375593543527589111723255773124124132608182994805073639056105150266601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe02.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe.vc.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe02.vc.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe-cluster.vc.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe-cluster.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.vc.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18673db979a47d65b82562b13b7b2090bf9716f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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