ecert-prod01-ca.con-veh.net

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3b:af:0e:14:e7:7b:ee:79:54:ec:28:b9:30:eb:5e:db was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:af:0e:14:e7:7b:ee:79:54:ec:28:b9:30:eb:5e:db
Serial Number (int): 79333389311492194050931717474425200347
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 51:d2:47:f7:f9:4d:06:b5:c8:ba:d3:86:d9:fc:d9:ef:0b:d0:eb:67
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4c:4c:02:f6:62:59:8a:ab:f6:6a:67:ad:cd:22:15:55:ba:60:75:f3
Fingerprint (sha256): 24:21:6f:86:0c:b3:61:7c:83:4b:7b:7b:0c:36:eb:0a:ae:ea:47:ed:86:52:e2:5c:5e:b1:5e:47:a9:b9:4b:16

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ecert-prod01-ca.con-veh.net

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecert-prod01-ca.con-veh.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecert-prod01-ca.con-veh.net
carnet.vw.ca
i-h-s.dp.ca00.p.con-veh.net
i-h-s.spc.ca00.p.con-veh.net
b-h-s.dp.ca00.p.con-veh.net
b-h-m.spc.ca00.p.con-veh.net
b-h-s.spc.ca00.p.con-veh.net
b-h-m.spr.ca00.p.con-veh.net
b-h-s.spr.ca00.p.con-veh.net
m-h-s.mon.ca00.p.con-veh.net
w-h-s.app.ca00.p.con-veh.net
w-h-s.auth.ca00.p.con-veh.net
w-h-s.spr.ca00.p.con-veh.net

Other certificates including the domain name con-veh.net

(limited to 100 certificates)
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-qa01.con-veh.net
carnet-CUBICclient.con-veh.net
ecert-prod01-ca.con-veh.net
carnet-verizonclient.con-veh.net
b-h-m.spc.us00.p.con-veh.net
carnet-verizonclient-qa.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-dev01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-qa01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.int.con-veh.net
carnet-boschclient.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
carnet-boschclient-qa.con-veh.net
ecert-dev01.con-veh.net
carnet-CUBICclient-qa.con-veh.net
b-h-m.spc.us00.int.con-veh.net

Certificate

The complete raw certificate details for ecert-prod01-ca.con-veh.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79333389311492194050931717474425200347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 15:20:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 15:20:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecert-prod01-ca.con-veh.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680973967194967373438116333143440190282725302759514995384833819253682517171080911218484211387899722487414717718871489895256561410796599706897204066858017034628108082353812298629592796054850840619971175957534899310338334157310204112771164907170762588854257325285722122383180910972997730549569636717760874851707121118355350548947688023064880843746619044427008311220467222975196140578435104559713588021215851427634492704664778038130905987467244661659728110602382044555629268195249849843962415718074039726654518086449611188019787574567925322349100923685924266314806934071819760481364272763210147512403191913799682886655961376115092809558136036412450298300526078329594952836495353974064955898834739887249181398991415333573369162215466241312276278200374304634194930451364336705033369590657662991404531400487670736069654621337783940259217424182051328321628066630631134642167712547520453532791910489994877021495002797528657756663503256662334482732379848889775813893170582649766141583206714924981704086677875715658471103632084054288849629891515011485460007675602748157247889758032391984132575403609435755664546610809501115204980969444920443545262932526916201583298585983052549087699615001183475374964142374631526764009577459283004592929238863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51d247f7f94d06b5c8bad386d9fcd9ef0bd0eb67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (376 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecert-prod01-ca.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnet.vw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.ca00.p.con-veh.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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