externepartnerws.vhv.de

- VHV Holding AG -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:f1:c3:32:d4:ad:e2:b9:a8:80:96:8a:38:d3:02:bd was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

VHV Holding AG

Organization: VHV Holding AG
State / Province: Niedersachsen
Locality: Hannover
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:f1:c3:32:d4:ad:e2:b9:a8:80:96:8a:38:d3:02:bd
Serial Number (int): 2584530635793684048862343775577637565
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b9:37:a9:6d:a3:45:5f:9b:25:38:9a:34:cc:4a:b5:f9:5f:96:68:2f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 75:72:cc:a6:cc:cb:ce:73:1d:bf:d7:51:07:d0:78:e4:b5:d2:39:33
Fingerprint (sha256): 25:09:f1:92:4d:29:5e:99:dd:64:07:dd:20:23:e9:38:d7:d9:e7:57:bf:17:a3:69:1a:ae:39:ae:ab:7e:9d:b4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate externepartnerws.vhv.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for externepartnerws.vhv.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

externepartnerws.vhv.de
www.externepartnerws.vhv.de

Other certificates including the domain name vhv.de

(limited to 100 certificates)
vdi-portal.vhv.de
sts-s.vhv.de
sso-j.vhv.de
sharefile.vhv.de
dssmdm.vhv.de
buergschaftsportal-prod.vhv.de
maxnet-test.vhv.de
storefront-test.vhv.de
kundenportal-j.vhv.de
maxnet-n.vhv.de
vermittlerws.vhv.de
buergschaftsportal-prod.vhv.de
segmdm.vhv.de
uploadws-test.vhv.de
tarifrechner-s.vhv.de
moir-core.vhv.de
kreditportal-test.vhv.de
maxnet.vhv.de
sso-s.vhv.de
www.buergschaftsportal-test.vhv.de
www.buergschaftsportal.vhv.de
bildertool.vhv.de
login.vhv.de
www.buergschaftsportal.vhv.de
lebenrechnerweb-t.vhv.de
unwetter-test.vhv.de
photovoltaik.vhv.de
vermittler.vhv.de
login.vhv.de
vermittler-test.vhv.de
bildertool.vhv.de
gastportal.vhv.de
jvpms.vhv.de
externepartnerws.vhv.de
sysint.auskunftsersuchen.vhv.de
jvpms.vhv.de
www.vhv.de
kreditportal-test.vhv.de
vermittlerws-h.vhv.de
sts.vhv.de
mapo-test.vhv.de
sts-h.vhv.de
tarifrechner-cyber-e.vhv.de
photovoltaik.vhv.de
trsmdm.vhv.de
maxnet-test.vhv.de
photovoltaik.vhv.de
photovoltaik.vhv.de
vpn.vhv.de
photovoltaik.vhv.de
maxnet-s.vhv.de
photovoltaik.vhv.de
messenger.vhv.de
test.auskunftsersuchen.vhv.de
kundenportal.vhv.de
kreditportal.vhv.de
sts.vhv.de
maxnet.vhv.de
sso-b.vhv.de
lebenrechnerweb.vhv.de
uploadws.vhv.de
sdc.vhv.de
externepartnerws.vhv.de
e2e.vhv.de
kreditportal.vhv.de
www.vhv.de
sdc.vhv.de
b2b.vhv.de
mobiledevices.vhv.de
unwetter.vhv.de
www.buergschaftsportal.vhv.de
trsmdm.vhv.de
auskunftsersuchen.vhv.de
uploadws-test.vhv.de
tarifrechner.vhv.de
webvpn.vhv.de
sts-s.vhv.de
maxnet.vhv.de
unwetter-test.vhv.de
tarifrechner.vhv.de
auskunftsersuchen.vhv.de
photovoltaik.vhv.de
bildertool.vhv.de
gast-portal.ads.vhv.de
externepartnerws-test.vhv.de
b2b.vhv.de
www.vhv.de
tarifrechner-s.vhv.de
www.vhv.de
www.buergschaftsportal-test.vhv.de
b2b.vhv.de
jvpms.vhv.de
www.vhv.de
tarifrechner-t.vhv.de
tarifrechner-cyber.vhv.de
www.vhv.de
tarifrechner-hhg-t.vhv.de
sts-j.vhv.de
tarifrechner-h.vhv.de
kreditportal.vhv.de

Certificate

The complete raw certificate details for externepartnerws.vhv.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzoHYysPThkiOR0A7VO0F
tksJHajAwH3a5dhnyaqReIjI6Zdm1hHpp/lJCVA3Fg61hB/KwmnPhfYodvpu5qIr
v64itSz0wASyaBK7e/mdDglUjdVd/2vGI4Y3AvBkhgj15oSr/BwYMq2WRuXT6r1i
5oLh0i118e8UM6l9hV++iKMQCKM4gu36adxAx1LRIV2qBZyLMTY0kr+0y5gehpGd
B9w0O3YcwdHqJMKs1SnohgqDBPl36TFHC83qNerHHJmGrohx05aEJxmKDqOsLBor
O2VueHZYU4EuQOLiR8Ak4P0kARuTgNt45oOOaNEB0vynJl8FkzjJwU4Ig1qEqT/w
DrHU84/XoOgn+wGE7aKnCUU1Uvdp1yE26ZcGeE4T+qw5I3bfd3D+ME9KzoqKW2iH
oYlYrJDnqmb8euaKBeAmJk2iU1+nX6EtrRMhnetIbjncaOsyNRb3UY62QcgMR2xV
F3pPckNjCG+Wiry0P7sGccQxt+cQx7girwT+CevTDwThRD9C6EsbURlnHSK0FCT7
cQP/LtRTjuUH73h6L315mDWdH89I3f8aJ2guCw/pmYjeop/3D7jtzVRXjzzoO9ai
EpZ+Mz18/v0scB7RNZwfzo56EGd2spHVbVRdVwoXazktdIukF8APIl+nU37SsmmQ
ZxqtpcIRYSd+nl+yOWTYBL0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2584530635793684048862343775577637565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VHV Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'externepartnerws.vhv.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842475931553793580210297608986982841376585481716257251247813485396090032680529954657915255084239560600027372309322111268794311125987792402870646153637988578544220625264104665639735166258133797373769200328874124514634318022322720536020788811936308741402569519541310657554982609649658036458603149300485359480896070268507034646144375525771319727105894181795664063739672670803050561284725120817308572128055872360221354478971184328591791844247365428777709474934566375079313772814260303959439497955566997718421737042274268155600609842139784133225951737138515114730761198999172990693605906459935535158168363949189004823359333325758585578765459554832120483629408111680336009493489721914764074845358368359025893045982113524132532905210175829447118696437878123301996825634769364639483177489792061827356866513146602930318539287430029074321912507673282365194798772699074888730994100716754396578481179699079481706550280463958206273607529084637095814787417520169742628801828914181948596224592136467113270955699987507114973021026962745528137226890300228945474649126811080225204431943946238310568050668606734789968883942527505607588067105181403657339674561974302216025654210016651372686853003907004432610453042939190221815365884909563843860154025149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b937a96da3455f9b25389a34cc4ab5f95f96682f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'externepartnerws.vhv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.externepartnerws.vhv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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