aboservice.audiovideofotobild.de

- Axel Springer SE -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 38:4e:51:3b:e6:a6:4b:24:b7:f7:3c:b9:fd:f3:d7:a6 was issued on by GeoTrust Inc..

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Axel Springer SE

Organization: Axel Springer SE
Organization unit: AS IT
State / Province: Berlin
Locality: Berlin
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:4e:51:3b:e6:a6:4b:24:b7:f7:3c:b9:fd:f3:d7:a6
Serial Number (int): 74843414539943078364329358760177031078
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 14:1d:13:23:c8:60:08:88:3d:f2:b1:5b:36:b3:cb:c7:47:57:8b:66
Fingerprint (sha256): 25:9f:a9:00:9b:95:72:91:54:62:a0:9a:47:d3:07:78:3b:24:8e:8c:f9:73:a7:bb:21:ba:3d:a1:6e:46:75:71

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate aboservice.audiovideofotobild.de

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aboservice.audiovideofotobild.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aboservice.welt-kompakt.de
aboservice.welt.de
www.aboservice.welt.de
aboservice3.welt.de
aboservice.autobild-klassik.de
aboservice.sportbild.de
einverstaendnis.sportbild.de
einverstaendnis.autobild.de
aboservice.autobild.de
aboservice1.autobild.de
aboservice1.bz-berlin.de
aboservice.bz-berlin.de
www.aboservice.bz-berlin.de
aboservice3.wams.de
www.aboservice.bild.de
leserservice1.bild.de
einverstaendnis.computerbild.de
aboservice.computerbild.de
service.lesershop24.de
aboservice.wams-kompakt.de
aboservice.axelspringer.de
einverstaendnis.axelspringer.de
leserservice1.bams.de
aboservice.computerbildspiele.de
aboservice.audiovideofotobild.de

Other certificates including the domain name audiovideofotobild.de

(limited to 100 certificates)
el-shop.welt.de
el-shop.welt.de
audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
el-shop.welt.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de
aboservice.audiovideofotobild.de

Certificate

The complete raw certificate details for aboservice.audiovideofotobild.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxK5YirmHjTRcI+qOj53
DikICVHRMGKU1HpQrQoaHrZzrzCDpMbue+AXAhbahVsHjqJSvYUZ0SrweYqarLGw
pfh9vQwnjQzD640IHD2IBs8+ue0E74aiYaF9ORte4Zfr33XzuiVm3UgLF1O+aiuE
6WRyDFciCZ3s2FTheGByCu18nERrw2m3umBoFHNutlNOHfUXPH6COmUBfLXgPAD5
28SUfMTVURBeu2IxxNj6Hu8uu/4VDu1jVvmxCy1BBubT3TwIMLaTiaNt3UuYF589
em5S7Vi0BuevNZEWSiVLmQWhzot82BozPaGeQDH0QhS/8qhpBkYx36nknlb2YRBD
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74843414539943078364329358760177031078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Axel Springer SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AS IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aboservice.audiovideofotobild.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24625702692928812479222433586234476082720658690409943294955882052756530865919692719933219972009704340432572364093701801679600624721735752063731648265423388400942675780216213898410965097643613431834257371679151399574848724777174690083032284790410030378999239716313779162546197214639067301349318667735419895408659328239195567650012881321091826867478685501961872136763150770789295319725485410140042145603914699321560016205510306605314367173200514773831025582711324566526232155447041888051314409795277400680292801442360041454121613294893602892180353182619626321387845888210662290039151561797783354025035290356892956640111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.welt-kompakt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboservice.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice3.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.autobild-klassik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice1.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice1.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboservice.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice3.wams.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboservice.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserservice1.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.lesershop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.wams-kompakt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserservice1.bams.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.computerbildspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.audiovideofotobild.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058f49b6070698f250b4984654f8ec6c3e6686cdff1b52baf7e253634cb628f3bd3f88b4c5885c7d6ddf9165619f6e837636e89bc0ecfa9abcb6e3e2d64014e9fc00e0eb5c930e0fd80a55d335f10d0836ed0b67ec8424cadb7d5367b3de1253dd83b193124da1e1a93b7c3013f2ce49df233fd877fc3109cbe3531409ad8f0893d70ae1ccccdc38a0f523241b4bd6b4a22b0dfe5da4b60dd50386e2f4bdd192afda638459d8a55d67f3d4ee11fd7cca51714c154e91f2fa5020962891956ab58933d3aa825259d6c4a8f74c1f780a5c7fbafabbc18e04a7ee667d6c12821c3cfdc5b1d78760a21ac2249b16be8b0dc1273aa0f396b6f09ad36edb7baa48e7c7d