outlook.ibsa.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 2f:26:24:5e:29:82:d4:8c:90:c5:a4:ff:b1:f7:ae:76:0e:7c:77:d2 was issued on by SwissSign AG.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: Bern
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:26:24:5e:29:82:d4:8c:90:c5:a4:ff:b1:f7:ae:76:0e:7c:77:d2
Serial Number (int): 269173162630278312681805547085947718594520184786
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: b4:6d:c1:03:97:20:9c:49:45:0b:29:ae:04:16:65:ae:20:61:85:bf
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 12:13:4c:41:d8:16:e5:92:55:47:a8:34:93:22:c4:fe:3c:ac:67:79
Fingerprint (sha256): 26:fd:d3:8b:0a:fa:56:50:ea:bf:a9:ad:04:f0:c1:8d:91:27:3e:a4:6d:a6:0b:50:ff:c3:c4:31:7e:40:14:6e

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate outlook.ibsa.ch

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.ibsa.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.ibsa.ch
sip.ibsa.ch
sip.bouty.it
sip.ch.ibsagroup.com
sip.ibsa.it
sip.ibsagroup.com
sip.it.ibsagroup.com
uccweb-lfe11.ibsa.ch
uccweb-lfe21.ibsa.ch
ucc.ibsa.ch
lyncdiscover.ibsa.ch
lyncdiscover.ibsa.it
lyncdiscover.ibsagroup.com
lyncdiscover.bouty.it
lyncdiscover.it.ibsagroup.com
lyncdiscover.ch.ibsagroup.com
webconf.ibsa.ch
sip.altergon.it
lyncdiscover.altergon.it

Other certificates including the domain name ibsa.ch

(limited to 100 certificates)
imperva.com
ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
imperva.com
career.ibsa.ch
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
*.ibsa.ch
ibsa.ch
outlook.ibsa.ch
mailch.ibsagroup.com
imperva.com
outlook.ibsa.ch
imperva.com
link.ibsago.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
imperva.com
imperva.com
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
career.ibsa.ch
*.ibsa.ch
*.ibsa.ch
imperva.com
*.ibsa.ch
imperva.com
imperva.com
outlook.ibsa.ch
outlook.ibsa.ch

Certificate

The complete raw certificate details for outlook.ibsa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269173162630278312681805547085947718594520184786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 11:42:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-14 11:42:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.ibsa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 965676263686354807896249702552130396092103476521443745463615232505116452805473471696350620770819620072199746144978277783596003815236259096944439952772102094805886705778224303544614293723100174187548171805191629050035604072110924587601127664886536107532011933846745668557486940321469410572187075985412360560709938819936791141757426347403877444824837157061831446810353265545933122257099986569548005339029283555244410348187567651103689899175288345318283261778982403449319454739487668219655940206192552235409070367852316637786428921335092647869855734287989252318335283310887633212498991331119656337775398524816396566526220679454690387014556819711676270108611216671544147207333543275158994183302035349127509817258871607647580728572854523139419213530373880644055512351884161043115898245970604267405020016814509228048066262032625643413157786160376563601836026820396649170548042571913185793007431169582280490808404186492698307875830724187070551441455898790221692030414017220940418764404789131256068219802723099100559985716077475433271879520799563138974675921160958357503569997065747636300275537127331367131452429035433905472461587975963932800451954898505662494430828401664549288998044671309273448829367200766441515259698583514974725036154237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe11.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe21.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.altergon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.altergon.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b46dc10397209c49450b29ae041665ae206185bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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