ebanking.unicreditgroup.de

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 52:74:63:21:00:02:00:00:0a:31 was issued on by UniCredit S.p.A..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Organization unit: XL78458
State / Province: Bayern
Locality: Muenchen
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 52:74:63:21:00:02:00:00:0a:31
Serial Number (int): 389381016898353791765041
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: bd:2b:4c:2f:e2:03:fc:ff:b0:ba:c6:0b:03:82:c8:ed:16:d8:82:86
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): 20:02:3b:7c:71:56:3d:59:4f:f0:0f:80:66:c4:8c:03:f8:cc:7c:02
Fingerprint (sha256): 28:f1:55:11:ac:72:b1:dc:68:d8:f7:57:fe:ec:f9:72:d5:a7:67:73:f7:06:1c:58:ae:08:84:82:2b:e2:85:ca

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

OCSP Server: http://ocsp.unicredit.eu/ocsp
CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate ebanking.unicreditgroup.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebanking.unicreditgroup.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebanking.unicreditgroup.de
ebanking.bankaustria.at
www.ebanking.bankaustria.at
ebanking.unicreditgroup.eu

Other certificates including the domain name unicreditgroup.de

(limited to 100 certificates)
www.hypovereinsbank.de
ebanking.it-v.unicreditgroup.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ConnectQA.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
www.hypovereinsbank.de
Connect.unicreditgroup.de
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet51.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.qc-v.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
uat.unicredit.eu
meet41.unicreditgroup.eu
ebanking.unicreditgroup.de
uat.unicredit.eu
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.test.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
mail.unicreditgroup.eu
mail.unicredit.it
ebanking.qc.unicreditgroup.de
virtuals.hypovereinsbank.de
corporateportal.test.unicreditgroup.eu
corporateportal.unicredit.eu
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
Exotesthybrid.unicreditqa.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
mail.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
corporateportal.preprod.unicredit.eu
meet41.unicreditgroup.eu
meet41.unicreditgroup.eu
uat.unicredit.eu
corporateportal.test.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet09.unicreditgroup.eu
ebanking.dev.unicreditgroup.de
uat.unicredit.eu
gtgdownload.it.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
Connect.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.unicreditgroup.de
meet51.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.unicreditgroup.eu
siplf.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
ebanking.it.unicreditgroup.de
sipf.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
mail.unicreditgroup.eu
virtuals.hypovereinsbank.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
www.hypovereinsbank.de
ebanking.it.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.unicreditgroup.eu
www.hypovereinsbank.de
mail.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
ebanking.it.unicreditgroup.de
virtuals.hypovereinsbank.de
ebanking.qc.unicreditgroup.de
siplf.unicreditgroup.eu

Certificate

The complete raw certificate details for ebanking.unicreditgroup.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+gszlAL9T2AZ2RsAh8N
3b1zFzJJo3sxZeAgZ5I0i0KxXXJLrU2RWz9Hos3UsYwPSXOAw4SepYlF0e4u1DU6
EK/PepUEvNyocSg2UZr6E75oAO4CBCoOeJClRbbqwXnhmVL8zUswt+2kjwwH4iS8
sDzCuzkpkzL64q8ywhTkAdG7CWFBkr8T1nB8P++F7BRHZb3462IVjVe40PR2zR/X
Eju45OyQ1VNsK3Ay89rqHTq6bsUTpaaRM15EdFOd0o5I3dMrnGIBVVO/MlYguLIk
5d9vh4XI8CfhUirydGWRMAaHWuGAql4w8rg96BXVSEKZpZzlHWpMDJSo/z9Y1w6O
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389381016898353791765041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-22 10:01:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-22 10:01:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XL78458'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ebanking.unicreditgroup.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17661614161255936297963377874099062433620121070999047777549592522262370543084842948224324046464583505080142788875458835996982159554969204254216938107342602662910783625471554726507773204688263923841534746903549090724330200851974659340314815683807312291665000792960972292725144079437944915104793048849256640306767985922258200433323478144626228583005113152277900540203654625746577595484928301958913728968109627812759499035897379588033730166178627611695689278552325452037221871953504056735372787875912415853304770356549696829790204779813294375224865666447463222559063728226905745480109472860729348429189963278261626506861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.bankaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebanking.bankaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd2b4c2fe203fcffb0bac60b0382c8ed16d88286
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.unicredit.eu/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.37016.1.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ca.unicredit.eu/CPS/cps.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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