mediacenter.wmf.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 62:c7:46:67:0f:1d:61:6d:69:db:6b:a4:4f:04:59:c9 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF GmbH

Company registration number: CSM032176313
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:c7:46:67:0f:1d:61:6d:69:db:6b:a4:4f:04:59:c9
Serial Number (int): 131299038595620974912767860533797083593
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 83:1e:48:eb:9a:2b:81:c3:b3:6f:ad:da:f4:46:4c:ac:66:1d:1a:70
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): ce:0f:66:f4:d1:53:6e:94:e5:35:33:da:d1:96:e4:39:d2:66:02:b9
Fingerprint (sha256): 29:b7:76:ae:2a:bb:f1:cb:a4:76:25:9d:6e:3a:5f:02:3b:22:85:bd:86:83:1e:b5:b4:8a:93:3d:d3:4e:c3:82

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate mediacenter.wmf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediacenter.wmf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediacenter2.wmf.com
mediacenter.wmf.com

Other certificates including the domain name wmf.com

(limited to 100 certificates)
confirmation.wmf.com
www.wsp.wmf.com
marketingportal.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
cmservice.wmf.com
www.telemetry.wmf.com
news.wmf.com
social.wmf.com
sni.cloudflaressl.com
wmf.com
owa.wmf.com
www.wmf.com
www.wsp.wmf.com
*.wmf.com
*.telemetry.wmf.com
sni.cloudflaressl.com
digitalguide.wmf.com
wmf.com
mediacenter.wmf.com
*.wmf.com
news.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
mediacenter.wmf.com
parts.wmf.com
marketingportal.wmf.com
*.coffeeconnect.wmf.com
*.wmf.com
coffeeconnect2.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
*.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
owa.wmf.com
account.rcu.seb.com
news.wmf.com
sni.cloudflaressl.com
*.wmf.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.wmf.com
www.telemetry.wmf.com
www.telemetry.wmf.com
social.wmf.com
login.coffeeconnect.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
news.wmf.com
wmf.com
*.wmf.com
account.rcu.seb.com
www.wsp.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
www.merchandising.wmf.com
*.wmf.com
logintest.coffeeconnect.wmf.com
coffeeconnect.wmf.com
mediacenter.wmf.com
citrix.wmf.com
sni.cloudflaressl.com
*.wmf.com
wmf.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
coffeeconnect.wmf.com
coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
*.coffeeconnect.wmf.com
www.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
www.merchandising.wmf.com
logintest.coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
wmf.com
www.wsp.wmf.com
wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
*.coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
account.rcu.seb.com
image.20210419.201008.s50.et.yellsatcloud.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
sni.cloudflaressl.com
*.coffeeconnect.wmf.com
www.wmf.com
account.rcu.2.seb.com
account.rcu.2.seb.com
wmf.com
sni.cloudflaressl.com
news.wmf.com
wmf.com

Certificate

The complete raw certificate details for mediacenter.wmf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131299038595620974912767860533797083593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-11 10:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 13:18:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032176313'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediacenter.wmf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821475541588070961484963401438734155726343650706568932632625408966289297606602897415422306521721142233368932465582611147553888203668939322101474396431777119010520730951325017978355680110905890497053316423309443070157931731137147722634171573000277209974819691070664607908427935076503859933951881057140541958678513625709579675365182841423471822535667345469287876267521036358276896593535445116699128795314243608944567571710308115771212967339748932616216670053781980784721155356963571471500152781397475904843994725174564097111695309006571335970449054579926834025553209558066177933293538418276754979904070340244843624694475609641558779078698246073853128776991751340360438209169844117780856033594546584153929246075356720747688152134767374740247547571796086501781264196897659269977370373763622395575980447770005346644261188183251789373940132721132978115519698289183191438695811369451056472168275259936695200949837009640727525437447580906861755987807534357913423886997796781398345912601436192367008979866523955852477819325967849581673025828486136258712406382492926382088151661740936087949623717421458141100470846482912175664189682030939357098364569087650089883529958985191198853182936521668160018625681612167172131247544813093292172958444091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacenter2.wmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacenter.wmf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							831e48eb9a2b81c3b36faddaf4464cac661d1a70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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