outlook.ibsa.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 1e:ce:06:7e:db:86:96:3c:cb:51:77:cb:16:fa:60:7b:a8:19:21:41 was issued on by SwissSign AG.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: Bern
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:ce:06:7e:db:86:96:3c:cb:51:77:cb:16:fa:60:7b:a8:19:21:41
Serial Number (int): 175864242476706062727871437794361295107100582209
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 83:5b:55:27:59:84:55:2c:d2:a1:f8:be:a0:4f:fa:bd:10:50:44:2a
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 58:84:5e:0c:a6:1d:cf:72:cf:8f:e2:f4:11:a1:c5:83:78:6f:dc:ec
Fingerprint (sha256): 31:be:8e:09:8a:51:04:75:14:3a:e9:f4:d9:86:95:ad:9d:3b:55:7f:ce:77:4d:02:63:4d:7e:ab:a1:8d:06:24

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate outlook.ibsa.ch

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.ibsa.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.ibsa.ch
sip.ibsa.ch
sip.bouty.it
sip.ch.ibsagroup.com
sip.ibsa.it
sip.ibsagroup.com
sip.it.ibsagroup.com
uccweb-lfe11.ibsa.ch
uccweb-lfe21.ibsa.ch
ucc.ibsa.ch
lyncdiscover.ibsa.ch
lyncdiscover.ibsa.it
lyncdiscover.ibsagroup.com
lyncdiscover.bouty.it
lyncdiscover.it.ibsagroup.com
lyncdiscover.ch.ibsagroup.com
webconf.ibsa.ch
sip.altergon.it
lyncdiscover.altergon.it

Other certificates including the domain name ibsa.ch

(limited to 100 certificates)
imperva.com
ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
imperva.com
career.ibsa.ch
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
*.ibsa.ch
ibsa.ch
outlook.ibsa.ch
mailch.ibsagroup.com
imperva.com
outlook.ibsa.ch
imperva.com
link.ibsago.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
imperva.com
imperva.com
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
career.ibsa.ch
*.ibsa.ch
*.ibsa.ch
imperva.com
*.ibsa.ch
imperva.com
imperva.com
outlook.ibsa.ch
outlook.ibsa.ch

Certificate

The complete raw certificate details for outlook.ibsa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 175864242476706062727871437794361295107100582209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 11:22:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 11:22:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.ibsa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923190775785515299755077950217512357050971451655342568085516186606316627841688900124876027516522501839734985045751084557952026920838292587625719248975134267212264855222888968986535806021475987850877525771762789737099717630771987674700363070756514406113968304981700324658733147049252592120451162913993106730071232131623351489892141286885605003622430756938828355511213711006005996356835878688614290530780616811366298920306113117683537325542886408041306645097819416954900824917415542296470632578644738633427521863459541179199011526938631938076112613325970590045534070706233860431489909259718327864238816024973815001932142242449426647087014739457313018558685724728648819083134553161091308974978151577774487411908700949991820427845951214286937166054061178892117128602139858176557313991867424385109387131105891530964589817035776540514862941213397970899406845544893345885994556177743150736977893699117318401295699393674007766516799548610831756381489144887128447263117209099409380979456766282589516898226991173182047450291702456104797058368143183985330440345603230380303605652298604329084664016394779646124993306599390266178611306237409063486411471792561610861728330088441136998568354585199028383405642947293579816597659327106153345426098613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe11.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe21.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.altergon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.altergon.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							835b55275984552cd2a1f8bea04ffabd1050442a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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