color-explorer-test.rmpaint.com

- BASF Business Services GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7f:cb:d7:61:fe:54:2a:c7:c1:3c:4f:f6 was issued on by GlobalSign nv-sa.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:cb:d7:61:fe:54:2a:c7:c1:3c:4f:f6
Serial Number (int): 39551025305146905395166203894
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bb:78:42:44:31:27:f5:47:28:59:6b:54:bf:a8:ba:7b:ea:b3:1d:a1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): f8:a9:75:a0:43:b3:1a:1c:97:0f:12:3f:9d:31:74:04:2d:c2:d3:1c
Fingerprint (sha256): 35:9b:eb:9c:a0:51:26:00:81:f3:68:31:71:2c:4e:a0:cb:9d:90:1a:1e:ea:cd:ad:82:cc:ab:ec:fb:14:e0:f1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate color-explorer-test.rmpaint.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for color-explorer-test.rmpaint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

color-explorer-test.rmpaint.com
lacour-test.coatings.basf.com
colorexplorer-test.rmpaint.com
color-online-test.glasurit.com
coloronline-test.glasurit.com
formula-finder-test.baslac.com
formula-finder-test.baslac.com.cn
cts-formulafinder-test.basf.com
www.color-explorer-test.rmpaint.com

Other certificates including the domain name rmpaint.com

(limited to 100 certificates)
www.promoshop.glasurit.com
www.promoshop.glasurit.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
test-knowhow.glasurit.com
comlib.glasurit.com
knowhow.glasurit.com
color-explorer-test.rmpaint.com
www.rmpaint.com
www.findadblue.de
msds-prod.baslac.com
colormotion.de
www.surfacepolyamide.info
www.promoshop.glasurit.com
in-touch.rmpaint.com
in-touch.rmpaint.com
knowhow.glasurit.com
www.promoshop.glasurit.com
comlib.glasurit.com
www.surface-polyamide.eu
www.surface-polyamide.eu
rep.basf.com
refinity.basf.com
www.premiumpartners.rmpaint.com
basf-cis.com
techinfo.baslac.com
colormotion.de
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.premiumpartners.rmpaint.com
agro.news
www.promoshop.glasurit.com
in-touch.rmpaint.com
techinfo.baslac.com
ton-schaum.net
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
knowhow.glasurit.com
color-online.glasurit.com
productivity.rmpaint.com
www.rmpaint.com
rmpaint.com
*.basf.com
productivity.rmpaint.com
test-knowhow.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
in-touch.rmpaint.com
www.promoshop.glasurit.com
www.premiumpartners.rmpaint.com
knowhow.glasurit.com
color-online.glasurit.com
agro.news
color-explorer-prod.rmpaint.com
agro.news
comlib.glasurit.com
www.concept1865.info
www.promoshop.glasurit.com
www.agilis.rmpaint.com
aware.rmpaint.com
color-online.glasurit.com
productivity.rmpaint.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
www.surfacepolyamide.info
techinfo-test.baslac.com
comlib.glasurit.com
www.concept1865.info
www.premiumpartners.rmpaint.com
www.surfacepolyamide.info
comlib.glasurit.com
color-explorer-test.rmpaint.com
clayfoam.net
colormotion.de
in-touch.rmpaint.com
www.premiumpartners.rmpaint.com
knowhow.glasurit.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.findadblue.de
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
productivity.rmpaint.com
knowhow.glasurit.com
msds.baslac.com
in-touch.rmpaint.com
test-knowhow.glasurit.com
agro.news
www.premiumpartners.rmpaint.com
in-touch.rmpaint.com

Certificate

The complete raw certificate details for color-explorer-test.rmpaint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fduv7uI9eKZcTwa1A6E
9eyj/Aw0Lo3/LtGBcm9obJqnT7qdsQ2xxbT1moVq6C/X07u2mNbkyjrrX6CWERCz
HxENrxQHCXzfh0sZjlG9SkRKik3ujLiETQDH1Qe/QBonaZjWDOmCvIJxxUBkMrhN
yQpYsG+aDOetkSn1l8+f2UBGfp7uflQK152z7h5P0I8SeJA7c4wpcxPU7HM+MUOu
nL5rdiKZ2K35drjVwsCnpRcyuZwsrz2vXqfQTjMeJDYKsKy/Zj1wXkRKMjnUhtut
lKtW0/XVUbvUn3ikh/yhYWYaIEJYDb1Es4Th5kUkYbo81J9SUYCkMA44jKj7Ss9h
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39551025305146905395166203894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 11:41:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-05 10:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'color-explorer-test.rmpaint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29535538626122551029668034066513502267028647020609176703102547738953649367291700055281261621500540935769119725652211218980923696811325455194701940644843842695332090109229727544187250527306029128600245723500783202060731327514471643967233080691836558542675162732083855774599476045190616102406802398739713508182131807295637360398393157460401525948714267732359121109483236625701482344093487696359683409850915022121029064073840939245006792275959796383276074070141797331771273938702511248690056044815372620738540363778522942235780804473026470134788033885503365742751707436543213473757655800069417630993305283997913314189651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color-explorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacour-test.coatings.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorexplorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color-online-test.glasurit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloronline-test.glasurit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-finder-test.baslac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-finder-test.baslac.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-formulafinder-test.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.color-explorer-test.rmpaint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb7842443127f54728596b54bfa8ba7beab31da1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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