www.qualprocurement.bilfinger.com

- Bilfinger SE -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0e:96:1f:21:d5:eb:88:7a:96:55:00:5f:28:12:4d:3d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bilfinger SE

Organization: Bilfinger SE
Organization unit: IT
State / Province: Baden-Wuerttemberg
Locality: Mannheim
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:96:1f:21:d5:eb:88:7a:96:55:00:5f:28:12:4d:3d
Serial Number (int): 19388667905201171700172105891200519485
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:7a:bd:d7:7f:cf:17:17:f0:96:43:01:07:bc:34:f4:5e:86:d0:72
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 87:cb:1a:3e:98:7f:a1:e4:8a:55:89:8c:d2:ce:6b:b6:b7:53:83:2d
Fingerprint (sha256): 3a:2b:cd:e9:7f:b5:70:80:c4:ae:b1:31:c9:e0:6b:09:14:04:0a:4c:8f:d4:f2:bf:ac:ce:f1:68:3b:3d:35:18

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.qualprocurement.bilfinger.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.qualprocurement.bilfinger.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.qualprocurement.bilfinger.com

Other certificates including the domain name bilfinger.com

(limited to 100 certificates)
www.cusa-is.bilfinger.com
www.procurement.bilfinger.com
r2c.bis.bilfinger.com
pm.bng.bilfinger.com
auth.bilfinger.net
slmobiletest.bilfinger.com
login.karriere.bilfinger.com
medialibrary.bilfinger.net
sv02111.res1.rlaone.net
world.tebodin.bilfinger.com
world.tebodin.bilfinger.com
ps.bis.bilfinger.com
ts.bng.bilfinger.com
portal.bng.bilfinger.com
fwms.facilitymanagement.bilfinger.com
oos.bilfinger.net
bnextwss.bng.bilfinger.com
lync.bilfinger.net
download.bng.bilfinger.com
pm.bng.bilfinger.com
reports.facilitymanagement.bilfinger.com
now.bilfinger.com
www.geraete.bilfinger.com
download.bng.bilfinger.com
*.bilfinger.com
portal.bng.bilfinger.com
westcon.bilfinger.com
www.geraete.bilfinger.com
autodiscover.bilfinger.net
ts.bng.bilfinger.com
www.qualprocurement.bilfinger.com
*.bilfinger.com
world.tebodin.bilfinger.com
bnextwss.bng.bilfinger.com
medialibrary.bilfinger.net
portal.bng.bilfinger.com
login.karriere.bilfinger.com
vpn.realestate.bilfinger.com
slmobileservice.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
download.bng.bilfinger.com
dms.nig.bilfinger.com
spamdigest.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
bnextwss.bng.bilfinger.com
login.karriere.bilfinger.com
profimiet-shop.bilfinger.com
tpm-feedback-qs.bilfinger.com
bis-vpnmuc.bilfinger.com
login.karriere.bilfinger.com
www.procurement.bilfinger.com
login.career.bilfinger.com
*.mmo.bilfinger.com
bnextwss.bng.bilfinger.com
www.download.power.bilfinger.com
portal.bng.bilfinger.com
tpm-feedback.bilfinger.com
csrreport.bilfinger.com
www.testprocurement.bilfinger.com
www.testprocurement.bilfinger.com
slmobileservice.bilfinger.com
login.career.bilfinger.com
www.identify-fs.bilfinger.com
fwms.facilitymanagement.bilfinger.com
www.qualprocurement.bilfinger.com
*.industrier.bilfinger.com
portal.bng.bilfinger.com
download.bng.bilfinger.com
www.piwik.bilfinger.com
bnextwss.bng.bilfinger.com
www.rbpoint-fs.bilfinger.com
pm.bng.bilfinger.com
www.sp-it.bilfinger.com
portal.bng.bilfinger.com
vpn-na.bilfinger.com
webmail.bilfinger.net
lync.bilfinger.net
portal.piping.bilfinger.com
www.testprocurement.bilfinger.com
transmission.bilfinger.com
norge.vcs.bilfinger.com
ts.bng.bilfinger.com
mail.ddm.bilfinger.com
vpn-na.bilfinger.com
login.karriere.bilfinger.com
*.mmo.bilfinger.com
www.procurement.bilfinger.com
world.tebodin.bilfinger.com
coz.infocenter.ch-fm.bilfinger.com
www.intranet-de-ch-fm.bilfinger.com
mis.bis.bilfinger.com
bbpsportal.bilfinger.com
www.btalent.civil.bilfinger.com
vo.bbs.bilfinger.com
jobs.bilfinger.com
www.procurement.bilfinger.com
bbpsportal.bilfinger.com
world.tebodin.bilfinger.com
fs-cloud.bilfinger.com
www.download.power.bilfinger.com

Certificate

The complete raw certificate details for www.qualprocurement.bilfinger.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38AIHVnmvFFG9qnW4LDC
MuHoA9YDLEL19gcQn971Ap0Z+kLU1Z/VJBv3YJx8qxbRZ3bDCVrT04sNst9VMXlu
C1se+2de+ijNdknnrVJYzX4ROS29eWx5KbIHOJC+SdPjQtonyblqTPz1XMA9FEoa
7ZC1aJ3kl8g4uoZbp6SjTxraiWT9CUezZpqx8M+pqMuk7ROSHtgek/4y2opSvN9F
kyEqEL7gs5B/F/Tlbmoufq16FrYTdVPxqXqAYnqfaizBZ7xKK8MMj6hNiDiuEx+v
zJWFEMc1W3Z1/uS23xFRrJLgspQMQSXMzFXSMNmYe0e4mbu66CCzRDPalhtmn5Dt
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19388667905201171700172105891200519485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mannheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bilfinger SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.qualprocurement.bilfinger.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28245836366954636261909921406896163566531340570727780956141584025494718544874201673638217720405999082744666328567163515045548551938021560996590167285738729469159186906059879561151904553343305126226384125122095211148802732768111215541511840506004143805425507721068461350825686261075440769368172695703888899736905579529265075762562204629207836171329050307003718793860181230226958002460053390629830116406209024555886264308652959931776697759682663761273339318154106207433677899510474477638869552973242863550969406917165286079375161492317672219274413439198359084139920031994551457169322065035350793236486168246581873143199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e17abdd77fcf1717f096430107bc34f45e86d072
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualprocurement.bilfinger.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001698184f94e0000040300473045022100c934bbb42a9b71baec6619e474d0c7153654e29ce4eb8565224d8e4b5cad056502204db0776e1a8af2d811367e39038227d96ba09d002cadc2b7246edbe47b8313b50076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001698184fa8d0000040300473045022100bf0c65e201788466582bd479c3c40b258e1b6a5491346980ac3d97c783495b010220011b4efb6612e0d17dec8778fc431bb90ea029514c9b51f7895e539ae328dc28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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