www.derwesten.de

- FUNKE Corporate IT GmbH -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 40:6e:54:b1:f9:5f:3d:a5:b1:ae:cc:47:fb:79:95:89 was issued on by Symantec Corporation.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein Westfalen
Locality: Essen
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:6e:54:b1:f9:5f:3d:a5:b1:ae:cc:47:fb:79:95:89
Serial Number (int): 85643462207641825189335306575239812489
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 9b:36:a3:95:7d:2c:e5:6b:51:e0:ed:2b:d0:07:22:55:9b:44:a1:a5
Fingerprint (sha256): 3a:39:bd:b9:d9:55:8e:89:44:20:6b:c2:f3:d7:a8:94:65:2c:2a:15:5e:f7:4b:a8:75:ef:64:ed:fb:0d:99:11

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.derwesten.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.derwesten.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ikz-online.de
derwesten.de
*.derwesten.de
*.waz.de
*.wp.de
*.morgenpost.de
*.abendblatt.de
*.bergedorfer-zeitung.de
unitedinternetimages.images.dvbdata.com
*.nrz.de
*.funkemediennrw.de
*.wr.de
www.derwesten.de

Other certificates including the domain name derwesten.de

(limited to 100 certificates)
www.derwesten.de
runforrest.derwesten.de
www.weltsport.net
sso.funkemedien.de
derwesten.de
*.funkemedien.de
dev3.aws.funkedigital.de
funkedigital.de
data-fdf4690b14.derwesten.de
*.waz.de
secure.derwesten.de
eventum.derwesten.de
dev2.aws.funkedigital.de
derwesten.de
www.weltsport.net
www.derwesten.de
secure.derwesten.de
*.waz.de
tv.morgenpost.de
www.weltfussball.de
www.deutschland-spielt.de
www.weltsport.net
www.derwesten.de
agnes.derwesten.de
www.derwesten.de
sso.funkemedien.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
files1.derwesten.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.adventskalender.derwesten.de
www.weltsport.net
www.derwesten.de
angebote.derwesten.de
www.weltsport.net
dev1.aws.funkedigital.de
derwesten.de
www.derwesten.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltfussball.de
www.derwesten.de
derosten.com
www.weltsport.net
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
*.waz.de
www.deutschland-spielt.de
cp.derwesten.de
shop.derwesten.de
www.weltsport.net
sso.funkemedien.de
www.derwesten.de
*.funkemedien.de
*.waz.de
*.waz.de
dev2.aws.funkedigital.de
uat.aws.bildderfrau.de
www.weltsport.net
*.funkemedien.de
aditory.derwesten.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
www.weltfussball.de
dev2.aws.funkedigital.de
www.weltsport.net
*.waz.de
www.weltfussball.de
sso.derwesten.de
www.derwesten.de
uat.aws.bildderfrau.de
www.weltfussball.de
funkedigital.de
derwesten.de
interaktiv.derwesten.de
*.waz.de
*.geschenke38.de
tippspiel.derwesten.de
www.weltsport.net
*.waz.de
dev1.aws.funkedigital.de
secure.derwesten.de
www.weltsport.net
derwesten.de
tv.morgenpost.de
www.derwesten.de

Certificate

The complete raw certificate details for www.derwesten.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10KY9kSAb36AWv74NTJV
twxUjoHacWwc38gHcQLbkgHBfb5nPimha8nQ8IvJQAploh3x4mCCKm7rvQOyH7YZ
bsPT2MS7edUfJ/VAGz2bR2wiAhwijqP+Ha78PcWkfbESy4YRyETEQ1w+Gj1QZeUQ
Ta40B7ieuD2LHQXkn2ZklaPrbLpDbUfESrVrkC187S2ORST4FgzxUFjXw09isDwt
Ywxi7dA9F/aUJZsEzuYisPXmpvBdITjXz5ldo7NcCORm24NwhUw9m2GFpVjJ44j6
Xqrnx01XHO6g/lSd53PFi0UJpJhV670U1mD7WJXBhKvJpS3HD0Yvf7h1uoXqrP+c
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85643462207641825189335306575239812489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.derwesten.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27174076022752248470966034135609057521940297932361972392536247150681087614271539468039225178569122728909755147484346671731051678950837634892854599739297898374611898005005754090142584999046602875813760184254532124957017207487281155913392190567520363496709532080078954256042732532718454493695980806442600729286379430347763693823482523924646283467150223259093099770728728874894899941068098105293031631762129481861469072516397817950077282037521530541227011451925720607217861901529074406587175760246074875873069741225310187578602026636904656208589007086884754992598432519501440910597948481174246122163880953066400000220391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedinternetimages.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemediennrw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derwesten.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015872d66e500000040300483046022100b63374c4ddb1e2efe3e070d365f9524dae6f686fb8686ca3474ecdfe954ef6ea02210094bdb8f8bf16e198b221975cedd7c5e94db4bce84fe621e1167f8db5b7f64eb8007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015872d66e970000040300463044022064abd52f903d17c12b8002fbdbde78268f7f3f1dc21a65da3006e849fa59c92f02206536e8176cd04944c6aba46f8b7bd337e38b22a84008cd8c20f2ba051153b807
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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