test-1.vbc.ac.at

- Vienna BioCenter – Wissenschaftliche Standortgemeinschaft -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:0e:b5:e3:5a:c0:ed:dc:6b:77:3d:55:6f:c1:fa:79 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vienna BioCenter – Wissenschaftliche Standortgemeinschaft

Organization: Vienna BioCenter – Wissenschaftliche Standortgemeinschaft
Locality: Vienna
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:0e:b5:e3:5a:c0:ed:dc:6b:77:3d:55:6f:c1:fa:79
Serial Number (int): 14697889238671601787263599628886604409
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 05:de:27:81:74:ec:f8:8f:a7:26:22:09:d1:be:1a:94:25:c4:48:1d
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): d1:ef:d4:4e:85:89:84:b7:15:69:8b:c1:94:d2:65:68:fc:2d:ef:64
Fingerprint (sha256): 3c:58:3e:35:d5:d0:01:ec:47:ed:aa:54:5f:4c:27:fd:2e:ac:2c:1e:7d:74:30:e6:dc:67:77:d3:9b:c1:91:95

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate test-1.vbc.ac.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-1.vbc.ac.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-1.vbc.ac.at

Other certificates including the domain name vbc.ac.at

(limited to 100 certificates)
cert-test-1.vbc.ac.at
test-jira-1.vbc.ac.at
test-1.vbc.ac.at
rds-host-3.vbc.ac.at
rds-host-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
clausen-wiki-1.vbc.ac.at
test-higlass-1.vbc.ac.at
vpn.vbc.ac.at
cert-test-1.vbc.ac.at
it-jenkins-1.vbc.ac.at
rds-host-2.vbc.ac.at
*.vbc-selapp-1.vbc.ac.at
test-1.vbc.ac.at
test-jira-1.vbc.ac.at
it-api-2.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
rds-gateway-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
laravel.test.vbc.ac.at
cert-test-1.vbc.ac.at
imp-cryosparc-1.vbc.ac.at
zimmer-wiki-1.vbc.ac.at
test-eos-fwep-1.vbc.ac.at
webhooks.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
rds-host-5.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
nordborg-arageno-1.vbc.ac.at
vbc-singularity-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
rds-host-3.vbc.ac.at
test-higlass-1.vbc.ac.at
test-run-1.vbc.ac.at
cert-test-1.vbc.ac.at
imp-cryosparc-live-1.vbc.ac.at
test-1.vbc.ac.at
cloud.clip.vbc.ac.at
test-eos-mgm-2.vbc.ac.at
test-omero-1.vbc.ac.at
rds-host-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
training.vbc.ac.at
test-mediawiki-1.vbc.ac.at
www.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
test-omero-1.vbc.ac.at
test-jira-1.vbc.ac.at
training.vbc.ac.at
cloud.staging.clip.vbc.ac.at
it.vbc.ac.at
cert-test-1.vbc.ac.at
test-run-1.vbc.ac.at
test-omero-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
cert-test-1.vbc.ac.at
f5-lb.vbc.ac.at
cert-test-1.vbc.ac.at
test-higlass-1.vbc.ac.at
test-1.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
test-1.vbc.ac.at
imp-cryosparc-live-1.vbc.ac.at
test-mediawiki-1.vbc.ac.at
nordborg-aragwas-1.vbc.ac.at
publish.vbc.ac.at
training.vbc.ac.at
test-omero-1.vbc.ac.at
remoteapps.vbc.ac.at
cloud.dev.vbc.ac.at
ngs-seqmate-2.vbc.ac.at
cert-test-1.vbc.ac.at
cert-test-1.vbc.ac.at
test-1.vbc.ac.at
tanaka-wiki-1.vbc.ac.at
test-1.vbc.ac.at
ucsc.vbc.ac.at
training.vbc.ac.at
gerlich-cellcognitionproject-1.vbc.ac.at
ud-vbc-1.vbc.ac.at
test-orgt-1.vbc.ac.at
test-1.vbc.ac.at
test-eos-mgm-3.vbc.ac.at
cert-test-1.vbc.ac.at
ngs-reserva-1.vbc.ac.at
training.vbc.ac.at

Certificate

The complete raw certificate details for test-1.vbc.ac.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14697889238671601787263599628886604409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vienna BioCenter – Wissenschaftliche Standortgemeinschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-1.vbc.ac.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717314066483091680672296299922721236452018376630417176377708297461217107179239051853892162033441412921334464259972091446700267738946559275432296830488666289308939222946378503031155224647257986189214250704939163489204401119612466952594661736043104577243905499472216249547335855541776761912376966222352616648581889963712944452512721313122815871062595610230483233214462878290036317562401771188817578737150618455490077590139701040065656294505041186640397364273841940257066720798777869309528752771077257416150448788587043980729124992185191995661098861283359438532584518847521249427712077183353458547726306589210312257105253981986447390594779675774881436638366574584264224410352950614804741583821977887630718916791474972636323369756663470706467622253511165825220806129940055773279206729085017322370224976614444112908210205290976126409629739072324977152460235842766446756942281300352030618385292834601822349948180173567854012371176452070315429004971637646712449641964575548603550754936604724614898088628164146687787823778352471020361118483546588663298166609535445449855047398538261712723723352905197872490221277705590234021190452806392705197788597902191271674493229524306918720680857783719526010334463829908942745685119319528555816909265379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05de278174ecf88fa7262209d1be1a9425c4481d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-1.vbc.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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