mydays.de

- mydays GmbH -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 46:5a:b0:d9:d2:4d:6f:69:97:4a:c9:14:b1:1f:4e:4a was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

mydays GmbH

Company registration number: HRB 173806
Organization: mydays GmbH
State / Province: Bayern
Locality: Muenchen
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:5a:b0:d9:d2:4d:6f:69:97:4a:c9:14:b1:1f:4e:4a
Serial Number (int): 93516853383899219360272375492007382602
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): e9:b0:d2:8f:12:d5:9b:19:15:9f:52:6a:49:bf:9e:56:6b:e4:1c:98
Fingerprint (sha256): 3c:68:cf:30:15:a3:8c:92:ed:e8:5a:6d:6f:bc:03:66:18:d9:6f:e3:4e:47:46:00:05:e7:42:32:f8:72:f5:b9

Issuing Certificate URL: http://ga.symcb.com/ga.crt

Revocation information

OCSP Server: http://ga.symcd.com
CRL Distribution Point: http://ga.symcb.com/ga.crl

Check the revocation status for certificate mydays.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mydays.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mydays.de
mydays.at
www.mydays.at
mydays.ch
www.mydays.ch
mydays.de

Other certificates including the domain name mydays.de

(limited to 100 certificates)
kundenservice.mydays.de
click.mydays.de
click.mydays.de
*.mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
ssl2.cdngc.net
mydays.de
ssl2.cdngc.net
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
click.mydays.de
mydays.de
kundenservice.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
legacy.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
*.net.mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
*.kundenportal.mydays.de
p0az-cs-ha.onlinemarketing-support.com
sxeimx.mydays.de
kundenservice.mydays.de
ssl2.cdngc.net
remus-wsf-alt.mydays.de
p0az-cs-ha.onlinemarketing-support.com
mydays.de
magazin.mydays.de
affl-login.mydays.de
*.mydays.de
invent.mydays.de
*.net.mydays.de
mydays.de
affl-login.mydays.de
mydays.de
chat.mydays.de
mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
mydays.de
mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
chat.mydays.de
www.mydays.de
*.mydays.de
kundenservice.mydays.de
mydays.de
mydays.de
*.mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
click.mydays.de
mydays.de
mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
*.net.mydays.de
bookingkit.mydays.de
www.mydays.de
mydays.de
kundenservice-app.mydays.de
sxeimx.mydays.de
kundenservice.mydays.de
kundenservice.mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
*.net.mydays.de
*.mydays.de
chat.mydays.de
*.net.mydays.de
ssl2.cdngc.net
sxeimx.mydays.de
mydays.de
*.mydays.de
mydays.de
unternehmen.mydays.de
remus-wsf-alt.mydays.de
kundenservice-app.mydays.de
click.mydays.de
p0az-cs-ha.onlinemarketing-support.com
chat.mydays.de
p0az-cs-ha.onlinemarketing-support.com
*.mydays.de
kundenservice.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
*.mydays.de

Certificate

The complete raw certificate details for mydays.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWj8klwHyBllyT05xfVZ
t7nc1yxSH18tTvUYyufs9KAqVgB/JuE2A3J7kVXX4cEi+CXos/krs/hjcluNeb7y
Jd3A8ImI0velpBiROndzQi9hdAZHW0ILijhVfBpu9tWHe2FQO9TExTRh+c1f2yKG
QoY4ZBYDHulKFGmaibMlWLYIiiV2T0zwaqLe6qfV33n7bBA3f/mfI9Gvctu4m682
ggt6En7a9HDymaxl7NnTjK3zMgQFyOY6Wzb5wqqHW9zkF4rGwbdjTl60tSaCgdnm
Uy0gLIOvJY2nPnfOLp0clFXDcxf0GuSnHVgAuykjLTYa8q4fnlyGW846rXTNaerv
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93516853383899219360272375492007382602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 173806'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mydays GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mydays.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20881091145462051548946915778257736022419361870289993441420324150103693448860520333222220232942870076648185617361076578482876607135507197769940156098708999654173978080468711551909102164413019240002256929550082281264938272239281321594777332428028645986345610761929284953427005889184055299686637467373048338191086663156997650761864977100498531451618535404461858584242475350460941458129621640981208516228263524074042799180932672043809376778794740040324969413557014496370433247774222589347079744032306752861295438097682814822495281345085697255089170828790825588313703285979675976753246067904584840390894693093235646721933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydays.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydays.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydays.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydays.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydays.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydays.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ga.symcb.com/ga.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ga.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ga.symcb.com/ga.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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