mail.brno-lisen.cz

- Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785] -

Issued by PostSignum Public CA 2

About this certificate

This digital certificate with serial number 09:be:4e was issued on by Česká pošta, s.p. [IČ 47114983].

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]

Company registration number: S27016
Organization: Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]
Country: CZ

Česká pošta, s.p. [IČ 47114983]

Organization: Česká pošta, s.p. [IČ 47114983]
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 09:be:4e
Serial Number (int): 638542
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 9f:ae:72:fc:64:9d:87:1c:00:0a:91:a3:1c:e4:60:7c:69:ef:ab:16
AuthorityKeyId: 48:ef:3e:d4:ea:89:89:a3:e9:e2:3f:db:ef:8c:42:b1:0a:f8:c8:d1

Fingerprint (sha1): 56:ff:f4:eb:8a:b3:bf:35:9c:1f:6d:ad:34:ab:70:d5:52:34:46:fd
Fingerprint (sha256): 3f:97:41:22:fc:9a:21:a8:8d:84:ec:73:c2:72:5a:3f:b8:38:2c:f0:33:26:95:02:f5:2e:1f:67:77:38:58:4b

Issuing Certificate URL: http://www.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://www2.postsignum.cz/crt/pspublicca2.crt
Issuing Certificate URL: http://postsignum.ttc.cz/crt/pspublicca2.crt

Revocation information

CRL Distribution Point: http://www.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://www2.postsignum.cz/crl/pspublicca2.crl
CRL Distribution Point: http://postsignum.ttc.cz/crl/pspublicca2.crl

Check the revocation status for certificate mail.brno-lisen.cz

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.brno-lisen.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name brno-lisen.cz

(limited to 100 certificates)
*.brno-lisen.cz
mail.brno-lisen.cz
www.brno-lisen.cz
*.brno-lisen.cz
mail.brno-lisen.cz
www.brno-lisen.cz
www.brno-lisen.cz
www.brno-lisen.cz
www.brno-lisen.cz
mail.brno-lisen.cz
www.brno-lisen.cz

Certificate

The complete raw certificate details for mail.brno-lisen.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDCb5OMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAkNa
MSwwKgYDVQQKDCPEjGVza8OhIHBvxaF0YSwgcy5wLiBbScSMIDQ3MTE0OTgzXTEf
MB0GA1UEAxMWUG9zdFNpZ251bSBQdWJsaWMgQ0EgMjAeFw0xMzA3MDIwODM3MDFa
Fw0xNDA3MjIwODM3MDFaMIGOMQswCQYDVQQGEwJDWjFRME8GA1UECgxIU3RhdHV0
w6FybsOtIG3Em3N0byBCcm5vIC0gTcSbc3Rza8OhIMSNw6FzdCBCcm5vLUzDrcWh
ZcWIIFtJxIwgNDQ5OTI3ODVdMRswGQYDVQQDExJtYWlsLmJybm8tbGlzZW4uY3ox
DzANBgNVBAUTBlMyNzAxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANPmGeMuAzTDHD9bkRq1rSVGhMAiKqKj/+Ob0jBINiofQQZ2rJkHheUFQchlx0wf
cbVNluuYT40WfzZFUG9BippH+wFVYRnvE8scIE8LkQfEwAFkRpnZCGs73JiQQ9SZ
q64tA1s+9XowzUO0jGzxEQg/FMfcwRh+SPpoN3iGEoSGoNI+Y1l7sXzKWZzqSjoL
W2pTiVXOm535JnIHuOWRAHhf7quaahINe3n1g4ysyfg0PCnqLVGE+uOMWujZKnH5
CxZCGbAxJ3XweuBBN07RRogHNRot2uNHe/JHazZu+kMlk1MAVbEJ84nEwzrOTXo+
fy0I+xo5BqctVuf8AHBR8T8CAwEAAaOCAi0wggIpMCoGA1UdEQQjMCGBFHNrdWJh
bEBicm5vLWxpc2VuLmN6oAkGA1UEDaACEwAwPgYDVR0gBDcwNTAzBglngQYBAgEI
gVIwJjAkBggrBgEFBQcCARYYaHR0cDovL3d3dy5wb3N0c2lnbnVtLmN6MIG/Bggr
BgEFBQcBAQSBsjCBrzA4BggrBgEFBQcwAoYsaHR0cDovL3d3dy5wb3N0c2lnbnVt
LmN6L2NydC9wc3B1YmxpY2NhMi5jcnQwOQYIKwYBBQUHMAKGLWh0dHA6Ly93d3cy
LnBvc3RzaWdudW0uY3ovY3J0L3BzcHVibGljY2EyLmNydDA4BggrBgEFBQcwAoYs
aHR0cDovL3Bvc3RzaWdudW0udHRjLmN6L2NydC9wc3B1YmxpY2NhMi5jcnQwDgYD
VR0PAQH/BAQDAgXgMB8GA1UdIwQYMBaAFEjvPtTqiYmj6eI/2++MQrEK+MjRMIGo
BgNVHR8EgaAwgZ0wMqAwoC6GLGh0dHA6Ly93d3cucG9zdHNpZ251bS5jei9jcmwv
cHNwdWJsaWNjYTIuY3JsMDOgMaAvhi1odHRwOi8vd3d3Mi5wb3N0c2lnbnVtLmN6
L2NybC9wc3B1YmxpY2NhMi5jcmwwMqAwoC6GLGh0dHA6Ly9wb3N0c2lnbnVtLnR0
Yy5jei9jcmwvcHNwdWJsaWNjYTIuY3JsMB0GA1UdDgQWBBSfrnL8ZJ2HHAAKkaMc
5GB8ae+rFjANBgkqhkiG9w0BAQsFAAOCAQEAQaLUX3/t69VtdpsWiow/A33+g5xz
WKlXZCV3y5zJbcGI7lk/GyESgk/0gbABbjI7p+YAWiv2oFr1Qf67z+ujbhYarvYW
hi0Cv2E7+2o6j8MkylaMmNt0mZpkWCowh2V0UiQttwoedTRAbySHxIKMx8bTHObX
D1mfbBFJBvSCz6kL3HwCeQhAbMHIqkMPz3zZSJZgW6J3kf/PFhOiNWLCccFAgO9I
OLBQuJoJcV08KTYK2q5RIK1azTFvZcCZT91z8MSVc+ZHD9p3DgTZVFPXLP4DKw5o
CUYN+vRIXXvLkcSvfne7RPOjO5Qus/XOUCllvznubIltIvnd84IeoqIMCQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+YZ4y4DNMMcP1uRGrWt
JUaEwCIqoqP/45vSMEg2Kh9BBnasmQeF5QVByGXHTB9xtU2W65hPjRZ/NkVQb0GK
mkf7AVVhGe8TyxwgTwuRB8TAAWRGmdkIazvcmJBD1Jmrri0DWz71ejDNQ7SMbPER
CD8Ux9zBGH5I+mg3eIYShIag0j5jWXuxfMpZnOpKOgtbalOJVc6bnfkmcge45ZEA
eF/uq5pqEg17efWDjKzJ+DQ8KeotUYT644xa6NkqcfkLFkIZsDEndfB64EE3TtFG
iAc1Gi3a40d78kdrNm76QyWTUwBVsQnzicTDOs5Nej5/LQj7GjkGpy1W5/wAcFHx
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 638542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Česká pošta, s.p. [IČ 47114983]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostSignum Public CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-02 08:37:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-22 08:37:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Statutární město Brno - Městská část Brno-Líšeň [IČ 44992785]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.brno-lisen.cz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S27016'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26749749440436773189836052020314801251183133649416680285449619080916804634987416207878982246163452486749997914835801267949538416283945685954650461191823998601256195384288486570438251859315297739457445445499738225402719594480734640595152306972540009721754238702392994340394645902571925675361462558160491929245949068301516764114043015220361669016655173434889840946958165258084362492237029663765088556264658519671519308908873115125119358175599134571598104994475119622887311201603506333613417589756936207162595864270316838806679892408233749537846778332047525629599683705956213985518388899384596043235001079574084250104127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString ''
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.134.1.2.1.8.210 (postSignumCommercialServerPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.postsignum.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crt/pspublicca2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 48ef3ed4ea8989a3e9e23fdbef8c42b10af8c8d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www2.postsignum.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://postsignum.ttc.cz/crl/pspublicca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fae72fc649d871c000a91a31ce4607c69efab16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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