*.coffeeconnect.wmf.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 75:29:39:32:bb:9f:50:24:c9:05:9f:4c:38:dc:07:d9 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

WMF GmbH

Company registration number: CSM040969374
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 75:29:39:32:bb:9f:50:24:c9:05:9f:4c:38:dc:07:d9
Serial Number (int): 155733719794856913430743050114519795673
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 27:ea:e6:9b:fc:fa:4b:8c:27:bd:cd:61:ec:de:02:e3:0b:8b:fc:6d
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): e0:fa:9f:c6:95:c8:62:9d:b0:fd:71:4e:3a:3d:fe:2f:1f:dc:f1:64
Fingerprint (sha256): 3f:fb:ab:a1:8b:ea:a6:f7:3c:56:67:1f:1a:fb:85:89:38:aa:9a:89:78:4b:b5:2e:0f:71:49:c1:07:72:1b:a0

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.coffeeconnect.wmf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coffeeconnect.wmf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coffeeconnect.wmf.com
*.coffeeconnect.wmf.com

Other certificates including the domain name wmf.com

(limited to 100 certificates)
confirmation.wmf.com
www.wsp.wmf.com
marketingportal.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
cmservice.wmf.com
www.telemetry.wmf.com
news.wmf.com
social.wmf.com
sni.cloudflaressl.com
wmf.com
owa.wmf.com
www.wmf.com
www.wsp.wmf.com
*.wmf.com
*.telemetry.wmf.com
sni.cloudflaressl.com
digitalguide.wmf.com
wmf.com
mediacenter.wmf.com
*.wmf.com
news.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
mediacenter.wmf.com
parts.wmf.com
marketingportal.wmf.com
*.coffeeconnect.wmf.com
*.wmf.com
coffeeconnect2.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
*.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
owa.wmf.com
account.rcu.seb.com
news.wmf.com
sni.cloudflaressl.com
*.wmf.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.wmf.com
www.telemetry.wmf.com
www.telemetry.wmf.com
social.wmf.com
login.coffeeconnect.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
news.wmf.com
wmf.com
*.wmf.com
account.rcu.seb.com
www.wsp.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
www.merchandising.wmf.com
*.wmf.com
logintest.coffeeconnect.wmf.com
coffeeconnect.wmf.com
mediacenter.wmf.com
citrix.wmf.com
sni.cloudflaressl.com
*.wmf.com
wmf.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
coffeeconnect.wmf.com
coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
*.coffeeconnect.wmf.com
www.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
www.merchandising.wmf.com
logintest.coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
wmf.com
www.wsp.wmf.com
wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
*.coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
account.rcu.seb.com
image.20210419.201008.s50.et.yellsatcloud.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
sni.cloudflaressl.com
*.coffeeconnect.wmf.com
www.wmf.com
account.rcu.2.seb.com
account.rcu.2.seb.com
wmf.com
sni.cloudflaressl.com
news.wmf.com
wmf.com

Certificate

The complete raw certificate details for *.coffeeconnect.wmf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155733719794856913430743050114519795673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 08:30:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-16 08:30:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040969374'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coffeeconnect.wmf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774511906390397616560230783946589725739505722180318320359417833896007493415975434981133150843356482607663153273235317537910841952543868830474951895408646149373453893618286661547127431549013871029327490546477909630852003830080652433562404850106241223036094162904969757777167175752070443042930213291441142106998214803709669885568092307160558023425951948049769172424386522268172200947249774194028187624098006060052726194290031385957768687070961512559910803119099528491152701584506968870149159551299992422361840115781465166230399190983739644970535780952756658519936946174015294036616147236755609664819956990336989471938319127341381719892718636079193506394851041310318094600189334834755255355388283032418334732452778348246636493918051211036519468131208366974609961394909987695741003048590402940246316376803260882460148368778939990834388726648970106002138791872678469530125681514135547667822869345856510260253849293055513124164324985057718455202950349468312796115554817437568629513831223425820451658921498681514099695232361788649906900319731140048733623416506412455459072168906231157305701007381065816787713707947868781253680340461990493843556221750784188200467330568087120855305237967986497437829262250086670628547814603852136467674116677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27eae69bfcfa4b8c27bdcd61ecde02e30b8bfc6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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