paydirekt.atruvia.de

- Atruvia AG -

Issued by QuoVadis Europe EV SSL CA G1

About this certificate

This digital certificate with serial number 3a:52:d5:6d:5c:8b:4c:56:c8:59:9a:17:73:9c:d7:27:cc:1a:2c:ce was issued on by QuoVadis Trustlink B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Company registration number: HRB 102381
Organization: Atruvia AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:52:d5:6d:5c:8b:4c:56:c8:59:9a:17:73:9c:d7:27:cc:1a:2c:ce
Serial Number (int): 332968717944755916032262301349526489714331888846
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a2:cd:08:f5:f8:e0:3d:b7:2e:68:d4:ce:45:4f:05:21:82:5e:f5:d7
AuthorityKeyId: 49:3d:0e:dc:79:c5:cb:db:12:a3:d5:0d:ab:f2:cf:a9:af:e3:66:a9

Fingerprint (sha1): 98:e2:86:18:48:3b:57:9a:5a:c8:79:9b:e8:3a:76:1e:a3:7e:2e:79
Fingerprint (sha256): 47:dc:a8:b1:b0:3d:89:ee:61:98:76:8e:55:6d:df:f2:e8:7d:3e:68:6f:39:6c:26:f3:56:38:09:68:a3:6b:3b

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl

Check the revocation status for certificate paydirekt.atruvia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paydirekt.atruvia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paydirekt.atruvia.de

Other certificates including the domain name atruvia.de

(limited to 100 certificates)
fints-test.atruvia.de
atruvia.de
fiduciagad.de
paydirekt-ms.atruvia.de
agree21itsm.atruvia.de
webdav-uit-a.fiducia.de
test1333.atruvia.de
atruvia.de
fints1.atruvia.de
vpnb-inte.atruvia.de
karriere.atruvia.de
vpnc.atruvia.de
vpnb-ms.fiduciagad.de
KA-E.VPNB.ATRUVIA.DE
vpnb-ka.atruvia.de
test1333.atruvia.de
awbt.atruvia.de
matomo.atruvia.de
vpnc.atruvia.de
agree21mdm.atruvia.de
api-test.atruvia.de
KA-E.VPNB.ATRUVIA.DE
test1333.atruvia.de
ckm20230620dt.atruvia.de
paydirekt.atruvia.de
citrix-t.uit.fiducia.de
agree21itsm.atruvia.de
api-test.atruvia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
citrix-t.uit.fiducia.de
vpns-inte.atruvia.de
vrnetworldsoftware-inte.atruvia.de
citrix-t.uit.fiducia.de
digitale-privatbank.atruvia.de
citrix-p.uit.fiducia.de
datenservice.atruvia.de
besuchermanagement-test.atruvia.de
citrix-t.uit.fiducia.de
lp.atruvia.de
geno-dfin-inte.fiduciagad.de
shop-qas.scc.atruvia.de
besuchermanagement-test.atruvia.de
api-test.atruvia.de
test1333.atruvia.de
atruvia.de
datenservice-test.atruvia.de
fiduciagad.de
*.hub-satu.atruvia.de
*.hub-witu.atruvia.de
uit-abnahme-sharepoint.fiducia.de
citrix-t.uit.fiducia.de
fints2.atruvia.de
atruvia.de
vpns.fiduciagad.de
p2.giroapi.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
integrationsplattform-01.atruvia.de
vpnc-inte.atruvia.de
shop-dev.scc.atruvia.de
awbt-inte.atruvia.de
citrix-a.uit.fiducia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
atruvia.de
paydirekt-ms.atruvia.de
fiduciagad.de
p1.giroapi.atruvia.de
lightsout.atruvia.de
uit-sharepoint.fiducia.de
shop.scc.atruvia.de
*.hub-satu.atruvia.de
integrationsplattform-02.atruvia.de
*.hub-demo.atruvia.de

Certificate

The complete raw certificate details for paydirekt.atruvia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/tEv8VdUrRxoCcxkYt8
OTeVYMywVWUknNzjRdcvGbmTImraba10HW48wCZf+5SOnFymxt/pEuPq5KGtFd+m
iy2+y8dxsdBS7mQ/zGXpHFIbg6VyP+dvtzWb8dcxzDQdBwkJUqN4DpgSKq4u9NEa
NEMtL6hPW9s8+P+xIweEBDCDX/jvkNDnNbDRaFQyPFy8/UIjp5fgNUqGtHeYQ2aZ
Wo6vprPSzYgteQ2WHf5UA/ZL2bnzwAITYBpsHUU7Kt9BGR5Jnd4d3KFKKs7WKWhA
3Jnq62CMKEgLKcYT1nbVPwV1EaRQizqlfrr0I5yOWoP7oJzbUrBxNBbbkoW5tw/V
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332968717944755916032262301349526489714331888846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe EV SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 08:45:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 08:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 102381'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'paydirekt.atruvia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18175982750747263448330506112769234929115600100817363112183778220213530986241543442273195227009328778346899328732398736480494657637582664055653965568267323248506832956065211295702765421980390515621246131829650975835414008158119210554931352974430391822147379858714841815631241466629229563732139558649364292020793578817473147861995121584668449130647755085041129242314532112250676344483024176717425827869131753137706777718857059182349509879385885049169131778964405295049916692604305993073039866373678513189793445336046938086533467878847319884284672696303631596046440950155663458415777968129293008891649159861894112073103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 493d0edc79c5cbdb12a3d50dabf2cfa9afe366a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paydirekt.atruvia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2cd08f5f8e03db72e68d4ce454f0521825ef5d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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