www.touchandscreen.de

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:d1:5d:d1:07:c3:04:b3:be:a4:30:29:58:ec:c8:6a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.touchandscreen.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d1:5d:d1:07:c3:04:b3:be:a4:30:29:58:ec:c8:6a
Serial Number (int): 21025512805388779963260510342329714794
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: df:bb:2c:48:89:34:b3:bb:f7:f0:f4:37:98:da:6b:da:31:c8:85:9e
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 4d:83:24:90:4f:d9:11:60:e6:e7:40:dd:b4:57:b5:5c:14:6a:71:3e
Fingerprint (sha256): 58:66:95:73:cc:03:b5:52:13:ab:9c:d3:c3:52:75:b5:8d:ce:6b:25:b6:84:89:d7:bb:23:00:ef:98:d4:c0:c8

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate www.touchandscreen.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.touchandscreen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.touchandscreen.de
touchandscreen.de

Other certificates including the domain name touchandscreen.de

(limited to 100 certificates)
touch-and-screen.de
www.touchandscreen.de
www.touchandscreen.de
www.touchandscreen.de
touch-and-screen.de
touchandscreen.de
msd.touchandscreen.de
*.touchandscreen.com
www.touchandscreen.de
www.touchandscreen.de
www.touchandscreen.de
msd.touchandscreen.de
*.touch-and-screen.de
msd.touchandscreen.de
touch-and-screen.de
www.touchandscreen.de
touchandscreen.com
touch-and-screen.de
touchandscreen.de

Certificate

The complete raw certificate details for www.touchandscreen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzTCCBbWgAwIBAgIQD9Fd0QfDBLO+pDApWOzIajANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTE4MDYwMTAwMDAwMFoXDTE5MDczMTEyMDAwMFowIDEeMBwGA1UEAxMVd3d3
LnRvdWNoYW5kc2NyZWVuLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAtGptMZSeudOgVqt5/lWpL6Ge+ggYzmAqPL5NmEBJcniBtwfhPjxz6J/QGlLz
US21n+FHYWvt+QJbZHws/nl+9sCt6Uk30Mffs1/Xd4gF56uvhJ/uUPrdNsbMhSwI
d+XrtVAwF4BujMa6SaQ1IXI/kJ/nkzsLF5df6D9P5gHIsd+TJzbXBDxAlXjRqIzV
7kfGQccBrx9Trw3+G86qwbcIWOHnHqpAHtnTKyq1IaRCDY0EBysemsKb3OZDjLqg
b2+ZZq9byWb39hfEW6LlnXtvMveZpRS20Y2QcRiw8F4HcTuuF9OG9uN48qm1O5BA
FD8E48a7BQuxe5PYx+r57z86Mv5m5SRct7ZS255q7AMCWNbizeIDZi5U4DX/0F7M
fMFUpQLsEJfcw2lvD65konziz5iDMRw38JTxvAFdfwYutw4BrUC9NgqFcOcI5dUc
+la+emzr7c4CwcAg/mmcsos3nprrgjI7Sgu8GbknFk5utXs5qTZmiYU9lb1mHFbq
fpsMyQxYTKeiJY+5kPJg6wouormqZ8IinePJTad3pUSjZrDwvs82ghZgcWdzb82q
4s7z4ZPVb1tytPHkB+SoJgaxllBmoAr5NweCxSGkbh6FGPbm11zn3ya22PrrT7+Q
/PY0XP9Npe6LIvV5Ljb3uaOge5YXXUL2gVg5LNGafkiYTtUCAwEAAaOCAsEwggK9
MB8GA1UdIwQYMBaAFAzbbIJJD0pnCrgU7nrESFKI61Y4MB0GA1UdDgQWBBTfuyxI
iTSzu/fw9DeY2mvaMciFnjAzBgNVHREELDAqghV3d3cudG91Y2hhbmRzY3JlZW4u
ZGWCEXRvdWNoYW5kc2NyZWVuLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2Nk
cC5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcxLmNybDBMBgNVHSAERTBD
MDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGG
Gmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD4GCCsGAQUFBzAChjJodHRwOi8v
Y2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcxLmNydDAJBgNV
HRMEAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAu9nfvB+KcbWTlCOXqpJ7
RzhXlQqrUugakJZkNo4e0YUAAAFjvWR3jwAABAMARjBEAiAThP+1jvQmrZSa2UcS
5rLFIRS8LJON+iIfdpxpEZucwAIgFZ+7K/Gm0j+eDWAUaDeZqvlSOj8aaVuI17oI
gsHW38IAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWO9ZHhU
AAAEAwBHMEUCICEMVgChQ+17EgV3dMiJAkI3ZjmHhPfPxGIT+fxp6lIUAiEArej4
g6LWUWJzYZqNOX0OWt4qklNfArXdLZQfwd3rFMcwDQYJKoZIhvcNAQELBQADggEB
ABL7vVJ7XU1o2W+7shWFoIr+CeICxxYH66xXxxHLEmROzUroqt28WKAu7sZ41Kht
qeDuhzoXe9QNAi6rt9KgfIc1GdHAnT2Wzj7xivEaP+hvmcV7L0Gcamm/ZjXOwdM9
J9CkWxy1oSIxsVILyFfnNXvOk9dEDfvnsRj0vwrk0M+m7c85viLZeNEZIyjEAPoq
UvZsj38ByQBhAuGkU1HFPej6Pj5E+mGc/VW3ldKIbCOV+W6ipwCwAn7LotgMGyWs
9o7+XKaAwIAvU8yESytEmZ56VU0Std/N/3XxizsbwX3u7bDTGvW23Ni5zJmzxGh0
ddtcct8NJqoFvvip8rbV9fU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21025512805388779963260510342329714794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.touchandscreen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736031957218510564347560355290417519275177852929167892606194328199739347114697282897270513907711873758922230098637928179977735264900816931992458637476275120963188570761462503846292208350240621737300288521960959413118208178576463917267220998005694486810660544322893248652885776236859077863049498856890838775030584183238679500934922725056079290392267007328618585923563170208960457063871817990036983255705462601580528457851405161578974528768346375549359830534995366617219517321900723266459832332139614724936879037529588124919710473891108838183766912592170696137268109411218871926315924839162485079968617009332854527695389662613155661247751775718286739243339802613815853052731037313023881875491872877686352117677804498775291584955177012194296940650381806700718856955390986687407937743353334350244858432101262417340189334525543306937491376568411414513863402227833834261123964545366624063399345995174035621131093274790411664978371140824589977515785557259901037302480193968251887999774798146798587905804881616764761725199930031467493687634773613668357126166045355350110719098730042472405131240403089935374268757760283185351468598986156289429868877213595631241217689756262043425620987423638909468794068927304105217848251899650431419088916181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfbb2c488934b3bbf7f0f43798da6bda31c8859e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchandscreen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchandscreen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163bd64778f000004030046304402201384ffb58ef426ad949ad94712e6b2c52114bc2c938dfa221f769c69119b9cc00220159fbb2bf1a6d23f9e0d6014683799aaf9523a3f1a695b88d7ba0882c1d6dfc20076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163bd64785400000403004730450220210c5600a143ed7b12057774c88902423766398784f7cfc46213f9fc69ea5214022100ade8f883a2d6516273619a8d397d0e5ade2a92535f02b5dd2d941fc1ddeb14c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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