aboservice.audiovideofotobild.de

- Axel Springer SE -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 01:83:ed:a8:0a:35:c9:dd:69:52:09:74:3f:f5:cd:95 was issued on by GeoTrust Inc..

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Axel Springer SE

Organization: Axel Springer SE
State / Province: Berlin
Locality: Berlin
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:83:ed:a8:0a:35:c9:dd:69:52:09:74:3f:f5:cd:95
Serial Number (int): 2014239128820222581176155132319354261
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): c7:76:79:82:52:5c:f6:73:f1:19:8d:ed:6d:4a:e5:94:fe:93:ad:fb
Fingerprint (sha256): 59:5c:aa:cd:c9:00:2b:6b:bb:e1:d1:70:02:6e:b9:87:48:59:0b:f4:ce:39:f5:26:4c:19:cb:06:c5:e4:60:c7

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate aboservice.audiovideofotobild.de

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aboservice.audiovideofotobild.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aboservice.autobild.de
leserservice1.bams.de
www.aboservice.bild.de
einverstaendnis.axelspringer.de
aboservice.welt-kompakt.de
aboservice.axelspringer.de
aboservice.computerbild.de
www.aboservice.welt.de
leserservice1.bild.de
einverstaendnis.autobild.de
aboservice.sportbild.de
service.lesershop24.de
aboservice3.welt.de
einverstaendnis.computerbild.de
aboservice1.autobild.de
aboservice.autobild-klassik.de
www.aboservice.bz-berlin.de
aboservice.computerbildspiele.de
aboservice1.bz-berlin.de
aboservice.bz-berlin.de
aboservice.welt.de
aboservice.wams-kompakt.de
aboservice3.wams.de
einverstaendnis.sportbild.de
aboservice.audiovideofotobild.de

Other certificates including the domain name audiovideofotobild.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for aboservice.audiovideofotobild.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UJ2ZIpGrJAxAqvcVl20
T2uFAWgJx1wVwxtQNJ5xKvwexplJeVlznthX/4LNY5XMWd4rChH+CwHFJCRUUJhl
mITdOl5CxSJLX89r8GxAorvTiRwgaIDKDXQ6+fKfMwT1it3d/K4Sw6TM6ITXX+x1
Q5xyG9X4PEGweuA3om22ub9o2KNfV2KuZILj0+whh2pBsrahfB8AV3QPIqpnP8Z6
IvE+qHdY4hHsNhzApnvc2qI5og2u1suLoxgk2oftZqS4rfeBoErQzY+EWxy6u42M
0RWlrwWtWrkf4P4Evxfh5PwkEgqOmiLz7DTtfItDCZiZRaa4+7aIxYo05bFHnin3
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2014239128820222581176155132319354261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Axel Springer SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aboservice.audiovideofotobild.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27426486043889661890407945555404715446766476380807172436465097651176032325609977478221410512251238223288924536647558516469401665015233131190657503455102859686966590490734359245440643125181427764190402905501914007855096019621563345423393577499875037076271197499329848957530570823453564078705850222816444463775112400923714330729165448124605344967136383288445951519932672225291989353883070748910785655076092415823523984234858996274370758959282018111576530108702098703802468608364841706935115450108697214581264377854328891541984078018599490160178392410895424252537030001217448167779455282150612854207824409704964553307959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserservice1.bams.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboservice.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.welt-kompakt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboservice.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserservice1.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.lesershop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice3.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice1.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.autobild-klassik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboservice.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.computerbildspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice1.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.wams-kompakt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice3.wams.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einverstaendnis.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboservice.audiovideofotobild.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000154e330bd94000004030047304502203e66c4457f37ec070e5ec03a4ffd5327d45c3ac1a96198a1756f664d2a49fc58022100ca2aea44b6a97cad2267ec402aa670ff8add5079caf8c87d8c3330aa05f87fc6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154e330bdd00000040300473045022100ae078eddcc2cf2226d89d5bc7e2e0ce387a4240b7f22a174ed57d1e3e730d0070220620ef385e48d986f314a1c7512ad829ac44f09484364fe49b47d7026df0c16d600770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000154e330bdcb00000403004830460221009599b4192bf4623a125a74c9ca4174cdacdacb8f24e6cbd5b7e8196189e731fc022100ac5f253f76f986eec848c6024622622d399440c85529dd0c2df6d17a33bdc4af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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