*.kundenportal.suedweststrom.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 1d:83:79:ee:60:e8:c0:29:38:ca:03:26:8c:d4:5c:a0 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.kundenportal.suedweststrom.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:83:79:ee:60:e8:c0:29:38:ca:03:26:8c:d4:5c:a0
Serial Number (int): 39230275824087282168354569883732958368
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): ed:bc:bb:18:31:93:46:3f:b0:04:b7:9f:5f:4e:af:9a:09:0c:1c:3b
Fingerprint (sha256): 59:83:bc:36:7f:f0:0a:57:0d:32:6a:e1:84:42:08:8a:b9:47:6a:b1:6c:83:32:d6:c2:54:c7:c5:30:3e:b3:1c

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate *.kundenportal.suedweststrom.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kundenportal.suedweststrom.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kundenportal.suedweststrom.de

Other certificates including the domain name suedweststrom.de

(limited to 100 certificates)
*.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
werbemanager.suedweststrom.de
wim.suedweststrom.de
www.suedweststrom.de
*.kundenportal.suedweststrom.de
*.kundenportal.suedweststrom.de
swbb.kundenportal.suedweststrom.de
jobs.suedweststrom.de
jobs.suedweststrom.de
*.suedweststrom.de
bkv.kundenportal.suedweststrom.de
www.suedweststrom.de
*.kundenportal.suedweststrom.de
www.suedweststrom.de
www.suedweststrom.de
werbemanager.suedweststrom.de
www.suedweststrom.de
*.suedweststrom.de
jobs.suedweststrom.de
*.kundenportal.suedweststrom.de
jobs.suedweststrom.de
jobs.suedweststrom.de
sws-90.suedweststrom.de
webservice.kundenportal.suedweststrom.de
jobs.suedweststrom.de
*.suedweststrom.de
nextcloud.suedweststrom.de
*.kundenportal.suedweststrom.de
nextcloud.suedweststrom.de
elo.suedweststrom.de
kalkulation.suedweststrom.de
kundenportal.suedweststrom.de
werbemanager.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
bkvgas.kundenportal.suedweststrom.de
*.suedweststrom.de
www.suedweststrom.de
jobs.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
kundenportal.suedweststrom.de
jobs.suedweststrom.de
www.suedweststrom.de
jobs.suedweststrom.de
kalkulation.suedweststrom.de

Certificate

The complete raw certificate details for *.kundenportal.suedweststrom.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHeDCCBmCgAwIBAgIQHYN57mDowCk4ygMmjNRcoDANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX
UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTYxMTA5MDAwMDAwWhcNMTkxMTA5
MjM1OTU5WjAqMSgwJgYDVQQDDB8qLmt1bmRlbnBvcnRhbC5zdWVkd2VzdHN0cm9t
LmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr3p6UXFUh7loNgTZ
yMjE3oicg8TjkLH4jxjpDYziUJtuS5q1dHEuA254BzMWfkjFF/2l6v1jL7pXkSt5
egMmxQs2VQsET6pH3Kb9qndHifhsjiP6MhaMRXyknI0sHek0f0OptsERfj8QQAMo
I32KbN/xnEB24DKQXytyMfCqOqMbjIRjJUuVEqP9DEA7Z0yYOJEt1wiMDO4BuSXV
ieax/MGQtPuiZ6lYeFtAxR/+KZ0YUk0uh2oO50PnKEVFg95i577FuPzEgYk1cv8v
v4FeZy2NZ32OoEuSdJNYkfI+WZaQGH2A7/Hyycl3I9v5mIZbBqnJGSkR+cd/3BDN
IpmebgQLkkzjQnYYsLg3TYRgf0ReXYEKtxjQf+moJUKkRGmHB0fR1J35KbRFsAcf
e8tUIm7zcb2nuDzQQDAZUdwo5FBSyrdaCxvEm9Cr38dpSxCK1zd3kLGi5LBV1mR9
EnMmNJG51HmmumVfZovYOBqhCa155ga6MBsROTnsAaroHXSa8rYihgITCgR105VO
OlAMvclFyzbgd0vRBYD9TMxWS91heBORClI/PIxKOEKqKazINu3Dw8u5M9jboUl6
cHjBUkzPDVxM808AR6ImQqYXuHqar6KIwvJprwAmdP3MumEH2FVIlEea7VtD0R8a
8baTzNaAWZ8jObw+cahMXejaF88CAwEAAaOCA3swggN3MCoGA1UdEQQjMCGCHyou
a3VuZGVucG9ydGFsLnN1ZWR3ZXN0c3Ryb20uZGUwCQYDVR0TBAIwADArBgNVHR8E
JDAiMCCgHqAchhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNybDBvBgNVHSAEaDBm
MGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBpZHNzbC5j
b20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6Ly93d3cucmFwaWRzc2wuY29t
L2xlZ2FsMB8GA1UdIwQYMBaAFEz0v+g7vsIk8xtHO7VuSI4Wq68SMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUH
AQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Muc3ltY2QuY29tMCYGCCsGAQUF
BzAChhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNydDCCAfUGCisGAQQB1nkCBAIE
ggHlBIIB4QHfAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFY
SQ1rnAAABAMARzBFAiEAwfN6tNIdA+Gyt6Ocs+tPyyMlPKY9kbHZeHsTnXmK87cC
IF7u4cALzvPiQdfjYkr/d1y7TNQiAEoaF5iQiJ6uBx9BAHYAaPaY+B9kgr46jO65
KB1M/HFRXWeT1ETRCmesu09P+8QAAAFYSQ1rsQAABAMARzBFAiB+CxzDSKB1M+FQ
hWt/2xzhUa7fj3sLcRW0d8O2XgzLeAIhAOUz4j8oQdSehD30tJEXMzcvYaFcnYSi
H3E0i+ZpFzxUAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFY
SQ1tkQAABAMARzBFAiAo5brMrGpUlHqQA5gZMT+SDP/phonN0vWY4FqDxBIVLQIh
ALXA4Zzh07/QyeYoLGZixWsh/yFp5k4j9cnukKrxhUHzAHUAvHjh38X2PGhGSTNN
oQ+hXwl5aSAJwIG08/aRfz7ZuKUAAAFYSQ1skgAABAMARjBEAiAXtau3CN4Pnjk4
dn0Mvq2DNassLKPrLaLa6ByTBqTUvwIgczWmtqNhCIBxQHcWQB261+vQ70HO2v1o
nL3u1uUQqukwDQYJKoZIhvcNAQELBQADggEBAC/dhdHcFpyTso1ibIwRU7HY0TNo
/CBlQDJ/ggLgt9lIFyZwT0WLRMRJvqsTCVuvCmqv+rRFP+Lj0OrneJxE3srv3asI
klYMEaF7DhlSBn7HF7Wa39lQN+nXL9gXH9MCWi8+qsti9iem9GEGMT66lP3K6Nvi
BcRMJBia30poODHgyMNWbKX+xlfGS2+KQkGNfbuZ+s5vUVYynF8Mg/3DX5BdbLmM
5FEVbWYhmDgf+HhYg/pLE6QvW9ePBRua39brrUDWOKPQoqsQ5avVwsrpidqZELn/
n4h+UuEuErU3Ysb8hiB891OHyW9cbzm5OikKDpBBJ/6sqhdcaiDaIP0CCc8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39230275824087282168354569883732958368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kundenportal.suedweststrom.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715889531636011802609743598850639526769399813515205790550607343971609525105287040761845446698549848102025390346159839858659704361082520273497336303667151594011032781351926761311631201907069727308719490681888216630820686387087336504678617042567695720514482199459934533675136870093410714553425545622685125917947544937570448782709869093015558208806887960814441788674373656707895664596592166047233242829372217090910681635340508143874439723784911409886925710797112301676106529453141112823848094105037642996226345951677657297848887836847138570119262164477226332424558859029578687832086669668233593153089603433712319048739610120572817837878526014939160379287300542899590903729941530284620780061067696530380508542761572587654360444712134731255599322833492342697754538801680066402623707125626763614115322753721366852029552799431089743159221059683671149151224775396779876407762833994674476211690902950819456671156384005827056065560266581452650313352618441358221026819832658885182788895886124329854121084308865810602668174773914982181893044573454075419543990198299376180711000070855572275623361455030145263980075213238254404030968665785965631369842288099839624357317925830339514125469102040991063035365873792483919958346229871890446353845327823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kundenportal.suedweststrom.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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