www.fdrive.cz

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 65:13:8f:9b:eb:57:67:6e:16:28:ea:dd was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fdrive.cz,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 65:13:8f:9b:eb:57:67:6e:16:28:ea:dd
Serial Number (int): 31281633757139048324171098845
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d4:a7:b9:69:e5:68:98:7f:c3:87:2f:ff:45:cb:76:19:57:e9:6e:06
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 83:4f:80:45:13:b2:cd:54:4a:b8:78:7d:36:2d:9e:9a:5d:46:c6:a7
Fingerprint (sha256): 64:57:b4:b5:d7:50:c6:a5:bc:6f:f8:e3:fd:64:49:33:12:40:35:ef:a9:af:a0:f9:3e:29:92:6b:a3:d5:fb:01

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.fdrive.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fdrive.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fdrive.cz
fdrive.cz

Other certificates including the domain name fdrive.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fdrive.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIISDCCBzCgAwIBAgIMZROPm+tXZ24WKOrdMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE2MDkyNjExMDIzNFoXDTE5MDky
NzExMDIzNFowOzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRYw
FAYDVQQDEw13d3cuZmRyaXZlLmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAxBYR8HY5AqrH+J+/qSJRnQWyfUPBuU6UE99oUN/HDWNOwIC3AvRfSFSF
w4ztNiRwXI5twCf6n/xPw1xglAObuIqxuJzKb1AiZPZI1MxEBNvC+q9RWLO172zV
oA8blMajreRdy9TKO0Ms6o4PDYY3QCjaXiWZLUrgQE6tXF8sWyeHsZJSwMShQ7zP
jA6QHmcFBnlKRoAq/e3J2CDbQiYGBbkQDcfG+8f4GhRqc23+z4ruS9pNYclAhRfn
WqhAeKkMlUzUmD2hMLW5d2fvN0oZcmRU/xPElKCdRBQ0kKxXKyRKz20pqf2olHcF
AlkE9Z5SLO8jn1fIEy9w8bVBfj66O3atp7JOqEOHn/0u+aolvx6BzCOd2Wo+fzgD
U40QiQ3B1+VcqC19/ZUnz/Eb26/43Fh97XG8G6FLJN+YaMFpYoK7SF8C1NpIIjNS
6Jtk92lFk2SFNJ+om7eQlt+j9dy7e5jS7wUNQd5VTBHxh02bBRaylSssbdJ7k7jj
W+DCw6MBrsXxFj/lgyCAspXRUwas4pCcxGnj3xdDYqN3zgt9MTaDuVpyL89neWlK
ra1hzB69x6ksfman1hOk2ZlqQ8ZxnlmCaDVZQJ0mwS7e1iHDfniNI1ZmIO47xnjN
ew5ZB5P3pwq4k9lbtNc+K6vRSGGaAyy51+eOo5gPKNQEswk+vqUCAwEAAaOCBDkw
ggQ1MA4GA1UdDwEB/wQEAwIFoDCBiQYIKwYBBQUHAQEEfTB7MEIGCCsGAQUFBzAC
hjZodHRwOi8vc2VjdXJlMi5hbHBoYXNzbC5jb20vY2FjZXJ0L2dzYWxwaGFzaGEy
ZzJyMS5jcnQwNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNv
bS9nc2FscGhhc2hhMmcyMFcGA1UdIARQME4wQgYKKwYBBAGgMgEKCjA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAI
BgZngQwBAgEwCQYDVR0TBAIwADA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3Js
Mi5hbHBoYXNzbC5jb20vZ3MvZ3NhbHBoYXNoYTJnMi5jcmwwIwYDVR0RBBwwGoIN
d3d3LmZkcml2ZS5jeoIJZmRyaXZlLmN6MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAdBgNVHQ4EFgQU1Ke5aeVomH/Dhy//Rct2GVfpbgYwHwYDVR0jBBgw
FoAU9c3VPAhQ+WpPOreX2laD5mnSaPcwggJtBgorBgEEAdZ5AgQCBIICXQSCAlkC
VwB1AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABV2YpK34AAAQD
AEYwRAIgeSJn0kRCHIpORrY9mtPlXbAj6ttl15nnNLZV+Qfl610CIExFT8HMh7bK
V0rIXsw+k/ksETcDccdEK4maVY/vKcsbAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFXZikw/gAABAMASDBGAiEAmOcg0rK5rNZCkSmtdP2cKGyu
ASfHBonJYUZ89XQg+t8CIQDWxdIz1L9+yWXQ3eIOvmWCwiyrwLCkcWhZMrQXeMI7
0wB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABV2YpObsAAAQD
AEYwRAIgV/x5TAhpEvYyws7ErTpbCL3PC18XHKnvg4C6MZx3uOkCIDx5bMS1fzqt
Smmo3AlBsp5euHlZJyLrOT9djI59+h/oAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHV
XIiNPRHEzbbsvswAAAFXZik/JgAABAMARzBFAiEAlSqOGT8EDQ7U07Nrxu2vcfnd
WaqnEB4O3knXuvFvhsECIGt4HFuFa2dtNAgFoypU2HDLx+zgsxsTik+IdeIYqRD6
AHYAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFXZilDuAAABAMA
RzBFAiEAtaWcYbe3SABi4RmqAoLZRpCbKRKhfjwGuB8XU50kcEQCICbCR35CXDd8
qRXYFFtpJTWAsPasnVa3OOZdStsHnWTnMA0GCSqGSIb3DQEBCwUAA4IBAQBhigUJ
XbPetRXQYAgsEJDff2SVfIV4NvJZE7PVce9JK6TroRQxgOJRGx3l0v4b4Fc9mFu+
HUVVjhzmX6c45JFi3ZtvylVSYbTEvqik7/8H+94sgysmGBtDd2mDgc31I0aicBqb
0rcmYUgCu0QBiOrQNI1tNXGWdWUFMSzrT4/4xb42ha9VA+eT0LNEkRhdA5WtwK0L
yILuBG81KFSz1FxYZpmQ0rG+u+2Qp0r8R4Q86E/taJEUXW00bYgEg6+omVcOlChl
rLFYUObuXEIS1dN1WxR9D0IQJRmmYWEO+kfl9ivDhBLX6sCRsXtOLa1OpjI7b8VL
N2IDqfuQDUh5RY0o
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31281633757139048324171098845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-26 11:02:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 11:02:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fdrive.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799961948473393450313962903784214819809874320320482498779463834482418569814010576179776893794270146402236645270590158999561226425151157030301149314314693835961700737855197752047246063683474690808540029781969291713721913324423543775139810204914200890705845876659563736530835232586812833168791542662585991592267856090579535357020905492165822838865629249210067602514025864330977871128744029944939190495244881116689021440857714763577608587718521393510104919002307914659213052238173979288990991377961887728243816676407455795821873449504392255705386830322275547321835155054766162581423694186114093218048046658069395236090829281184942564460440464544646599803276193687906850925590674725929346798765983798029266468391870596925051709514249230618047619220067522721727858113888784366967728970355464409858669586386668894314842422149632410943518948939893159882080259917698639538432008247480592572958923104083447988508162219315432943653872945728798949356395424551021354517491699397095478731943500518342454443467559023055135324407727747797892139684236152292163625946197634456554785432608539452234282923868327322020515054070948831815668195877183307980447712574145818203761746226895823703188089425538674610885444613226880431388726839559960044062555813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdrive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdrive.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4a7b969e568987fc3872fff45cb761957e96e06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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