daiknow.dai-labor.de

- Technische Universitaet Berlin -

Issued by TUB-CA

About this certificate

This digital certificate with serial number 1c:01:cd:3e:a3:00:26 was issued on by Technische Universitaet Berlin.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: DAI-Labor
State / Province: Berlin
Locality: Berlin
Country: DE

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:01:cd:3e:a3:00:26
Serial Number (int): 7883280378691622
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 2e:6e:00:8c:8c:cd:90:81:b6:b7:75:7f:3a:b5:8b:c6:f2:d5:cf:e6
AuthorityKeyId: 23:32:42:9e:fe:62:42:4e:fb:4e:d0:17:9b:78:e7:ed:8a:8c:3e:78

Fingerprint (sha1): 56:a9:91:29:d4:5d:f7:a1:97:84:fa:37:16:8e:39:06:9c:e2:99:e8
Fingerprint (sha256): 65:76:b1:77:4f:8a:7e:8f:7a:e6:47:b6:ce:98:58:af:56:d3:80:4a:e9:d3:35:43:21:11:77:b3:5e:17:08:94

Issuing Certificate URL: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl

Check the revocation status for certificate daiknow.dai-labor.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for daiknow.dai-labor.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daiknow.aot.tu-berlin.de
daiknow.dai-labor.de

Other certificates including the domain name dai-labor.de

(limited to 100 certificates)
dms.dai-labor.de
www.dai-labor.de
dai-labor.de
winterser.dai-lab.de
jenkins.dai-labor.de
edu.dai-labor.de
gitlab-edu.dai-labor.de
gitlab.dai-labor.de
aot2018.aot.tu-berlin.de
115bot.irml.dai-labor.de
lists.dai-labor.de
dai-labor.de
intern.dai-labor.de
daiknow.dai-labor.de
ia.dailab.de
daiccm1.dai-lab.de
redmine.dai-labor.de
berlinsuche.dai-labor.de
imp-pub-ms.cm.dai-lab.de
dainas.dai-labor.de
pia-test-intern.dai-labor.de
cvs.dai-labor.de
gitlab.dai-labor.de
intern.dai-labor.de
flexnet.dai-labor.de
lists.dai-labor.de
www.dai-labor.de
daitool.dai-labor.de
dai-labor.de
berlinsuche.dai-labor.de
mail.dai-labor.de
gitlab.dai-labor.de
diginet-ps.dai-lab.de
dainas.dai-labor.de
mail.dai-labor.de
daiwordpress-neu.dai-lab.de
daibasi.dai-lab.de
imp-pub-ms.cm.dai-lab.de
va-hamburg.irml.dai-labor.de
registry.gitlab.dai-labor.de
ssds2.aot.tu-berlin.de
repositories.dai-labor.de
git.dai-labor.de
daiknow.dai-labor.de
va-hamburg.irml.dai-labor.de
wlc-5508.mgmt.dai-lab.de
berlinsuche.dai-labor.de
diginetdataint.dai-labor.de
pia-demo.dai-labor.de
cms.cm.dai-lab.de
pia-dev-intern.dai-labor.de
www.dai-labor.de
mail.dai-labor.de
va-hamburg.irml.dai-labor.de
gitlab.dai-labor.de
www.redmine.dai-labor.de
www.dai-labor.de
exp-e-1.dai-labor.de
cvs.dai-labor.de
www2.dai-labor.de
dainas.dai-labor.de
berlinsuche.dai-labor.de
registry.gitlab.dai-labor.de
repositories.dai-labor.de
mail.dai-labor.de
mail.dai-labor.de
tuleap.dai-labor.de
exp-e-2.dai-labor.de
edu.dai-labor.de
www.dai-lab.de
gitlab-edu.dai-labor.de
newsreel-edu.aot.tu-berlin.de
exp-e-1.dai-labor.de
mail.dai-labor.de
edu.dai-labor.de
dainas.dai-labor.de
dc3.dai-lab.de
dms.dai-labor.de
dai-labor.de
va-hamburg.irml.dai-labor.de
pia-dev.dai-labor.de
cvs.dai-labor.de
ima.dai-labor.de
gitlab.dai-labor.de
daneser.dai-lab.de
cluster.gc.dai-lab.de
diginet-services.aot.tu-berlin.de
teampass.dai-labor.de
ima.dai-labor.de
intern.dai-labor.de
gitlab.dai-labor.de
www.dai-labor.de
scb-erp.aot.tu-berlin.de
dc3.dai-lab.de
windnode.aot.tu-berlin.de
jenkins.dai-labor.de
cms.cm.dai-lab.de
dai-labor.de
va-hamburg.irml.dai-labor.de
www.dai-labor.de

Certificate

The complete raw certificate details for daiknow.dai-labor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7883280378691622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUB-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-21 09:15:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DAI-Labor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'daiknow.dai-labor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836758479334834248061897775091469452423087819540179658869776870396167731406163709248604814557371255262478716067600782245322678244439278768554343714237215503922893946760148931556295962821365477789666913040052482243052248771208365156918277066959153450736490080721330369691575004976629387652740236666652559059151139765267982200901308938484755007071665411973711578734391906758446753311937557231280210399792127352231068820420731819754838444226063409809197326933872158388488339514529261635738774050193753435383451829170305282726285430720360063404697476597845803974415420480632725538597800951214212542928276458364787294359224155208067665396307807990620347888004875646110640099669245430792529604073508152037822471980812835233039538558366473640987079552611825418784108123478643455080048000089636677257223040233782231731989210398804822117889993788907487186688779983261231379358475150819536862179939790925408618194412063828619950385527318074933766053502087343283051826377540491856894602091201873141199369651525087521857940678432585964209751550570699164699272437158303897977982777155108899076865650747072257604525699361296970257305614477714803879848537192434363657462100483249469257179300614527019942661805864859260305630054558781236165880786201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e6e008c8ccd9081b6b7757f3ab58bc6f2d5cfe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2332429efe62424efb4ed0179b78e7ed8a8c3e78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiknow.aot.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiknow.dai-labor.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a4df14ff5c45475a7d8637bb213c0c54c84638f32a865f45870af5b7df13ac27c7ec5705ee75dbb995dc5d76dbca94957ef84b70414c58c31321bb82c71bec00252db1d43087a1d33f8b211a81bb1f6bf6215fa9a0b58aa5133e2c33766b457dcd3980d4a3fba73ab2f19c79cc11b9ad773fbaa73ebb2ed45362531c2dc4c8d7890f9b5d39ea32bd6e9d7d7ddfb35642374157a3bfda679e3cfaeea04dd45237e93f8733402c3da70e1d3628a148eb2cf974a33e913441b8fe43f682ef9eb33038ddd5736de18441327ff9569a5d94495c3dd43433342c0359cddaf3b2dabbea2ef65af0e032e851fec0040105e379884657e20ce3a4478ef99099dc1b159e80