www.westbahn.at

- Westbahn Management GmbH -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0a:95:4b:a6:64:ef:8e:44:1e:b5:23:ec:69:2d:64:81 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Westbahn Management GmbH

Company registration number: 319409w
Organization: Westbahn Management GmbH
Organization unit: Security Department
State / Province: Wien
Locality: Wien
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:95:4b:a6:64:ef:8e:44:1e:b5:23:ec:69:2d:64:81
Serial Number (int): 14067466553604205374505233165308486785
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 44:4a:11:3d:9a:53:de:86:71:01:4a:7a:4a:bc:d3:9d:4f:b9:d2:7b
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): cc:2d:f8:1e:b2:49:0e:3b:bb:d8:7e:24:e9:04:68:f0:5e:9d:dd:83
Fingerprint (sha256): 69:c4:83:66:25:87:d4:9d:04:29:d5:79:6c:5b:46:16:48:0d:f3:f7:8a:a9:56:c8:d7:d5:a1:ce:2b:da:b4:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.westbahn.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westbahn.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.westbahn.at
westbahn.at

Other certificates including the domain name westbahn.at

(limited to 100 certificates)
westbahn.at
*.westbahn.at
westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
www.westbahn.at
*.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
*.westbahn.at
test.pay.westbahn.at
ticketingfeedback.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at

Certificate

The complete raw certificate details for www.westbahn.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14067466553604205374505233165308486785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '319409w'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westbahn Management GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Security Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westbahn.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782767981068355613255880424587373908202298931409034148340082941977499243030708279937651788015249973848408697138749473584288702641735702188208437974745290825908064922806061442167574372097855794341910050180181068730010252816625859955794161807359302202172126874382075003025342710459409027909225535453304577839487171967825550033963850351978930226204204000242555245925648441570336958769841662473104340294874089795193968173522263604804976237281840985487945502407629753869761404789418991323444049331733728756663105261530687886327604423970992822969251955726815073797551213519854122555452005131765822081806624726920777224296128057214301767792428883370175746026024668554808002680130568494940738040359083350236746345538024467054069273349906470255792551737389309338117261236339056240395208955299638654266645847824772835430186509779877073268678990478308622261739880126299789889069127641195864177976209489375328166317330887264290551979416384005181897326947640372676442080563312648644836101441143998334893370131862929591704723710705766972307157519321051517458290128023481822200569017834340052616735992506484109959552232157517600776424927549877858842038219920382970630524900945251417899094103565647433585925670854593010113082905697827025903072600481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							444a113d9a53de8671014a7a4abcd39d4fb9d27b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbahn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westbahn.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c7561c5cd9484d258eb3f6b530a383ceb301e342d0f028589bd4297d59ba360c670dbd704d43cdd187edc8c9c258e29013b8ea082fd3c853999d1c04400ac2c315975e54a1980e62eedcc66436a2ec1ffad7e592bb82a34ff35c015e09a6495fe4bbf9fa9c5b02f08a471051eade7641e15d393af43cbc5b9c3d13a5ad4cb6d792b955b8112ff975b9cbf7ba86515a67d14f78991ada7675b0daf0555070c843a8e35b0fdf9e3117a41a8cc03da263654220cc42fcc9373a74be522844fa8f9c263152dc09b258ce2968af57991ca3167e2121777fea0c67aadd05189a8c3ef360033ffdf61b69942a5dbe63eb8a079c2b8c5443b388c7de289c08b37710ae4