data.onemarkets.de

- Unicredit S.p.A. -

Issued by Actalis Authentication CA G3

About this certificate

This digital certificate with serial number 0d:9b:5f:a7:54:16:00:90 was issued on by Actalis S.p.A./03358520967.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Unicredit S.p.A.

Organization: Unicredit S.p.A.
Organization unit: Applicativi
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Milano
Locality: Milano
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:9b:5f:a7:54:16:00:90
Serial Number (int): 980482516158120080
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 5d:a1:3f:12:41:6b:89:0f:3c:5c:96:74:5b:1f:39:6f:92:46:bb:8d
AuthorityKeyId: aa:aa:fd:ca:8c:1d:4d:f1:2e:83:e1:06:fc:fa:8e:ea:0e:23:ae:3d

Fingerprint (sha1): 7c:e5:d0:01:5c:47:e0:2a:a2:09:f4:30:9f:bb:76:cb:f2:0b:7c:5f
Fingerprint (sha256): 70:96:28:58:80:36:7b:f4:a5:c7:a8:a6:a5:af:32:5c:1b:67:ab:c0:1e:34:c2:8d:b6:de:2c:1a:c1:cd:48:5a

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autg3

Revocation information

OCSP Server: http://ocsp03.actalis.it/VA/AUTH-G3
CRL Distribution Point: ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL

Check the revocation status for certificate data.onemarkets.de

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.onemarkets.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.onemarkets.at
data.onemarkets.hu
data.onemarkets.hr
data.onemarkets.cz
data.onemarkets.eu
data.onemarkets.pl
data.onemarkets.ch
data.onemarkets.sk
data.onemarkets.si
data.structuredinvest.lu
data.onemarkets.de

Other certificates including the domain name onemarkets.de

(limited to 100 certificates)
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de

Certificate

The complete raw certificate details for data.onemarkets.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB0o39gUJ2/uXkm1rz0e
J9C/Dl2E5rAKyovzGjDtcrPjq2979G0gIIOBCq0SYpG8FvDAuTTdWHYdGTWa0Ol/
g/DeTGoewgXZE1I14ZhgTpp9+c+tOUcWU0VBtf7r2EgxZVA7J5STbLOwDnPPi432
Cl/rPiJN2EEast1CY/IVKJJeLXYgBgM2WfzSk89OziBLkxkScfyTyS72dMZm63eR
/Y70cTx6FDyKKfSzawkRWmmeN06K1sjLRX+9vweO2qyhYHqzZVw5x4DN6IxZm9RN
XgHl7fxxRJJ6xJDsIqOXtSri6z4Jr8l4fFmDKpB6aDlhdKXAqzPFv4gJZKX2KOSV
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 980482516158120080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Authentication CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-27 08:49:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 08:49:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Unicredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Applicativi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'data.onemarkets.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24757086940368446493934990569938254415160755750497881525046025423136855617512273732251633256069006939810476361896973594675197278962150961236319625192890357187792389554374377021884902568620239109370384291047645779864289114984527029937345358858533451763712434351734931747780561972188808445385615327136411548292257899340627180082025827173885388501198222712864747027973421280240204262634392973128818991567423800279931395089168758376692487814738219439225808896030770943467661381011549236564648775863259253356340296202824470102389185938834398008622989358586527892336130678143099594860692668334842194098375387590691450557921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp03.actalis.it/VA/AUTH-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5da13f12416b890f3c5c96745b1f396f9246bb8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aaaafdca8c1d4df12e83e106fcfa8eea0e23ae3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://portal.actalis.it/Repository/Policy/SSL/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.structuredinvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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