benefit-plus.cz

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number d7:6b:c5:91:21:5f:8d:d9 was issued on by GoDaddy.com, Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=benefit-plus.cz,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d7:6b:c5:91:21:5f:8d:d9
Serial Number (int): 15522717767783386585
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: d0:16:43:94:77:b3:96:89:b6:00:ab:b7:95:9d:d7:4b:b2:7d:38:a1
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 57:5d:80:ab:d4:bd:4f:2f:d8:11:54:22:ec:0b:73:46:61:e2:42:a0
Fingerprint (sha256): 76:74:ca:ad:66:e2:7d:7e:46:60:b8:cc:2c:2b:2b:af:78:2e:bb:f0:4a:2d:ae:06:60:6f:d4:89:c9:77:9e:f1

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1255.crl

Check the revocation status for certificate benefit-plus.cz

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benefit-plus.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benefit-plus.cz
www.benefit-plus.cz
adfsproxy.benefit-plus.eu
bmdataservice.benefit-plus.eu
benefitv3.sprinx.cz
www.benefitplus.sk
m.benefit-plus.eu
benefitplus.benefitplus.sk
app.kelnero.com
www.benefit-plus.eu
benefit-plus.eu
www.kelnero.com
adfsresource.benefit-plus.eu
kelnero.cz
adfsproxy.benefitv3.vychozi.cz
adfsresource.benefitv3.vychozi.cz
card.benefit-plus.cz
deloitte.benefit-plus.eu
bmdataservice.benefit-plus.cz
benefit-plus.pl
benefitplus.sprinx.cz
benefitplus.sk
bmcardservice.benefit-plus.eu
www.kelnero.cz
app.kelnero.cz
www.benefit-plus.pl
admin.kelnero.cz
kelnero.com

Other certificates including the domain name benefit-plus.cz

(limited to 100 certificates)
mail.benefit-plus.cz
inside.benefit-plus.eu
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefit-plus.cz
card.benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefitplus.sprinx.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefitplus.sprinx.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefitplus.sprinx.cz
benefit-plus.cz
benefitplus.sprinx.cz
bmdataservice.benefit-plus.cz

Certificate

The complete raw certificate details for benefit-plus.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8gjVt8lClIjenq5e0NV
St1u6PhPra0q5i+ZEtba/te+6XmQqgppvHjeMgy+nPW+GRgcfoWGvaLeg84pPMc9
KqWXRYFJzhZ1tdP6UWWILybKGkCP33CHvL8mrlmBfvYLHEKDNkEPj5qxjPOQrAVa
TAUE/lEwQ1vf+AVjKEQamWrj8Kq2Wf/RZ6BeoNkM7+Ynhdwjln17tldhXRaLzeAa
uqlebZ4oTh0PqL/qO+3VDkkp6ULSn5jN7YfWdfDm4cRXWoXKF7k3C3NPP8YUiKJv
wzHNb++MiljeVokIcgr/7f+vAEkNo41VBHGdAB0nIR1GObf7FGtrImvNasv9iQkM
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15522717767783386585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 13:25:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-24 13:25:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benefit-plus.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21685441897135288805545936075013023482396805279600688552245687026768950931646094352176237679379018278392809317140306790666251550405947786330120381094186420848315502327161836631558255280527495905453993537339502763534792429758632524887850688981090838012559616623876281558848917942143301101036944016940974789282160150386519271135714541642751198615362481124800028121437812326300481059103278966687166688133443831102578315143098571007899004202948392641554075557059627764545581946064565797224433458467574653913327244071707085023016925281688845483039482479350579709141071614808884667791120449510361118792956051394810557828141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1255.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (619 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmdataservice.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitv3.sprinx.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitplus.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitplus.benefitplus.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kelnero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelnero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsresource.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelnero.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy.benefitv3.vychozi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsresource.benefitv3.vychozi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deloitte.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmdataservice.benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitplus.sprinx.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitplus.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmcardservice.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelnero.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kelnero.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kelnero.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelnero.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d016439477b39689b600abb7959dd74bb27d38a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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