bewerber.bitmarck.de

- Bitmarck Holding GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:56:8f:49:63:bf:e8:b0:d8:e3:ca:04:14:54:25:46 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bitmarck Holding GmbH

Organization: Bitmarck Holding GmbH
State / Province: Nordrhein Westfalen
Locality: Essen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:56:8f:49:63:bf:e8:b0:d8:e3:ca:04:14:54:25:46
Serial Number (int): 12412495690998443417494250969946662214
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:65:6b:f4:17:15:c4:23:44:11:6c:bb:55:88:fe:e6:e8:8b:59:9b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 15:37:a6:4f:bb:5d:61:e2:90:78:73:f4:98:fe:97:f3:d1:2a:79:59
Fingerprint (sha256): 7d:2e:41:6c:62:95:6f:7b:c4:c7:61:03:c9:6a:9d:0f:00:a5:83:25:8d:3f:b6:46:d1:7c:e4:04:00:46:86:c8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bewerber.bitmarck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bewerber.bitmarck.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bewerber.bitmarck.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
*.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
siplync.bitmarck.de
lima.bitmarck.de
sts.bitmarck.de
apigwtu.bitmarck.de
vcsebravo.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
tango.bitmarck.de

Certificate

The complete raw certificate details for bewerber.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3LjRlNfnTngeSgPVTHug
EURjb6oHrJPjRihwdPv/RClo2NSewsx6oKiS3w+rRjBsnhGtqsklH2h1+BPQEMSb
HpG0UdbgvAyvdcoYfXXeJH2VbO3ji4sI5Eu1mEZpusMkglCPOqxcwGj4acGz6BJ6
y2mG7LBXva3DhtGbAwP060EhpVR+cTbxw4NkPzX6fonRyjoh5Nl3neMaEKhLieHa
zgQNAwxNiM8JWwJbxrxftDLf4RnUIKcaDgKeaf11bG5o7G2iCVS1WiUdfKiP+CxI
COW3AwVqapIN2Xlt0jHjhAJbtZs5bAK7Ggz7AvkHMZB+VLsb4LYA96paW/qbdL25
/BLWqVDI1OKd5hxoeya4f7hH5DZUkfN9TgSodEA4nWJCrsj88JCmBDHU4qwyjS0v
awzS7RPcECViEe3DhD091HUEfeqIInY5xdgL1y0OqEz7AT/Ypn4lvk6uxUXp83hN
fgUJvevPFDLVvsODsd7aC1UOYGCaCQC9j9BrncGLoD9GVeCvnViOOEqGpSzoRyL5
WbXVT3NuauHr05o/WyQi8H153ikjnwAhFkvO3jOXJcI9dYkQxifrPoNXeYrQc04m
sXSFLe30wfdqwhTdD5wWkgkrYgDvsivj8l02COVcSVEN/31kQV64sF2tuw4gWKwS
UjGmTSNxRvvXF6uuCbSmy+kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12412495690998443417494250969946662214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bitmarck Holding GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bewerber.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900466985671437075347759052135930451827996555364382791922013149148565660785451864225305994024392795481147551621708221711619965513392151098431066395918346157701310676607021229797305548283473995877101412679193310129756749079466782166700225417902479636238595781306615864651247206164950422312872912047053154723605244885918730812024339008721075486887470808944351581947653843119357895200732970386454709951377123403397902850817146245828639356848070623721794023020891148967502062048066226916077762473053435894919095774931171491500303977149843457458729561957820443690500789046500157602514895682011550011347491119431172039977497280031713806569016458294981537046787965678538832773220950138698614285497301650556416094356232979534704158719344514957730140000557692187084560895954347571091785345894686386046456446628232264759406774712532890729553406013094981586697287899751915121828181931564143125916817121698277634812931404035138478103984066912803973596423681051387017571518916005188938371350945773553943133523516246683069145580189715427085295952616091263056406887136195532595458960566419046689917309975453169773242960325130286473464675064412151049102075147193373009374470592066549844180151589246519574398960089334194809810956397812841504511020009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d656bf41715c42344116cbb5588fee6e88b599b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewerber.bitmarck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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