www.generali.ro

- Generali Romania Asigurare Reasigurare S.A. -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 0b:94:ff:09:3d:9d:57:2d:6b:f5:bc:d2:46:16:82:ee was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Generali Romania Asigurare Reasigurare S.A.

Company registration number: J40/17484/2007
Organization: Generali Romania Asigurare Reasigurare S.A.
Locality: București
Country: RO

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:94:ff:09:3d:9d:57:2d:6b:f5:bc:d2:46:16:82:ee
Serial Number (int): 15395140635268421531849906502143214318
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:58:e7:8c:e4:55:ea:28:20:f7:7b:eb:1a:31:8f:c6:4c:23:c7:46
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 39:e2:97:c4:99:a1:78:ba:f8:62:c1:5a:d5:34:ac:81:69:f0:72:b1
Fingerprint (sha256): 80:10:55:7c:1c:5f:3a:0a:29:3d:99:e9:f0:aa:be:70:ae:d2:a0:5d:fb:6e:34:68:17:bf:3d:fd:2b:c1:7a:23

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate www.generali.ro

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.generali.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.generali.ro
www2.generali.ro
api.generali.ro
api2.generali.ro
generali.ro

Other certificates including the domain name generali.ro

(limited to 100 certificates)
*.generali.ro
aplicatiigenerali.ro
image.client.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
generali.sincron.biz
aplicatiigenerali.ro
aplicatiigenerali.ro
clients.etravel.generali.ro
imperva.com
aplicatiigenerali.ro
*.generali.ro
image.client.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
image.client.generali.ro
www.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
san-3-s50.tlsprovisioning.exacttarget.com
aplicatiigenerali.ro
*.generali.ro
pensiamea.generali.ro
*.generali.ro
sip.generali.ro
*.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
evp.generali.ro
image.client.generali.ro
imperva.com
www.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
image.client.generali.ro
aplicatiigenerali.ro
clients.etravel.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
cupons.generali.ro
clients.etravel.generali.ro
cariere.generali.ro
aplicatiigenerali.ro
www.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
cariere.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
cariere.generali.ro
rai.generali.ro
partners.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
aplicatiigenerali.ro
image.client.generali.ro
*.generali.ro
image.client.generali.ro
aplicatiigenerali.ro
image.client.generali.ro
aplicatiigenerali.ro
cariere.generali.ro
imperva.com
aplicatiigenerali.ro
cariere.generali.ro
aplicatiigenerali.ro
agent.generali.ro
imperva.com
aplicatiigenerali.ro
clients.etravel.generali.ro
imperva.com
aplicatiigenerali.ro
aplicatiigenerali.ro
partners.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
partners.generali.ro
clients.etravel.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
www.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
evp.generali.ro
www.generali.ro
www.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
etravel.generali.ro
aplicatiigenerali.ro
aplicatiigenerali.ro
consultant.generali.ro
cariere.generali.ro
aplicatiigenerali.ro
imperva.com
aplicatiigenerali.ro
aplicatiigenerali.ro
san-3-s50.tlsprovisioning.exacttarget.com
aplicatiigenerali.ro

Certificate

The complete raw certificate details for www.generali.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lWPozYkftfj+9Em6Wig
EnuILWSgGkboQroDfDvJePA48i9Pdzt9XZLUxQ+l9H+ySYiqHDhVG8AJrVidVGwq
OvGyTlCWET5H33jh8/rYKhl0KRYH6f79+7T+FBEE0uAKMq78gf9AeksMBNetnU2Z
921gC9GSeS0QfT4DkK2Hy+JxacPr/0gKFNgLBPwgwwqUZJQnAWnmSoQC/yDeAWoY
L8XWbLE+UmToN/LY0ukhlcRuRgcTGqu1kM3IglMUIuEptdITPrdF+S4df2PeN2HM
lXADsZwhOamB/i8SFg+c2XoUO8npgfuIPTciRY77rlL/4u9e08s6t/FSb+MxRHpr
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15395140635268421531849906502143214318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'J40/17484/2007'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'București'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Generali Romania Asigurare Reasigurare S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.generali.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27057189005843525853107148585880193962519522763667876967330511599035438752725473078248502212999465393298307602532272771237422546277310120476245487889109241764034209167078700014215718565448941757325762151761144803802230234239771191733114452703171842574418283564457512104916836232261413898008313434518853071565005507732567131520098088266788380104783181187080116270483052855411294320975772064927019164664984650063717854412924837285549458944436772186862754949827237716267266102678696810048063632475558831340455362194847825533790572101245004847673296271732948699863968678508607526302567441027580462304600936987263468464959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3958e78ce455ea2820f77beb1a318fc64c23c746
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generali.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.generali.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.generali.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.generali.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generali.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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