coffeelink.schaerer.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 5a:ca:bd:71:5e:e4:68:72:08:a2:31:5e:fb:44:c0:2a was issued on by D-Trust GmbH.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF GmbH

Company registration number: CSM030790890
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:ca:bd:71:5e:e4:68:72:08:a2:31:5e:fb:44:c0:2a
Serial Number (int): 120683205943631637259629798525189275690
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 07:3b:9b:cb:d7:a8:23:a6:dc:e6:9b:70:6d:d4:bc:13:d3:7c:8f:1c
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 63:9b:e6:34:e7:5f:d9:11:6a:e4:a7:f2:af:bc:38:26:a7:04:7e:5f
Fingerprint (sha256): 87:6d:0d:09:06:f1:ad:0f:ac:39:93:f0:9a:fd:6c:87:c9:f1:bc:ed:8a:67:57:3a:c9:90:c1:e4:e3:24:ab:90

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate coffeelink.schaerer.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coffeelink.schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coffeelink2.schaerer.com
coffeelink.schaerer.com
admin.coffeelink.schaerer.com
developer.coffeelink.schaerer.com
api.coffeelink.schaerer.com
login.coffeelink.schaerer.com
coffeelinkng.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com

Certificate

The complete raw certificate details for coffeelink.schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120683205943631637259629798525189275690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-22 11:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 11:25:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM030790890'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coffeelink.schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717950135068254787704640447140054383602702035546505730675000355498601853438614586966363058579329857242240158897693880092206207759443118589929180060749437634124057975391469091125473366347088250992483566956750068487747524623722751196273791252702330516291334162797457210215154439013183410968246981042824518461116754699469099963604787763123714730857994047263099805754547937215593539687572429232088783831199405514169334157745895595944898970968269893210354654647842603932169205482693399823990821661406501626666139463298042954266659859258340357288855312101301405231179124576887479395639503739460228445124381112516856134962244027977232134658570073759769854649873615071716022366613443696862103551953997654003329460679337607497076319331928365980365416674159014201412048072013037789997504754536024204990113789778232713834811318716446972008054013185844711032838711750909360780411018167220909173702485420686488356834732085595911867459127793786834439071943463941753245942631114299655322992484302075073791584821461969405553556273239953387922311303480912559004176850283177158277224501311323139445242300616368465704953745530099834605198294758757230844376202092155490182859551975563512107823175326188057528222577450657644651911770105749748121400260521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeelink2.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeelink.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coffeelink.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.coffeelink.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.coffeelink.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.coffeelink.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeelinkng.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							073b9bcbd7a823a6dce69b706dd4bc13d37c8f1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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