bgpr3.sslclient.cpicloud.basf.com

- BASF Business Services GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5c:bc:50:b3:08:02:0d:f2:49:ac:5d:a5 was issued on by GlobalSign nv-sa.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:bc:50:b3:08:02:0d:f2:49:ac:5d:a5
Serial Number (int): 28700280049514154409677577637
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 13:3b:59:ff:c9:ef:fe:41:99:e2:c2:0a:9f:1c:c8:e5:94:9a:a9:aa
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 93:2d:8c:a9:5c:f6:5d:28:a3:6a:6a:4e:1f:84:26:07:9c:69:3c:28
Fingerprint (sha256): 90:5c:6a:0f:5b:27:bf:42:0d:e1:06:0d:cc:46:96:82:66:91:8c:a3:75:1d:5f:45:7b:4f:4f:3f:bb:34:fb:51

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate bgpr3.sslclient.cpicloud.basf.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bgpr3.sslclient.cpicloud.basf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bgpr3.sslclient.cpicloud.basf.com
bgpa00696.rz-c007-j650.basf-ag.de
bgpa00695.rz-c007-j650.basf-ag.de
bgpa00694.rz-c007-j650.basf-ag.de
bgpr3.basf.net
bgpa00698.rz-c007-j650.basf-ag.de
bgpa00697.rz-c007-j650.basf-ag.de
bgpr3.bcs.de
bgpci.rz-c007-j650.basf-ag.de

Other certificates including the domain name basf.com

(limited to 100 certificates)
oase-connect.basf.com
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
agserv-qa.agqa.basf.com
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
mcyclo.com
api.ebiz-dev.basf.com
zrm.basf.com
www.omacor.org
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
*.commerce.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net

Certificate

The complete raw certificate details for bgpr3.sslclient.cpicloud.basf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28700280049514154409677577637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 12:46:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 12:46:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bgpr3.sslclient.cpicloud.basf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594566863760587316974372881883735017009010906012800512190156793652510384044985509726830333834269914579922947410904793157420793107927629575103470694672898472625668394299099182239735539181996274801950422574413115108154691539995380104100072298129131297358573660772471368289125699077135633946100628283803210226488811330242812760054365488319205330043523292509876937129845873376413212929296151580210090985064571616312485908848411955522780638561962599219661114632161006729071373970607544883524853367504136221577293232373430826960633669654866926330722389754306200662055222340760243309146706177536113801979541610554939677331284070442781218853908569254835187121818620306047377363576084694695343000460376889244372507674735091518386944297010890221912913310634851738565658398588487938927066405167123201233762634178161552007651567788669671453367183439617827958040637983361763282504876727231597246705770707354458186046433052316137736505454633888733763626160564559152237607095322459814076826060138373198279241214698500765678430378719528759031225596207633422563186684030589799904435878273431710567426453732081582203292019866748167405897867690502680143383158498478558349285912023792451663218196822395346916800363817130143102432098852645104469721206577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (275 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpr3.sslclient.cpicloud.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpa00696.rz-c007-j650.basf-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpa00695.rz-c007-j650.basf-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpa00694.rz-c007-j650.basf-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpr3.basf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpa00698.rz-c007-j650.basf-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpa00697.rz-c007-j650.basf-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpr3.bcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgpci.rz-c007-j650.basf-ag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							133b59ffc9effe4199e2c20a9f1cc8e5949aa9aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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