www.omc.net

- OMCnet Internet Service GmbH -

Issued by GeoTrust Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 69:18:d5:30:dd:c5:e5:6d:e6:1f:2a:c0:2b:9b:71:a4 was issued on by GeoTrust Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

OMCnet Internet Service GmbH

Company registration number: HRB 4445 PI
Organization: OMCnet Internet Service GmbH
Organization unit: Server Administration
State / Province: Schleswig-Holstein
Locality: Quickborn
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 69:18:d5:30:dd:c5:e5:6d:e6:1f:2a:c0:2b:9b:71:a4
Serial Number (int): 139697878706853810014656021172514943396
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 17:b8:dc:aa:b1:53:22:19:41:95:7b:3c:81:ea:88:9b:49:c3:a2:8b

Fingerprint (sha1): 62:ea:6e:31:c4:63:85:a1:8f:b9:ea:6a:bb:fb:f3:35:b2:44:db:cc
Fingerprint (sha256): 93:ab:2b:9e:7d:20:7b:4b:d6:f9:41:33:63:bb:de:b6:52:b3:ff:61:d8:0e:6f:3d:5c:1c:73:58:cf:1b:38:2b

Issuing Certificate URL: http://gk.symcb.com/gk.crt

Revocation information

OCSP Server: http://gk.symcd.com
CRL Distribution Point: http://gk.symcb.com/gk.crl

Check the revocation status for certificate www.omc.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.omc.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dcp.omc.net
ocp.omc.net
webmail.omc.net
www.omc.net
omc.net

Other certificates including the domain name omc.net

(limited to 100 certificates)
webmail.omc.net
swg2.omc.net
sslp1.omc.net
sslp1.omc.net
*.omc.net
www.cluster1.igefa.omc.net
mx-cluster.omc-mail.de
www.cluster1.jpre.omc.net
mail-cluster.omc-mail.de
sslp1.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
mc01.omc.net
*.omc.net
sslp1.omc.net
www.cluster1.jpre.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
sslp1.omc.net
ftp.mvg.omc.net
mx-cluster.omc-mail.de
*.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
omc.net
www.cluster1.igefa.omc.net
*.omc.net
ocp.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.cluster1.jpre.omc.net
*.omc.net
www.cluster1.jpre.omc.net
omc.net
*.omc.net
www.cluster1.jpre.omc.net
www.cluster1.jpre.omc.net
www.omc.net
www.omc.net
*.omc.net
ftp.mvg.omc.net
*.omc.net
www.omc.net
sslp1.omc.net
www.cluster1.igefa.omc.net
www.cluster1.igefa.omc.net
sbund-www2.omc.net
ftp.mvg.omc.net
www.omc.net
www.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
webmail.omc.net
*.omc.net
m.testing.cinemaxx.omc.net
mx-cluster.omc-mail.de
sslp1.omc.net
m.staging.cinemaxx.omc.net
*.omc.net
www.omc.net
*.omc.net
www.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
mx-cluster.omc-mail.de
webmail.omc.net
sslp1.omc.net
vmm1.omc.net
www.omc.net

Certificate

The complete raw certificate details for www.omc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139697878706853810014656021172514943396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pinneberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 4445 PI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Quickborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OMCnet Internet Service GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Server Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.omc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890338254742488267384653765110945928500144479904855278974451716169076769937929793361076636994817500977095600960417027371177431012844895676744618951248510207320258006422499277466519369032925873737153425910984153716743829272765037690189827620461517738873926350145906455642485063413691653859182424105595099210403964792127912515022310479665806395575436648364016500606149912287460060848616216056177117468579082436056085089422209388970999596743859973320849635899861549406899689196408874201814093142523041456342177128040311932532627774860138753934949396383342047335794571517714941558781644776665027738032113916435413747796653531763506116646849777927501602613114287528022168322016624149071670181553757175930993987214297730891802945740746390768160313176710371166089416606564895062468559277473084302034100217569479811256924404396592425420223425424759764555919937138948070398127928316467301402163157464246703880188496789247524585501170602140214157815412616554551689859903334698577410783987182743794706112267402378364671027470738025694236369020676709307621044727424484877203996526524039899075143119040843311346593343233473238352944016850985865422588353834742818205576685069324470687700148945884699554589829949998256899925934158442204295307002067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcp.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocp.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17b8dcaab153221941957b3c81ea889b49c3a28b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f9c60d2bf000004030047304502207d450519075ee14589569c2e51e10aa0f5faa3890ac5e5e1d1be1c5f62d4f0b80221008d6ecbe20686b7d1b99dd6f32cfbdf1dbdf8f548e41a1800ca7126d96b9f55f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f9c60d2f70000040300463044022064d9d93e60ca5dedd174df865bb802d8433a0dba0406a87e15d1e5c77a5df47b02203c873549520e5dc255843586f795c4353389a3c53fed2cb50e03f553f041f9c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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