www.baloise-life.com

Issued by SwissSign Server Gold CA 2008 - G2

About this certificate


This digital certificate with serial number ec:b3:0d:75:c3:6b:18:b6:84:3d:28:06:b9:18:9a was issued on by SwissSign AG .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

Baloise Life (Liechtenstein) AG

Organization: Baloise Life (Liechtenstein) AG
Organization unit: Baloise Life AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

SwissSign AG

Organization: SwissSign AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): ec:b3:0d:75:c3:6b:18:b6:84:3d:28:06:b9:18:9a
Serial Number (int): 1229013676345378087784927012631156890
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: 68:11:2d:f0:3b:cd:47:f2:ba:1d:8b:69:9d:44:21:8f:c6:e0:22:70
AuthorityKeyId: 97:76:de:0a:34:e5:10:9a:40:c4:eb:d8:9d:5a:53:7b:21:cc:47:3e

Fingerprint (sha1): 2d:e4:e3:74:a2:fd:e3:97:de:83:21:b1:1f:1e:ce:66:50:8b:75:4e
Fingerprint (sha256): 2d:cc:c3:49:34:e6:ba:87:46:e3:92:ea:7d:98:33:a7:35:ce:3c:ec:57:fc:18:e1:58:88:fd:83:de:57:cb:b6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/9776DE0A34E5109A40C4EBD89D5A537B21CC473E

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E
CRL Distribution Point: http://crl.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E
CRL Distribution Point: ldap://directory.swisssign.net/CN=9776DE0A34E5109A40C4EBD89D5A537B21CC473E%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for the current certificate on www.baloise-life.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.baloise-life.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIQAOyzDXXDaxi2hD0oBrkYmjANBgkqhkiG9w0BAQUFADBR MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMSswKQYDVQQDEyJT d2lzc1NpZ24gU2VydmVyIEdvbGQgQ0EgMjAwOCAtIEcyMB4XDTEzMDgyNzA3MDYx NVoXDTE2MDgyNzA3MDYxNVowgccxCzAJBgNVBAYTAkNIMRQwEgYDVQQIEwtCYXNl bC1TdGFkdDEOMAwGA1UEBxMFQmFzZWwxKDAmBgNVBAoTH0JhbG9pc2UgTGlmZSAo TGllY2h0ZW5zdGVpbikgQUcxGDAWBgNVBAsTD0JhbG9pc2UgTGlmZSBBRzEdMBsG A1UEAxMUd3d3LmJhbG9pc2UtbGlmZS5jb20xLzAtBgkqhkiG9w0BCQEWIGdyb3Vw LmNoX2Ntc19zdXBwb3J0QGJhbG9pc2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAxevi+hSmkrDFh+NGBIhaSCfH736l4u8VB7aJvay2EJdWHY5W /LNiE9CBxcEQNmm3q1UcmIuv1/wvb33+RuoFLrhufYh7FcjlVZ0BYHocovBQk05K WGYN+p6z3yZQVpNrv7O0hxTWFmMSs5YyM55MKthA64MKUMveDlEyhE1ZaJGoA+Qy yuIAeKrgdUfHShYHC66gffSWQGRMK83TT5l7WiYIIPEikMKjWBQRibNB1fXjC0Q7 PGdoInvR0rAoqXrGMiGIrKY9reUOMO5T8xslN74kbfsg0jWKEIa4WrP4yvSGv9AZ krmv0f5A/d+l74VP/q2GVgxirOuj3pHgEETydQIDAQABo4IC0jCCAs4wHwYDVR0R BBgwFoIUd3d3LmJhbG9pc2UtbGlmZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUaBEt8DvNR/K6HYtp nUQhj8bgInAwHwYDVR0jBBgwFoAUl3beCjTlEJpAxOvYnVpTeyHMRz4wgf8GA1Ud HwSB9zCB9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3NpZ24ubmV0Lzk3NzZERTBB MzRFNTEwOUE0MEM0RUJEODlENUE1MzdCMjFDQzQ3M0UwgaiggaWggaKGgZ9sZGFw Oi8vZGlyZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049OTc3NkRFMEEzNEU1MTA5QTQw QzRFQkQ4OUQ1QTUzN0IyMUNDNDczRSUyQ089U3dpc3NTaWduJTJDQz1DSD9jZXJ0 aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJp YnV0aW9uUG9pbnQwYgYDVR0gBFswWTBXBglghXQBWQECAQUwSjBIBggrBgEFBQcC ARY8aHR0cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ24tR29s ZC1DUC1DUFMtUjUucGRmMIHVBggrBgEFBQcBAQSByDCBxTBkBggrBgEFBQcwAoZY aHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQv OTc3NkRFMEEzNEU1MTA5QTQwQzRFQkQ4OUQ1QTUzN0IyMUNDNDczRTBdBggrBgEF BQcwAYZRaHR0cDovL2dvbGQtc2VydmVyLWcyLm9jc3Auc3dpc3NzaWduLm5ldC85 Nzc2REUwQTM0RTUxMDlBNDBDNEVCRDg5RDVBNTM3QjIxQ0M0NzNFMA0GCSqGSIb3 DQEBBQUAA4IBAQC5vESG/xS8gXA5zvJSnZSJDKQz/d8pc6S677INSak37ni8FECw LPqOeS/cIw/OLw+Ugv3VZVh4dGxZlrN8xmwZ4k340fCaK+Gpw5OCVecXv1dW9FrI U8s1onjReghf3sSDBtktvxGj5mWzv1oi7zJSxl4iFTBtT5yvJFUCG5JpC1pMKeyX JgKo/JtZ/78q52pbRWcpIntdKrqlpGhG1eKPQwGLZB1afCY/L2Gmy3CN2U/ut7Rc 74lhmYyYJOIS+aY5VGVcJxzQhNcZPAIgGp+vBzE5qbxtmyZfj55IJSdOX0RzGijQ 09AsK56qw4xXT+/CtG2BWoTnMlSMpi+95pXP -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxevi+hSmkrDFh+NGBIha SCfH736l4u8VB7aJvay2EJdWHY5W/LNiE9CBxcEQNmm3q1UcmIuv1/wvb33+RuoF LrhufYh7FcjlVZ0BYHocovBQk05KWGYN+p6z3yZQVpNrv7O0hxTWFmMSs5YyM55M KthA64MKUMveDlEyhE1ZaJGoA+QyyuIAeKrgdUfHShYHC66gffSWQGRMK83TT5l7 WiYIIPEikMKjWBQRibNB1fXjC0Q7PGdoInvR0rAoqXrGMiGIrKY9reUOMO5T8xsl N74kbfsg0jWKEIa4WrP4yvSGv9AZkrmv0f5A/d+l74VP/q2GVgxirOuj3pHgEETy dQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1229013676345378087784927012631156890 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2008 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-27 07:06:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-27 07:06:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel-Stadt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baloise Life (Liechtenstein) AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baloise Life AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baloise-life.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24985266110098420152116725431953983995391752158924236743731177251442576396698594553184219797090735563186009019619234736356438614393818441014913673932085045866894531211815933926382907000938613522665899801928534958439691099206624834247393617266256665399135991612130925413973791883238364214535710600925669158464796982691013864730660941563224712588507943192301541742370573795628969513851708257444334438357789652405056279404184271409287975179313279590690973261499285266172570034190857953711755695963635432267987858091183444676708572550255350042813853361889264491344926393548715582052525688392012129259229692452632348914293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baloise-life.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 68112df03bcd47f2ba1d8b699d44218fc6e02270 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9776de0a34e5109a40c4ebd89d5a537b21cc473e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=9776DE0A34E5109A40C4EBD89D5A537B21CC473E%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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