*.hesge.ch
Issued by SwissSign Server Silver CA 2008 - G2
About this certificate
This digital certificate with serial number 35:de:f4:bf:55:ae:76:75:61:26:49:21:89:c6:9e was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
Certificate Subject
CN=*.hesge.ch,OU=Domain Validated Only
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 35:de:f4:bf:55:ae:76:75:61:26:49:21:89:c6:9eSerial Number (int): 279713819321229463130660712951170718
Serial Number lenght: 118 bits, 15 octets
SubjectKeyId: 54:e2:11:13:45:ac:84:78:a8:ac:cd:15:9c:7f:91:54:3e:97:91:b6
AuthorityKeyId: d3:44:6f:d9:fe:7a:fc:de:ac:1c:7a:a2:21:0d:64:fa:65:b0:d7:82
Fingerprint (sha1): c9:99:05:14:8a:f5:d0:28:21:aa:61:64:2e:4f:0c:b1:17:c4:ed:e8
Fingerprint (sha256): a4:67:80:fb:16:d6:9e:99:7b:04:30:bd:8e:ec:a3:b5:63:a9:46:ce:8b:50:4e:12:b7:59:e7:74:4e:70:51:6c
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782
Revocation information
OCSP Server: http://silver-server-g2.ocsp.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782CRL Distribution Point: http://crl.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782
CRL Distribution Point: ldap://directory.swisssign.net/CN=D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate *.hesge.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.hesge.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hesge.ch
*.hesge.ch
*.hesge.ch
Other certificates including the domain name hesge.ch
(limited to 100 certificates)
heds.prod.hesge.ch
goldorak.hesge.ch
*.hesge.ch
hepiacloud.hesge.ch
mail.hesge.ch
*.hesge.ch
hepiacloud.hesge.ch
goldorak.hesge.ch
hepiacloud.hesge.ch
m.hesge.ch
idp.hesge.ch
hepiacloud.hesge.ch
idp.hesge.ch
mail.ge.ch
*.hesge.ch
hepiacloud.hesge.ch
vdi.hesge.ch
hepiacloud.hesge.ch
hepiacloud.hesge.ch
candy.hesge.ch
idp.hesge.ch
goldorak.hesge.ch
m.hesge.ch
hepiacloud.hesge.ch
vpn.hesge.ch
*.hesge.ch
mail.ge.ch
m.hesge.ch
idp.hesge.ch
*.hesge.ch
hepiacloud.hesge.ch
*.hesge.ch
*.hesge.ch
m.hesge.ch
*.hesge.ch
vdi.hesge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
mpp.hesge.ch
m.hesge.ch
goldorak.hesge.ch
head-mdm.hesge.ch
hepiacloud.hesge.ch
*.hesge.ch
goldorak.hesge.ch
*.hesge.ch
hepiacloud.hesge.ch
mail.hesge.ch
*.hesge.ch
hepiacloud.hesge.ch
goldorak.hesge.ch
hepiacloud.hesge.ch
m.hesge.ch
idp.hesge.ch
hepiacloud.hesge.ch
idp.hesge.ch
mail.ge.ch
*.hesge.ch
hepiacloud.hesge.ch
vdi.hesge.ch
hepiacloud.hesge.ch
hepiacloud.hesge.ch
candy.hesge.ch
idp.hesge.ch
goldorak.hesge.ch
m.hesge.ch
hepiacloud.hesge.ch
vpn.hesge.ch
*.hesge.ch
mail.ge.ch
m.hesge.ch
idp.hesge.ch
*.hesge.ch
hepiacloud.hesge.ch
*.hesge.ch
*.hesge.ch
m.hesge.ch
*.hesge.ch
vdi.hesge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
mpp.hesge.ch
m.hesge.ch
goldorak.hesge.ch
head-mdm.hesge.ch
hepiacloud.hesge.ch
*.hesge.ch
Certificate
The complete raw certificate details for *.hesge.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIPNd70v1WudnVhJkkhicaeMA0GCSqGSIb3DQEBBQUAMFMx CzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxLTArBgNVBAMTJFN3 aXNzU2lnbiBTZXJ2ZXIgU2lsdmVyIENBIDIwMDggLSBHMjAeFw0xMTA4MTAxMzQ5 MTdaFw0xMzA4MTAxMzQ5MTdaMDUxHjAcBgNVBAsTFURvbWFpbiBWYWxpZGF0ZWQg T25seTETMBEGA1UEAxQKKi5oZXNnZS5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL8IWdv2MLvFzu3/4CLg8LESAEbyS8nDCyrOneGho2a6KSkALlhh RWm59bs56NFnojBJaoooTsKSMrxyA6l8HHYTJ0GtpycoZAKMQW8AH4TcIScWzPdL 9peYKyIhwT5Uwi8N/MgaLiXscO7oCcUxFqRglaCfVr44/SE75z4dn5NkzVdlEOBm CDHZDoSY+M7NKDkAljhyFllq1FRRoLeIzgHnGSWfCCFrJVYh9ozbMic98xmvhGdR pu5jx9uWJE5Kbo0xssvLGf0qrZ6VYUWKre4TjOt6xlEZePBwYpgXZIblIuL+WflT /sGChLq4Pq5OSiORucldjlQNcUvU8ZGnFC0CAwEAAaOCAtYwggLSMB8GA1UdEQQY MBaCCGhlc2dlLmNoggoqLmhlc2dlLmNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFFTiERNFrIR4qKzNFZx/ kVQ+l5G2MB8GA1UdIwQYMBaAFNNEb9n+evzerBx6oiENZPplsNeCMIH/BgNVHR8E gfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9EMzQ0NkZEOUZF N0FGQ0RFQUMxQzdBQTIyMTBENjRGQTY1QjBENzgyMIGooIGloIGihoGfbGRhcDov L2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUQzNDQ2RkQ5RkU3QUZDREVBQzFD N0FBMjIxMEQ2NEZBNjVCMEQ3ODIlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlm aWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1 dGlvblBvaW50MGQGA1UdIARdMFswWQYJYIV0AVkBAwEEMEwwSgYIKwYBBQUHAgEW Pmh0dHA6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduLVNpbHZl ci1DUC1DUFMtUjQucGRmMIHXBggrBgEFBQcBAQSByjCBxzBkBggrBgEFBQcwAoZY aHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQv RDM0NDZGRDlGRTdBRkNERUFDMUM3QUEyMjEwRDY0RkE2NUIwRDc4MjBfBggrBgEF BQcwAYZTaHR0cDovL3NpbHZlci1zZXJ2ZXItZzIub2NzcC5zd2lzc3NpZ24ubmV0 L0QzNDQ2RkQ5RkU3QUZDREVBQzFDN0FBMjIxMEQ2NEZBNjVCMEQ3ODIwDQYJKoZI hvcNAQEFBQADggEBACR3XXs+AYHAInCUH3o5KXbA+oUFmo4jH8L6tKYx9MrQ5MXP k2hklxn5aI20tDH7uFY/MNC0xW+lL7FB/LAOBI8eB6Y+qmJtSL0xhuSXEpoRbGmy /lpdkEh7BlcQwz1lFDyyUUaTPR0b75GTJegORggcNdvthrCl/JMOp+IJfZhg1/Lf 8gagCCqP8hKlGKzUqz2VNXnnQqCagCtlO5VVsIgJhMJQU2z6/Zn2J9LknjVf2vDN vNy0k/6zu8LEF8LcDLnNgFdE6XvXlLJGSMzHVEg9UShZs+bpCkRT+aq03ocHyVeP iLzeWhOxa3oef5AH8sF58JfUl4cagLL/04QTsAk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwhZ2/Ywu8XO7f/gIuDw sRIARvJLycMLKs6d4aGjZropKQAuWGFFabn1uzno0WeiMElqiihOwpIyvHIDqXwc dhMnQa2nJyhkAoxBbwAfhNwhJxbM90v2l5grIiHBPlTCLw38yBouJexw7ugJxTEW pGCVoJ9Wvjj9ITvnPh2fk2TNV2UQ4GYIMdkOhJj4zs0oOQCWOHIWWWrUVFGgt4jO AecZJZ8IIWslViH2jNsyJz3zGa+EZ1Gm7mPH25YkTkpujTGyy8sZ/SqtnpVhRYqt 7hOM63rGURl48HBimBdkhuUi4v5Z+VP+wYKEurg+rk5KI5G5yV2OVA1xS9TxkacU LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279713819321229463130660712951170718 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2008 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-10 13:49:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-10 13:49:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated Only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.hesge.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24115634286311081901811942464157437061101604574756870089786015405655004334054985276762682730263642736779667139370914537504035607131500522424340338336652310983435960706622621000485372489386823209130767644533706032588111030742766431291944779545813079838569073366276221309161402524983287830805003373275373721626867341518732548618075449219500687730625046968462085775912573790485411170324834686064003361068291849476454036225339224841191572763254071898395902146380889420501873227023171583962972882163617593339356646813305498484973757788474944473435690893412318867577311277578980112842535155755681165283172126328359794185261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesge.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hesge.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 54e2111345ac8478a8accd159c7f91543e9791b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d3446fd9fe7afcdeac1c7aa2210d64fa65b0d782 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS-R4.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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