esnac01v.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 71:f9:48:6e:e1:a0:2a:6d:09:b1:fe:da:bb:7a:cc:f0:66:70:ac:63 was issued on by SwissSign AG.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 71:f9:48:6e:e1:a0:2a:6d:09:b1:fe:da:bb:7a:cc:f0:66:70:ac:63
Serial Number (int): 650675152473083366490622449656374402268911414371
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 26:e7:02:18:07:63:1d:7d:11:82:67:d2:2b:05:97:ae:cd:ee:e5:75
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): aa:d5:8c:86:fe:20:5d:e3:8c:0c:42:fa:5c:c4:a4:2e:89:bf:cd:e6
Fingerprint (sha256): a9:47:f2:43:cb:a6:0b:bc:8f:c0:3f:2c:d1:36:6d:39:d7:e1:67:47:f8:fe:ba:ac:0c:61:22:c4:b7:be:af:f3

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate esnac01v.funkemedien.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esnac01v.funkemedien.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esnac01v.funkemedien.de
esnac02v.funkemedien.de
bsnac01v.funkemedien.de
efnac01v.funke-medien.de
apnac03.funkemedien.de
apnac04.funkemedien.de
aisvxc03.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
*.sparknews-dev.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
portal.dz-hagen.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
noa-api-application-prod.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
backend.sparknews.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
scheduler.sparknews-dev.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de

Certificate

The complete raw certificate details for esnac01v.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 650675152473083366490622449656374402268911414371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-11 09:45:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 09:45:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esnac01v.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751224810332547193345842363703120864643219812441048879124128839021086954334494551169890345683013208649395687753020432243490339322981284122470530109722739486483433116047463171768028204619381035715821298779060013004323187516568936165907509343432177303313110471817477923816842367076682391391102628234407031057833133696839909496192214891327785042190492701745745294706968532140015817550804780260378521307024119100332615060966093078949715600638432056405436280685420714428228851794253098842642051290985672621681579266473671705370366879529924295507427038539582923167089860054383421690500171714523174750275664505351359147677557133478358083051547907357746684697002218092980135168893801311169592009228451433871549135669109882605538599540743282913880858195759755183542104335467001986325242589824911066885974671139753876158374067625414560001477552989306169430082804515459350123943805553729539081384034002693792309687651727363647986561618420049939463019820593634628768543936355796219266720406581096933401647267401627200663528372404282196156867715178061790968168942146327931971342913327780123453800848287259298753691452689556327023246433481427054593471878707585118591457677938913689322053461888115896842785545273116704963986841037501211155647647861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnac01v.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esnac02v.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsnac01v.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efnac01v.funke-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnac03.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnac04.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisvxc03.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26e7021807631d7d118267d22b0597aecdeee575
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded
<nil>
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38992168388690572110550866841732265535333500980830704091439587501395114408970
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00743f7828a8b6138e0b40b01a686d846bd804a8bf175589432c0cb1115d2455b18c1d0d3bc90af7bd302fa5392798738d3085fea46517a313579822f3ee3669f9f9870f59b2ae7cb02d7412a83d45dcdc0cd30bd5b03b0867850012e0c27e34c68dc1f7ec362d6a8d4b830f83a107aef23b51c5bbba3e47c6dbc6e4e82fd61a432fa4c2b822d5b71dd24c0f4b008aeff1331d80dc4d801e12a0f368b83518a8f8939e1d0a465af411dceddce0de4c3d667ee06c17d04c51e1f5d578f8d4018c77ab07550ba87f58b20950bd4175bfa3fede1c2fc39aa012828b1266eaf0a4e9066a089d6767e605be433e038cea1fbbbf4c63a4c3b9d09a4fc23ae7578b19ec70b9a1af52a651009ca1fdebdd7ac001e42d9d834725aecc791d442d5f0d2223b082c55be805b64fa2964d4cfa93ada1a43c9f9b08e7acf9cab203ad7ac71bc5df101c429236b90bbdb9cdc0534b522bddc55c877bc977420ee877a273fbb6bc270a086f0a3e8a7860b81686083df489f7382916bcc2352dac14e25385a147c297a35ec3983f54eebca55bb0579258643dc4415deccf7429f9c88fa1df212f0ac6dcb3908af84e730d3b1299d4e30165bc635c18a2ec10c80238a7b745f56751736e5a9ac29c94d23b49197dc149e3e70e40d43943bb1362ed9a0ec456409214e2b31f8c0d93c6d049aab06add0c6a74201a1b3a5e67b89bd7a3bb20d817ae1281