outlook.migroszh.ch

- Migros-Genossenschafts-Bund -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 1c:b6:65:ea:20:8e:d0:32:af:c1:02:83:42:24:18:83:21:77:1d:28 was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Migros-Genossenschafts-Bund

Organization: Migros-Genossenschafts-Bund
State / Province: Zürich
Locality: Zürich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:b6:65:ea:20:8e:d0:32:af:c1:02:83:42:24:18:83:21:77:1d:28
Serial Number (int): 163919355219429872150827438732254980124720962856
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 27:af:70:10:9b:12:f5:c2:49:cd:10:37:b5:08:f1:aa:24:47:a8:ce
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): d8:d8:91:52:0f:d9:ea:71:f9:b0:97:0c:cf:a6:eb:cd:2a:ed:2c:99
Fingerprint (sha256): b2:b1:5c:5a:f1:92:63:1d:3c:6b:d4:af:0a:96:22:d0:54:24:c9:22:b5:ee:61:a2:2b:b9:07:4c:e1:cd:4c:56

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate outlook.migroszh.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.migroszh.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.migroszh.ch
autodiscover.migroszh.ch
smtp.migroszh.ch
autodiscover.gmz.migros.ch
autodiscover.dab.migroszh.ch
mail1b.datacenter-migros.ch

Other certificates including the domain name migroszh.ch

(limited to 100 certificates)
portal.migroszh.ch
afag-sense-live.migroszh.ch
portal-t.migroszh.ch
k8s-dev-external.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
k8s-infra-internal.migroszh.ch
webdeploypzs.migroszh.ch
k8s-infra-internal.migroszh.ch
alarm2.migroszh.ch
citrix.migroszh.ch
portal-s.migroszh.ch
k8s-prod-external.migroszh.ch
autodiscover.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-staging-internal.migroszh.ch
alarm1.migroszh.ch
alarm2.migroszh.ch
portal-t.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
afag-sense-live.migroszh.ch
mail.datacenter-migros.ch
citrix.migroszh.ch
citrix.migroszh.ch
k8s-prod-internal.migroszh.ch
k8s-infra-external.migroszh.ch
k8s-staging-external.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-dev-internal.migroszh.ch
mail.datacenter-migros.ch
k8s-infra-external.migroszh.ch
alarm2.migroszh.ch
szc.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
gmzsbc.migros.cloud
awa.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
mail.datacenter-migros.ch
alarm1.migroszh.ch
outlook.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-prod-external.migroszh.ch
alarm1.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
portal-t.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-internal.migroszh.ch
citrix.migroszh.ch
k8s-staging-internal.migroszh.ch
outlook.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
gmzsbc.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-internal.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-staging-external.migroszh.ch
outlook.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
autodiscover.migroszh.ch
outlook.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
outlook.migroszh.ch
k8s-prod-internal.migroszh.ch
portal.migroszh.ch
anmeldung.feriencamp.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
afag-sense-live.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
portal.migroszh.ch
mail.datacenter-migros.ch
awa-t.deutscheinschaetzung.migroszh.ch
portal-t.migroszh.ch
autodiscover.migroszh.ch
k8s-staging-external.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
alarm2.migroszh.ch
k8s-prod-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
owa.migroszh.ch
k8s-dev-external.migroszh.ch
gmzsbc.migros.cloud
alarm2.migroszh.ch
k8s-staging-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch

Certificate

The complete raw certificate details for outlook.migroszh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BTS+KquFP+isOomZjpn
vZsWB3rIYquX+F1KDYwX5GLGyy1mG4I4PA6K4aHBPNNYVAPAzniKiojpwgiPrIsg
rQIvY+QdU6d6N6vsWjLe4Tgb2/f0HGKR0uWezMcvCts+tjzrj5fETeFFiliUbMuW
wvZEss0eKhZaJvHRUZOX2jfhZORSgmBXPdZezmj+AdXb+bBSpUVMCBb4ZLOcowWS
tNTOWvLOq6D09fjkqyO1hqC8/hLcmo4pg4fkIFlPYH4O9YtoXYzubLbrjCibgwQu
9GjQHIUq0gjWbNzwQolH61xTKwNBxHjkW+/sioVQGNi9Urfw/vzLq6uXEWE0c98r
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163919355219429872150827438732254980124720962856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 08:47:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 08:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Migros-Genossenschafts-Bund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'outlook.migroszh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29802508721800600124298771130821219524398690236645444980361698916940705702317496254176293186737906924511777562758402934137516759028600789941257634932640814311149251096066681377509224150804414662516006768366459362221602193980422579974807012792671989725216237743080230618315025166192242796018760855644978723574481350778317524293745808445451529357189683605045227621057552307907186950945384552360345374365247707770087782122989485752908122672064026426591284716916823517631702064276995370262400886665807993424033814339292206571804577810104345641007330444768336259162332727625057235239418529963787432297560059272409907145619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.migroszh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.migroszh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.migroszh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gmz.migros.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dab.migroszh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1b.datacenter-migros.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27af70109b12f5c249cd1037b508f1aa2447a8ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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