benefit-plus.cz

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 95:99:8e:2e:11:3f:b0:3d was issued on by GoDaddy.com, Inc..

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=benefit-plus.cz,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 95:99:8e:2e:11:3f:b0:3d
Serial Number (int): 10779803511597019197
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: d0:16:43:94:77:b3:96:89:b6:00:ab:b7:95:9d:d7:4b:b2:7d:38:a1
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 28:ee:e3:5f:23:44:44:27:17:5e:dc:de:d8:b5:f7:e1:5c:4b:88:15
Fingerprint (sha256): b5:28:ad:2f:c0:97:46:03:c5:2e:9b:52:64:11:90:78:42:b4:43:1f:94:bc:72:e2:f7:4e:b4:60:ab:6b:91:a8

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-2360.crl

Check the revocation status for certificate benefit-plus.cz

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benefit-plus.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benefit-plus.cz
www.benefit-plus.cz
adfsresource.benefitv3.vychozi.cz
adfsresource.benefit-plus.eu
benefit-plus.eu
app.benefit-plus.eu
bmcardservice.benefit-plus.eu
bmis.benefit-plus.eu
benefitplus.sprinx.cz
www.benefit-plus.eu
m.benefit-plus.eu
benefitv3.sprinx.cz
adfsproxy.benefit-plus.eu
inside.benefit-plus.eu
bmdataservice.benefit-plus.eu
paygate.benefit-plus.eu
bmdataservice.benefit-plus.cz
benefit-plus.pl
deloitte.benefit-plus.eu
www.benefit-plus.pl
adfsproxy.benefitv3.vychozi.cz

Other certificates including the domain name benefit-plus.cz

(limited to 100 certificates)
mail.benefit-plus.cz
inside.benefit-plus.eu
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
card.benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefitplus.sprinx.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.cz
benefitplus.sprinx.cz
benefit-plus.cz
benefit-plus.cz
benefit-plus.eu
benefitplus.sprinx.cz
benefit-plus.cz
benefitplus.sprinx.cz
bmdataservice.benefit-plus.cz

Certificate

The complete raw certificate details for benefit-plus.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8gjVt8lClIjenq5e0NV
St1u6PhPra0q5i+ZEtba/te+6XmQqgppvHjeMgy+nPW+GRgcfoWGvaLeg84pPMc9
KqWXRYFJzhZ1tdP6UWWILybKGkCP33CHvL8mrlmBfvYLHEKDNkEPj5qxjPOQrAVa
TAUE/lEwQ1vf+AVjKEQamWrj8Kq2Wf/RZ6BeoNkM7+Ynhdwjln17tldhXRaLzeAa
uqlebZ4oTh0PqL/qO+3VDkkp6ULSn5jN7YfWdfDm4cRXWoXKF7k3C3NPP8YUiKJv
wzHNb++MiljeVokIcgr/7f+vAEkNo41VBHGdAB0nIR1GObf7FGtrImvNasv9iQkM
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10779803511597019197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-07 07:39:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-24 13:25:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benefit-plus.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21685441897135288805545936075013023482396805279600688552245687026768950931646094352176237679379018278392809317140306790666251550405947786330120381094186420848315502327161836631558255280527495905453993537339502763534792429758632524887850688981090838012559616623876281558848917942143301101036944016940974789282160150386519271135714541642751198615362481124800028121437812326300481059103278966687166688133443831102578315143098571007899004202948392641554075557059627764545581946064565797224433458467574653913327244071707085023016925281688845483039482479350579709141071614808884667791120449510361118792956051394810557828141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-2360.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (516 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsresource.benefitv3.vychozi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsresource.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmcardservice.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmis.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitplus.sprinx.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitv3.sprinx.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmdataservice.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paygate.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmdataservice.benefit-plus.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefit-plus.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deloitte.benefit-plus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefit-plus.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy.benefitv3.vychozi.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d016439477b39689b600abb7959dd74bb27d38a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175020063c10000040300473045022100864a78d90a13ad5287541d70d5529f6400b2607ba2b186d256e83c1bb9f1799b02201088e76974fec56b94a4ce8bcd109b25d8142ed0be30b978d7a6af7a200710b80076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175020065f80000040300473045022031cf9a3f96bd84cca188db647d7b6e1ec7c05cecb43abf0f098c43ddc6c0fe2e022100a74a9552db1f2e0f07907bca66bfb253c699c5cd60731d2f7ed1eae47d6050b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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