tortuga.cloud

- Axel Springer SE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:65:a3:f8:2f:16:9c:ec:63:07:44:2d:f7:3b:0d:a3 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Axel Springer SE

Organization: Axel Springer SE
State / Province: Berlin
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:65:a3:f8:2f:16:9c:ec:63:07:44:2d:f7:3b:0d:a3
Serial Number (int): 9832343649129260340016472382892608931
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1c:0d:64:28:54:c9:01:a1:1e:fe:60:3e:c2:c7:ff:81:d6:9b:c4:26
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fd:7a:77:9a:0d:b2:b4:fe:12:ad:db:a6:25:a9:2e:d8:8d:9a:8a:7d
Fingerprint (sha256): b5:31:56:e4:d0:a3:f1:74:7e:94:b9:e9:5d:8b:8b:1f:0c:52:1f:11:a7:e8:45:67:76:c7:34:c1:78:43:9c:23

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate tortuga.cloud

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tortuga.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tortuga.cloud
*.bz-berlin.de
*.fitbook.de
*.bz.de
*.stylebook.de
*.bz-jobs.de
*.techbook.de
*.mediaimpact.de
*.tortuga.cloud
*.ein-herz-fuer-kinder.de
*.axelspringer.com
*.travelbook.de
*.manschaftsbus.de
*.foodbarn.com

Other certificates including the domain name tortuga.cloud

(limited to 100 certificates)
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
*.tortuga.cloud
tortuga.cloud
books.tortuga.cloud
tortuga.cloud
*.tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
cmp.ekitchen.de
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
tortuga.cloud
books.tortuga.cloud
tortuga.cloud
tortuga.cloud
*.tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud
tortuga.cloud

Certificate

The complete raw certificate details for tortuga.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RZjYljsaF65ri8pKwlu
qTKXfG6q0YkJizARjapAlCGLHar2S7uBaHnU9Ge76PdRLKh0t0MFofJxNcEY8A9p
S9kzvHXkbp2ZIt+SA1pmLFJwx6lZE5bkVltGGI3TL3i7ldJu6hf1+i9JktJzbxuG
44wpG2sgcFISRxjamigahkKyPICghiCG1HXrs/jytTNCeIl1i516rHGu3JOpAkUB
smhZfggXyQdF+kxMDMEIXcfw7y3UwTTW+1WQjGsPRmiLmWD07Deuek2pD8//l1Rv
hv/y0AOCAedhOsES4QKwaafHOCBp12Kk91HxpZsZQZxHPLNUxqqwz/c022hwd/vb
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9832343649129260340016472382892608931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Axel Springer SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tortuga.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27909705439958822892329256848408920238155234172924644027157486629645661900271370975547654662907316199497758871409972632599635667059339059319809271730408035026219125033923214894116557816118120304874639361925541744566244178585943630837833760689807387587436964384088587179023403600780659794353114039776950413345213536789224395606693100954142254002085574835690901280432824476180410829156415656833190252750937649723033905791337360343738190314589379976568153625978466047830342573956765153969822425380840498732090754514879126173630905450828782428768131951826736342486451712275692789571319776958387997959824400476281834822511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c0d642854c901a11efe603ec2c7ff81d69bc426
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tortuga.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitbook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stylebook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bz-jobs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techbook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaimpact.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tortuga.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ein-herz-fuer-kinder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axelspringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelbook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manschaftsbus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodbarn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001642648a9840000040300463044022013d42aad871cb4ff0f4d191367f88a834bc47d24b3f35a049ba7a33c14df0d28022045e60b869af952ef327732ae810d0e7c552a380082f9ce71c91a9876e56baefb0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001642648aa1400000403004630440220564702828617058f68955c4d7685c6e1c3f6e5edb2cf0591f178ee194320cf90022019b04292542d52d2c5bb0fba4a40b67f59df2babcb2b22cc15b62fe464479b210076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001642648ab0f0000040300473045022007696fbc7421739146da1e6b200a90c1b5da84560a590fea4e2d6946a91eff43022100b146d6982c28a31f72f6c55aea8893ede75bd525cec6092d9ddf664ef98426ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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