Itsslvpn.freudenberg-it.com

- Freudenberg IT GmbH & Co. KG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:40:2b:4a:b1:ac:6a:ab:ca:9f:38:45:43:07:fc:99 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Freudenberg IT GmbH & Co. KG

Organization: Freudenberg IT GmbH & Co. KG
Organization unit: CIT
State / Province: Baden-Wuerttemberg
Locality: Weinheim
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:2b:4a:b1:ac:6a:ab:ca:9f:38:45:43:07:fc:99
Serial Number (int): 5650097043570161256423056216397708441
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b3:bc:36:9a:58:a3:d0:49:b6:62:a3:01:ec:bf:f2:22:31:75:e0:55
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 82:82:07:11:45:5c:42:e2:c3:bf:03:91:8b:44:dd:88:5a:0a:09:e1
Fingerprint (sha256): c1:45:6e:af:ae:7a:7d:40:9b:25:63:c8:72:a6:cc:aa:68:a2:24:a6:95:e1:6b:d5:e6:ae:f8:45:1e:9e:b5:f2

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate Itsslvpn.freudenberg-it.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Itsslvpn.freudenberg-it.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Itsslvpn.freudenberg-it.com
itsslvpnclu01-1.freudenberg-it.com
itsslvpnclu01-2.freudenberg-it.com

Other certificates including the domain name freudenberg-it.com

(limited to 100 certificates)
Webmail.whm.freudenberg-it.com
infomail.freudenberg-it.com
*.freudenberg-it.com
74.123.36.235
support.freudenberg-it.com
webmail.us.freudenberg-it.com
infomail.freudenberg-it.com
mdm.freudenberg-it.com
webmail.cn.freudenberg-it.com
www.freudenberg-it.com
fcm.freudenberg-it.com
sip.freudenberg.com
itsslvpn.freudenberg-it.com
sip.freudenberg.com
info.freudenberg-it.com
panopa-websap.freudenberg-it.com
webmail.cn.freudenberg-it.com
fitcustomer.freudenberg-it.com
downloads.freudenberg-it.com
webmail.cn.freudenberg-it.com
itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
pool2.freudenberg.com
info.freudenberg-it.com
fit-as-ssl-vpn.freudenberg-it.com
www.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
Itsslvpn.freudenberg-it.com
webmail.us.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
www.var.freudenberg-it.com
www.freudenberg-it.com
*.freudenberg-it.com
info.freudenberg-it.com
servicedesk-qa.freudenberg-it.com
itsslvpn.freudenberg-it.com
servicedesk.freudenberg-it.com
www.freudenberg-it.com
pool2.freudenberg.com
integrationtest.freudenberg-it.com
sip.freudenberg.com
*.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
infomail.freudenberg-it.com
webmail.whm.freudenberg-it.com
*.freudenberg-it.com
itwlc240129-29.freudenberg-it.com
downloads.freudenberg-it.com
infomail.freudenberg-it.com
webmail.cn.freudenberg-it.com
info.freudenberg-it.com
webmail.whm.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
panopa-websap.freudenberg-it.com
downloads.freudenberg-it.com
crossgate.freudenberg-it.com
fcm.freudenberg-it.com
webmail.cn.freudenberg-it.com
beapartoffit.freudenberg-it.com
*.freudenberg-it.com
www.freudenberg-it.com
aw.freudenberg-it.com
fitcustomer.freudenberg-it.com
fitdemoic1.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
info.freudenberg-it.com
integration.freudenberg-it.com
servicedesk-interface.freudenberg-it.com
info.freudenberg-it.com
businesscards.freudenberg-it.com
downloads.freudenberg-it.com
boextern.freudenberg-it.com
Webmail.whm.freudenberg-it.com
PoolEU1.freudenberg.com
*.freudenberg-it.com
pool1.freudenberg.com
mail.freudenberg-it.com
itsslvpn.freudenberg-it.com
info.freudenberg-it.com
beapartoffit.freudenberg-it.com
info.freudenberg-it.com
www.freudenberg-it.com
sip.freudenberg.com
PoolEU1.freudenberg.com
mob-erp-m4s.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
infomail.freudenberg-it.com
downloads.freudenberg-it.com
webmail.us.freudenberg-it.com
fitcustomer.freudenberg-it.com
fcm.freudenberg-it.com
downloads.freudenberg-it.com
id.freudenberg-it.com
saperion-asp.freudenberg-it.com
downloads.freudenberg-it.com
info.freudenberg-it.com

Certificate

The complete raw certificate details for Itsslvpn.freudenberg-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R23XFcAJ1oBQ97lV54o
GobeI9mSrLYlceIv+cWH78PL4Ba+hmhpuJLCZbTRTktwDxfFG8f8eE92Okl+vd7Q
icpQi3tecg814p2Ilt02IJ+5AHst68pxsI62d1ThA0GneMxlXwXRBBX+sxuKPDhv
d3ehlSwZ5NLz3hBlBpLhAfowxGBe1+659NPVi6L0AEvCV6e1+SLpo65Me2gtpHbJ
rgi+GEuIlmFW8jeK//TTMyiQIxZRTbezeb21VVS5g24l7vptfQ6/42aXipK9/y9b
UNd5kEGqff5yYTjoFE2s59zI+/eI9lgGgDhcPYym8xAOr4y6Mea01Qh4YcJFeff1
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5650097043570161256423056216397708441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Weinheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freudenberg IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Itsslvpn.freudenberg-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28923225467603889507718127348450308063483615474375068434746182262312075228856792500519648501679322148113589625250456155782225014989708487309405362858479722744518177735638648839312751538365413057155401829837560800464666672363438368466908693936791689985084691586027146694975410178423137868649448126376129338074456698473311663649485058042684237712372925672094476123782647876789635750132985181913608883663124983377749927483455965328707579619638269906477834802313601396140599159679475085465388097737151463673017483122473946605621292257215356433470307714892602593493625348655941207638770178919632764823187818701179202303291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3bc369a58a3d049b662a301ecbff2223175e055
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Itsslvpn.freudenberg-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsslvpnclu01-1.freudenberg-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsslvpnclu01-2.freudenberg-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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