it.nordakademie.de

- NORDAKADEMIE gAG -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:9c:89:b7:00:ba:70:a8:0b:4b:9f:94 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NORDAKADEMIE gAG

Organization: NORDAKADEMIE gAG
State / Province: Schleswig-Holstein
Locality: Elmshorn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:9c:89:b7:00:ba:70:a8:0b:4b:9f:94
Serial Number (int): 9783278072336376124679102356
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 59:d2:cd:cc:7f:43:4d:8e:0e:0c:8c:5d:69:27:5b:6b:66:21:9f:6d
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 04:3a:9e:b1:7b:d6:e9:3d:ba:55:3d:aa:b8:91:00:f0:28:2b:3f:13
Fingerprint (sha256): c9:87:1d:6b:76:63:5c:9d:e6:fa:29:d9:a4:42:33:fe:4d:7c:d9:55:23:c6:3d:00:ab:36:f2:86:2c:50:f3:95

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate it.nordakademie.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for it.nordakademie.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

it.nordakademie.de
lx46.nordakademie.de

Other certificates including the domain name nordakademie.de

(limited to 100 certificates)
gitlab.nordakademie.de
it.nordakademie.de
awt10.nordakademie.de
*.nordakademie.de
gitlab.nordakademie.de
owa.nordakademie.de
merkur.nordakademie.de
ac.nordakademie.de
lx29.nordakademie.de
redmine.nordakademie.de
auswahltest.nordakademie.de
vpn.dmz.nordakademie.de
www.nordakademie-gs.de
nordakademie.de
trinity.nordakademie.de
lx02.nordakademie.de
marketing.nordakademie.de
lx09.nordakademie.de
merkur.nordakademie.de
nordakademie.de
cis.nordakademie.de
vpn.nordakademie.intern
www.nordakademie.de
*.nordakademie.de
ws17.nordakademie.de
lx29.nordakademie.de
lx07.nordakademie.de
lx19.nordakademie.de
bara.nordakademie.de
gitlab2.nordakademie.de
autodiscover.nordakademie.de
lx07.nordakademie.de
redmine.nordakademie.de
owa.nordakademie.de
api.nordakademie.de
merkur.nordakademie.de
gauguin.nordakademie.de
gauguin.nordakademie.de
auswahltest.nordakademie.de
merkur.nordakademie.de
*.nordakademie.de
bara.nordakademie.de
renoir.nordakademie.de
ws27.nordakademie.de
nordakademie.de
it.nordakademie.de
fbwiki.nordakademie.de
lx28.nordakademie.de
cis.nordakademie.de
nordakademie.de
zensus.nordakademie.de
cis.nordakademie.de
vpn.dmz.nordakademie.de
lx23.nordakademie.de
support.nordakademie.de
ws01.nordakademie.de
vdi.nordakademie.de
cis.nordakademie.de
redmine.nordakademie.de
it.nordakademie.de
vdi.nordakademie.de
merkur.nordakademie.de
redmine.nordakademie.de
online.nordakademie.de
lx28.nordakademie.de
owa.nordakademie.de
owa.nordakademie.de
auswahltest.nordakademie.de
www.nordakademie.de
ws28.nordakademie.de
vdi.nordakademie.de
download.nordakademie.de
moodle.nordakademie.de
shop.nordakademie.de
fbwiki.nordakademie.de
lx09.nordakademie.de
crm.nordakademie.de
piwik.nordakademie.de
merkur.nordakademie.de
gitlab.nordakademie.de
shop.nordakademie.de
lx29.nordakademie.de
moodle2.nordakademie.de
www.nordakademie.de
shop.nordakademie.de
brauer.nordakademie.de
nordakademie.de
cis.nordakademie.de
www.nordakademie.de
moodle.nordakademie.de
vpn.dmz.nordakademie.de
nordakademie.de
owa.nordakademie.de
lx26.nordakademie.de
it.nordakademie.de
cis.nordakademie.de
lx18.nordakademie.de
vpn.dmz.nordakademie.de
vdi.nordakademie.de
awt10.nordakademie.de

Certificate

The complete raw certificate details for it.nordakademie.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ddKX8VUGbz4DRH8s5J
vXPMWe27sZsJDIVHXhUbSqKQJ7Gjf03QesqXQ+zOqjzubkbPI5y4vMsn0l02/Cg3
eNzHcsVj7FFMAiczXs9sOW05LkOiXD1kkBBIXqyIrZEoDwgix6C3BuYa9HZAIjvp
qSBOIJ/hoA3soqJ0o3j4rk1E2YtOa/OB69C72YdV2LhCah8YaR8y0ca4tPP38zlN
BkakDjoKVLyHDeiI60GkLuLJBfsMK42wVDakVxbaS+5UjkoLUb7sBd5+kUXgjYwS
IWtg3iayIh3ASoRTWq/RjzLYQJFAT+NO53jwtsoBbt7LpE9x6vaP3HCwH6Ue651y
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9783278072336376124679102356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 07:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 07:09:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Elmshorn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NORDAKADEMIE gAG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'it.nordakademie.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20193870182056667392445507296403723100207491756505763849210968249809953771093961125345507253816595498168312630567179868964161315217348992135344693695414881207458893141678698729012496653515373904883433248662019972603615925178597738417545971449426782952056121136737889981726759922195303554059323950730581002714056848567859855286620038862048846820204343503307932837165187641976536650902835173642133916648819419143363531768337846900709598737658347776845012087238903898632309518636733137517500942250800062520745212815107898703372321631179639720681463789046899843854914619595762843376183036656783984944022193085516848394887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59d2cdcc7f434d8e0e0c8c5d69275b6b66219f6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.nordakademie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lx46.nordakademie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (969 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (965 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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