*.schaerer.com

- WMF Group GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 15:d9:7e:f5:37:33:b4:63:e6:fa:df:68:e3:5c:36:12 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF Group GmbH

Company registration number: CSM017624057
Organization: WMF Group GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 15:d9:7e:f5:37:33:b4:63:e6:fa:df:68:e3:5c:36:12
Serial Number (int): 29043091341379349657419959456900068882
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 3c:7c:71:27:c3:08:0d:0c:73:e9:50:af:5e:ab:34:7b:cf:3b:27:a0
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 81:c3:68:10:bc:1e:21:83:b8:23:69:0e:14:88:bf:c7:be:e5:d3:66
Fingerprint (sha256): cb:2e:e8:3d:86:d0:7b:4d:9e:50:45:a1:33:7c:ff:b9:3b:b0:53:e0:1d:b8:aa:32:3f:57:43:f6:b5:94:08:4c

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.schaerer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29043091341379349657419959456900068882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 09:27:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-29 09:27:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM017624057'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF Group GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849208612690871946878482902986362613278210594573406747348534132433518392442877252589732727552187927870257235108564296392200580205918477986589008534453631414618236888473623811187909388098114704555114487163844602614327050596225525534175368399484762570002741856812994307092530489313960353181246292145400485772756707101438446112670419367758555886748201062173052072966435302349172722564848275950921169148159968175131488740168826083517569736867252234287233503668805354222523257794717550345782708291942851199276907978241660095061775531212272839667661375243703326034470750703796181726063622428953781962148666530710546393830904698519949978809279372838422991270823455822967917647140191931088304178565691191887476489225562497780387810016487266614314294435487427689504427961757722464613593796770023009491926523717855735666644788907345212202858629860628392327164332098118581930345171145345406260210362056902270901970195652095329441677385347167107794806765397605443126584515540403866498105238873455050271163388336179478905096480803686690035043066646101897508820218705460248348473355445231020332373499981299050661430270601607078093853561384162986732209473839661112002188277236455840117904773957327397709337547281693288195985652276577917647638382121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1327 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1323 bytes)
							05290077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000016ea1e2db0b00000403004830460221008f252840408f6bb75a41606f8113858b6c904d44ca1c679b92cd17c7674b5c020221008e261d69732f63ed07160f05e882becee6d6fe0ec723162a659c588146967e0f007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ea1e2d8310000040300483046022100d39e3074c0080fe6fc84550fb93c2ca797509964c485b8ddcd0330e7eae55a15022100f5c68e3efb728d80a7a5fb1b5137c36a8a97b799e97d3fa6716e89560e598dc10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016ea1e2d9730000040300473045022044e86943c605f5e3bc7355e44feea4325369cbe478e7b9f14b89e5d1b5dca4650221008d18884281fa17b1e9d9c5502e52a871980f59dc89ecf426da3ea2bb92d01a170075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016ea1e2d7880000040300463044022010fdb6cd28349dae23bfb466902f3e267d8697bcb24ce42b5def8e1bb99b2cbf022052c7ae3d1e4f634ba5f8ad4524f21c936c90753514a00641d851dbb0ad6585be0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ea1e2d8950000040300473045022100a32e71de2f60aa8117a19a0af7de4774c364826890e5f5c369cfd91a9f6d9f46022056fb6869a1c759532a28947243fd920412ed20e278287c1efd40c9258a5a54a9007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016ea1e2d93a0000040300473045022100ee8d91445004d2e47f05d1db0637eef19541bd912db98ddc1bb853d5cd9e848b02207bd1609509f2755af316f253cdbb0446f19dbd22c45968f150a18bc6eeacca2e0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016ea1e2dadd00000403004730450220773986b9171bafbabb14a2b0be8cbc84e94201cf226883e39d498ad8b3633f9a022100b45d3d726b3fd8fc835dd05b984b9742f1d0d75986ee6771306152cba0ceb419007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000016ea1e2dbe90000040300473045022100ed470f534dc11ee0a4939c56e2b5a7abb27d19ed7a1d400f820f7c1b10c166720220292bbac05616eb2a263beb9b0c43605ed85814880b8ec8da757f7c60e3aa62e6007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ea1e2dad30000040300463044022015ae2fd3f67fb517a3d7d32b3dccf7d9611e9d32b132d9cda4c2e5b1526b5d61022067c07e6a796f5e0cab1b9285deb245d687c6184cebc56cdfdfaf934c15ebe9d4007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ea1e2db6900000403004730450220076714c6aadea66d54bbc25837aba8785668b5596f44d73a6002d29e55fec40e022100cab5adbf37a27c82d1e0ad5495c5e828093a1f13f8f2a7885ab14d0add2e77440077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016ea1e2dbcb000004030048304602210099f9dc620386422894f769d9dd72189e55f5d4f73d887f4f2183800989e0442c022100c9060279425557a4a472f68dad9c53887b418c8eeadfbdd5b27f35194eb98973
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c7c7127c3080d0c73e950af5eab347bcf3b27a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007e17d380a0732f82a42379e7b1d13a705de4316359dc4a8e19133a69f9f3fcaeb5a85ba7ebf7067c0414982e7ba364fc0c3e1ab27652ec26bea930531247f93ed404dfcdd111c0ca9ce92f6bb34a8fb68827d86cf62e34ed8b8b55f7f9c3a34896bf122e92299bef249900927d15ac6f6dae684dcd33eef140404b274806e1a7ebcc310b0433073d3ceb8fab64861228b3b31612877b2ac2cfe02a45ebc1739f6cb5a2ed6c8ad29cbb38ed6282cb8828b3c26ef222744a030d9f50f67fbbb711cf1198ca75fab63c903de486d2d3fb5c6394b46066b87feed5ecb065d06930c3226ffeb122259ff800c645bb018edefe386b515615c7f7de694ddf692e7b4e0e