www.karriere.land-oberoesterreich.gv.at

- Land Oberösterreich -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 02:f7:74:61:9a:36:a9:8b:d7:a1:4c:8c:5e:5b:94:21 was issued on by TERENA.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Land Oberösterreich

Company registration number: Government Entity
Organization: Land Oberösterreich
Organization unit: Abteilung Informationstechnologie
Locality: Linz
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f7:74:61:9a:36:a9:8b:d7:a1:4c:8c:5e:5b:94:21
Serial Number (int): 3943313808000495813781717298676732961
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a5:ac:e4:24:a7:de:a1:1f:cf:16:9b:a3:ad:f6:63:44:81:22:fc:52
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): 4e:b7:5f:73:00:bc:75:10:00:21:37:84:ee:10:2d:88:5a:38:de:9b
Fingerprint (sha256): d0:4b:78:cb:e0:a1:b6:38:86:59:dc:b9:b3:bd:92:4e:00:e5:74:eb:4f:77:39:9f:40:a1:7b:34:00:28:6a:09

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate www.karriere.land-oberoesterreich.gv.at

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.karriere.land-oberoesterreich.gv.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.karriere.land-oberoesterreich.gv.at
karriere.land-oberoesterreich.gv.at
www.karriere.xn--land-obersterreich-l3b.gv.at
karriere.xn--land-obersterreich-l3b.gv.at

Other certificates including the domain name land-oberoesterreich.gv.at

(limited to 100 certificates)
www.karriere.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
testwahl.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www1.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
testwahl.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
test.land-oberoesterreich.gv.at
www2.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
testwahl.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
wahl.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
www.karriere.land-oberoesterreich.gv.at
www.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www.land-oberoesterreich.gv.at
blackout.ooe.gv.at
www.doris.at
www.karriere.land-oberoesterreich.gv.at

Certificate

The complete raw certificate details for www.karriere.land-oberoesterreich.gv.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9OxO1+Rw/zHZjdesC+
G12+8Tz2Cbr6TGnrU9HqYpsHYJjs6yhO+XyKL8LdMjAhSoC+xv+yOoFHZaIo/dJg
yFci4Q4YMgJdxtGVehgim/A7Z4wszApKnQsalremszcET6wBbgqxvnAbwOYc6Z43
XR536hVOjTN7ubYqbfOrI3TkWeUtjlaXVK5X5hAKMObcV9qcRJFOuAGiYLRWj8xt
aI1ntwheqge+iRmw6ZO4fFOv1hu0oJw3uyJdXC/D9k9+J8XiquuTHEMXGpPn9EuR
K1kWH3RnhUErBwyXoeeYpO/P4j1TVaHAa958bVSlRg3/UqvPCs29l6Ck0VVhVRJT
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3943313808000495813781717298676732961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Linz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Land Oberösterreich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abteilung Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.karriere.land-oberoesterreich.gv.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22399067847803030207200247950735600675102152491384343577802847517578731081172432649965768079426762905102381669626923310299482574620843547777397935629462794838425889572937698057357194400723225624028899042599002572652395382353713293395714462137654074566853579826597712411098557288220913657943934145904898975210515794675210478984999226467091611510784394631509897111424845401730385778471355522030354443000669096006637156858677470224165753161174738933123140593142972712154611370888728411088057558200300909456323523460356395250434218726818990760758826227597528419162217665358629976160836125299068924050374322442418408018867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5ace424a7dea11fcf169ba3adf663448122fc52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karriere.land-oberoesterreich.gv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.land-oberoesterreich.gv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karriere.xn--land-obersterreich-l3b.gv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.xn--land-obersterreich-l3b.gv.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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