nemetschek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:1d:46:48:7e:f4:51:a5:b9:f7:be:b5:e3:ee:11:c3:af was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nemetschek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:1d:46:48:7e:f4:51:a5:b9:f7:be:b5:e3:ee:11:c3:af
Serial Number (int): 273625935547484237610527735190444672402351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:fe:f5:b4:29:be:3c:07:96:24:1c:71:04:86:09:51:82:9f:fc:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:54:43:e5:de:3d:27:02:90:6e:3a:26:9c:76:bc:eb:5f:02:c0:81
Fingerprint (sha256): d4:01:0e:43:b6:50:a8:49:b8:ef:39:2e:91:cb:cb:c8:9c:61:28:16:21:5f:39:d2:62:b6:33:75:cd:14:35:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nemetschek.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nemetschek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nemetschek.com
nemetschek.se
srv-a-io.c-933.maxcluster.net
www.nemetschek.com
www.nemetschek.se

Other certificates including the domain name nemetschek.com

(limited to 100 certificates)
intranet.nemetschek.com
nemetschek.com
www.nemetschek.com
site.nemetschek.com
intranet.nemetschek.com
*.nemetschek.com
intranet.nemetschek.com
nemetschek.com
nemo.nemetschek.com
nemetschek.com
mucconnect.nemetschek.com
matomo.nemetschek.com
nemetschek.com
nemetschek.com
one.nemetschek.com
site.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
www.nemetschek.com
one.nemetschek.com
ir.nemetschek.com
inside.nemetschek.com
*.nemetschek.com
demucexpe01.nemetschek.com
nemetschek.com
docuware.nemetschek.com
nemetschek.com
intranet.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
nrldev.nemetschek.com
mucconnect.nemetschek.com
nemetschek.com
*.nemetschek.com
inside.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
mucconnect.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
expe-muc-01.nemetschek.com
nemetschek.com
nemetschek.com
nemetschek.com
portal.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
nemetschek.com
inside.nemetschek.com
demucexpe01.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
docuware.nemetschek.com
matomo.nemetschek.com
nemetschek.com
inside.nemetschek.com
ir.nemetschek.com
one.nemetschek.com
intranet.nemetschek.com
nemetschek.com
nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
news.nemetschek.com
matomo.nemetschek.com
site.nemetschek.com
piwik.one.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
nemetschek.com
inside.nemetschek.com
mucconnect.nemetschek.com
nemetschek.com
piwik.one.nemetschek.com
matomo.nemetschek.com
inside.nemetschek.com
nemetschek.com
ir.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
nemetschek.com
intranet.nemetschek.com
inside.nemetschek.com
*.nemetschek.com
intranet.nemetschek.com
nemetschek.com

Certificate

The complete raw certificate details for nemetschek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAyQdRkh+9FGlufe+tePuEcOvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDcwOTQ5MDNaFw0x
OTExMDUwOTQ5MDNaMBkxFzAVBgNVBAMTDm5lbWV0c2NoZWsuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/x2dI9EXpfWRylGvrmCiszPdebBbDs2
xZaxJMNQe5hp18BDlYim4FfXQ130o55lfbR6O+Z8AfInjV33PSQ3DHC4bM4EYJUx
0MXNRVUFo7ZOPK4letCvxMg/CZWdJefOTfu2UkbDPQLAKW9QjI+0gir6pzFqx2xP
QYAfigBP0raxE6+G0ao8DsKfkF9HqaKLoUxWbXunX5jAL6L0lFHEYOfVN0cGQQOC
ghpUwhDnjGYow/J6CtqN132WgNayTOx58BpfjWI15kglc2cN0cAS4NYhTGYfLmC9
7OvERmNy7t/ejzKXWC/IO5GXiQTpo6D2FRPtxgecleOoJ8r9yKgb1wIDAQABo4IC
ujCCArYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQd/vW0Kb48B5YkHHEEhglRgp/8
rjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMG4GA1UdEQRnMGWCDm5lbWV0c2NoZWsuY29tgg1uZW1ldHNjaGVrLnNlgh1z
cnYtYS1pby5jLTkzMy5tYXhjbHVzdGVyLm5ldIISd3d3Lm5lbWV0c2NoZWsuY29t
ghF3d3cubmVtZXRzY2hlay5zZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ
AsEAKQaNsgiaN9kTAAABbGuyTfwAAAQDAEgwRgIhAIvaOcAIH5yJBTB4nmLpfT4S
CMtnvDoST0c+4kkKlxywAiEArL9ioRctypR4hbb2q8cZB3wDbKZp809F2iFp4W4n
jckAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWxrsk3nAAAE
AwBIMEYCIQDafXwrlo0STKSQ2ai/W4f/nXORl6VBFBpxvLyJJjqotQIhALAf1MYd
3+ja3jupY+q7Lnhkjt+VoqzkcTCGMWgZ3XzwMA0GCSqGSIb3DQEBCwUAA4IBAQBS
2dJERWsPDW87b/2958mekRCfZ2bXQU73KP3RnSepilsRYW6KoLKXBfKrOYj+xs41
CwbeXoIicuFvLxMw6xEYCuRsXVXO1lHJqekFWvyylf9ZVbbLhDaQs0Q9g2LL4jaF
S0tQ31xKu4TFVcEG+9f2fG6MFsGHnXQFDGuPovarVFDBtKjYRtGbxHMNKr56USjK
xQ0i4gOqkY0D1Cdoh17Ou1YZyANQ1vB1wf1uZMgv+jcK0+uiD2bDt6Uq8a8soYNi
EQG9YZUXmlgbThgdroltZxE7ovPoAshgb9FSqg60Y9+cFDY6/WQDT4fTiqaS243L
9xerY4g//BZHschytngI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/x2dI9EXpfWRylGvrmC
iszPdebBbDs2xZaxJMNQe5hp18BDlYim4FfXQ130o55lfbR6O+Z8AfInjV33PSQ3
DHC4bM4EYJUx0MXNRVUFo7ZOPK4letCvxMg/CZWdJefOTfu2UkbDPQLAKW9QjI+0
gir6pzFqx2xPQYAfigBP0raxE6+G0ao8DsKfkF9HqaKLoUxWbXunX5jAL6L0lFHE
YOfVN0cGQQOCghpUwhDnjGYow/J6CtqN132WgNayTOx58BpfjWI15kglc2cN0cAS
4NYhTGYfLmC97OvERmNy7t/ejzKXWC/IO5GXiQTpo6D2FRPtxgecleOoJ8r9yKgb
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273625935547484237610527735190444672402351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 09:49:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 09:49:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nemetschek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23731057033896730517030266770890474196087023332657828213794146429008886886702964185109960474816614665388986277680917274430431318856441229502574512705787070911674898565232903081195803172658352647302200794966372682983534083344092495173385344615772876621817168588987690034323100557990464571986775816987859105372191171469777241980469218156703248780854901324391485638085918966549751409475214291929499114129467814386268684896277081606380024283723860464565728099297529244219406293698899396232617789954312711463038021655765713730310982105670179541789266025837090997396555008124017775165282039266356201817482080806333313457111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dfef5b429be3c0796241c7104860951829ffcae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemetschek.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-a-io.c-933.maxcluster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nemetschek.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c6bb24dfc00000403004830460221008bda39c0081f9c890530789e62e97d3e1208cb67bc3a124f473ee2490a971cb0022100acbf62a1172dca947885b6f6abc719077c036ca669f34f45da2169e16e278dc900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c6bb24de70000040300483046022100da7d7c2b968d124ca490d9a8bf5b87ff9d739197a541141a71bcbc89263aa8b5022100b01fd4c61ddfe8dade3ba963eabb2e78648edf95a2ace4713086316819dd7cf0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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