zu.de

- Zeppelin Universitaet gemeinnuetzige GmbH -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:06:90:01:6f:51:c9:45:a3:61:ae:1b was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Zeppelin Universitaet gemeinnuetzige GmbH

Organization: Zeppelin Universitaet gemeinnuetzige GmbH
Organization unit: IT
State / Province: Baden-Wuerttemberg
Locality: Friedrichshafen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:06:90:01:6f:51:c9:45:a3:61:ae:1b
Serial Number (int): 9601968906621075920391351835
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 87:54:be:89:e1:ae:de:07:7e:8d:22:9e:59:b6:34:91:ec:57:7c:35
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): e7:ff:10:4b:69:51:d2:eb:ad:a3:86:1a:7a:2a:aa:79:43:26:21:ea
Fingerprint (sha256): d9:31:67:9f:9e:ba:82:84:e3:03:e8:d6:1e:3a:5b:d6:32:9a:71:57:e0:bb:64:1c:fc:08:fd:e0:a6:d3:fa:36

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate zu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zu.de
www.zu.de

Other certificates including the domain name zu.de

(limited to 100 certificates)
repro.zu.de
opus4.bsz-bw.de
opus4.bsz-bw.de
ezproxy.zu.de
connect.zu.de
ts.zu.de
radsec.zu.de
ezproxy.zu.de
learning.zu.de
helpdesk.zu.de
repos.bsz-bw.de
email.zu.de
email.zu.de
www.zu.de
dms.zu.de
zucoyo.zu.de
cms.zu.de
cms.zu.de
cms.zu.de
repos.bsz-bw.de
app.zu.de
email.zu.de
email.zu.de
email.zu.de
navweb.zu.de
repos.bsz-bw.de
email.zu.de
cards.jonathanmuth.com
svp.zu.de
*.pbx.zu.de
radsec.zu.de
helpdesk.zu.de
guestportal.zu.de
mediathek.zu.de
guestlogin.zu.de
guestportal.zu.de
coyo.zu.de
zu.de
planspiel.zu.de
cms.zu.de
zu.de
repos.bsz-bw.de
opus4.bsz-bw.de
ezproxy.zu.de
zu.de
repro.zu.de
cms.zu.de
repos.bsz-bw.de
m.zu.de
repos.bsz-bw.de
cms.zu.de
systemone.zu.de
opus4.bsz-bw.de
guestportal.zu.de
learning.zu.de
email.zu.de
email.zu.de
zu.de
opus4.bsz-bw.de
finreporting.zu.de
helpdesk.zu.de
learning.zu.de
WEBMAIL.ZU.DE
cms.zu.de
guestportal.zu.de
opus4.bsz-bw.de
systemone.zu.de
adfs.zu.de
cms.zu.de
idp.zu.de
radsec.zu.de
zu.de
zuqpilot.zu.de
www.zu.de
reporting.zu.de
dms.zu.de
connect.zu.de
cntest.zu.de
repos.bsz-bw.de
m.zu.de
opus4.bsz-bw.de
zuqpilot.zu.de
learning.zu.de
repos.bsz-bw.de
dms.zu.de
opus4.bsz-bw.de
systemone.zu.de
m.zu.de
rdweb.zu.de
mediathek.zu.de
radsec.zu.de
www.zu.de
idp.zu.de
zu.de
systemone.zu.de
www.zu.de
opus4.bsz-bw.de
adfs.zu.de
*.pbx.zu.de
ts.zu.de

Certificate

The complete raw certificate details for zu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/cXLeG76rzJuByEnoFJ
X+XjYEgOTJZs3Ax6nNhAZ5hz7hKazdJvhr2evafCovBR7w+eZuUwYrytaIgBzYbX
doWGcy35Vm9xsN9U4lhYqNpwfULI72yxNi4+O+++ZestaOjqplT+EAnF3vDfokAm
n+D2V+kNOLskqhO3+WhjdXcj7/STVGBoVYHhnRHioip8DJYFxvni4AvXJ8LPss41
xlunXovb3t5LRVRpw9Fs5fanBiB+TwEDbcnFCBc0noCsdb4XfN8YEuLBmjfkBId0
/aBiyPI26UZ/bOEDyfUc0ctu1g+7y99JPaZ3ZrBgydlg1PwhhiJaJFuJhdIH33ws
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9601968906621075920391351835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 12:56:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-02 12:56:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Friedrichshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zeppelin Universitaet gemeinnuetzige GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'zu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20193735377997087241669549828826750524712921850276494113862953446283742503030820280653002107815389380256061564734851315518252099757514509108238365566304530619501310647194983925785185328122841997856567414910499413770061264116900108176216655249533046377283998181282815438622806161182268812503494128938816625472343338097163803204949581858705881333781062804154969345915592573219038723470927256199952337223767350553343339778065432099407867671174129210228254965786605379952917062669345030288593225238978003351168131940501465721508846825258799888956104576843337735864706491552779804817296089690126279985162706027422462782697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8754be89e1aede077e8d229e59b63491ec577c35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (962 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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