wwwsec-t.valiant.ch

Issued by Swisscom Smaragd CA 2

About this certificate


This digital certificate with serial number f9:70:5f:82:20:e1:71:2d:0c:34:91:9e:f1:1e:d8:b4 was issued on by Swisscom .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: Certificate doesn't contain any subjectAltName
  • ERROR: Certificate CN is not listed in subjectAltName

Valiant Bank AG

Organization: Valiant Bank AG
State / Province: BE
Locality: Bern
Country: CH

Swisscom

Organization: Swisscom
Organization unit: Digital Certificate Services
State / Province: BE
Locality: Bern
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): f9:70:5f:82:20:e1:71:2d:0c:34:91:9e:f1:1e:d8:b4
Serial Number (int): 331561245337349489892589405037685299380
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 67:6d:ff:4e:9c:3e:83:21:6e:d8:5d:70:f6:06:de:64:f7:9e:9e:0b
AuthorityKeyId: e0:08:04:70:4e:e3:eb:46:b6:75:82:6e:30:7a:94:80:d3:e3:ee:7d

Fingerprint (sha1): 3d:43:54:a6:48:52:8b:ec:ad:bc:8e:22:01:08:7e:0d:21:dc:94:6c
Fingerprint (sha256): 46:8c:44:0d:81:fd:b2:8a:b4:86:9c:75:2b:6f:f8:65:01:72:00:89:4e:38:85:ed:e1:22:6b:de:ca:84:2d:87

Issuing Certificate URL: http://aia.swissdigicert.ch/sdcs-smaragd2.crt

Revocation information

OCSP Server: http://ocsp.swissdigicert.ch/sdcs-smaragd2
CRL Distribution Point: http://crl.swissdigicert.ch/sdcs-smaragd2.crl
CRL Distribution Point: ldap://ldap.swissdigicert.ch/CN=Swisscom%20Smaragd%20CA%202,dc=smaragd2,dc=swissdigicert,dc=ch?certificateRevocationList?

Check the revocation status for the current certificate on wwwsec-t.valiant.ch
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIRAPlwX4Ig4XEtDDSRnvEe2LQwDQYJKoZIhvcNAQELBQAw ZzELMAkGA1UEBhMCY2gxETAPBgNVBAoTCFN3aXNzY29tMSUwIwYDVQQLExxEaWdp dGFsIENlcnRpZmljYXRlIFNlcnZpY2VzMR4wHAYDVQQDExVTd2lzc2NvbSBTbWFy YWdkIENBIDIwHhcNMTUwMTI2MTM0MTU0WhcNMTgwMTI1MTM0MTU0WjBhMQswCQYD VQQGEwJDSDELMAkGA1UECBMCQkUxDTALBgNVBAcTBEJlcm4xGDAWBgNVBAoTD1Zh bGlhbnQgQmFuayBBRzEcMBoGA1UEAxMTd3d3c2VjLXQudmFsaWFudC5jaDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyC5AbdLntc5X62CV6zH53ni7v2 Qi4GxDI72XG2tUZyQQ/nijCxzg5dsbF8XAqE3otfrm7/WCr/bPK8pAbWIx8jhgcK PpC7YMWjilEt+s+6DseMHUTrTWsIYlll+ugn3pVx+zxanwFjiUVjDx4fJCt3OY78 6l6JmTDv7nWON/5h7X4+Dfz1L1hNEL5VPs30WJFsrEy/qeL94Do5514VNGc2xrWZ Ba75BTP2AGbJlgOG3P20poCXVVIns+SKanEoO0oKiO4vbicjqpUMSxoi0Urx7WQb 654MvLKpI3mOrj43HQnkqxHwx6rMka8CwrbXSNqQpZmuia7OnE4uFukS/8MCAwEA AaOCAtMwggLPMB8GA1UdIwQYMBaAFOAIBHBO4+tGtnWCbjB6lIDT4+59MA4GA1Ud DwEB/wQEAwIFoDCBgQYIKwYBBQUHAQEEdTBzMDYGCCsGAQUFBzABhipodHRwOi8v b2NzcC5zd2lzc2RpZ2ljZXJ0LmNoL3NkY3Mtc21hcmFnZDIwOQYIKwYBBQUHMAKG LWh0dHA6Ly9haWEuc3dpc3NkaWdpY2VydC5jaC9zZGNzLXNtYXJhZ2QyLmNydDCC ARQGA1UdIASCAQswggEHMIIBAwYHYIV0AVMRADCB9zAsBggrBgEFBQcCARYgaHR0 cDovL3d3dy5zd2lzc2RpZ2ljZXJ0LmNoL2Nwcy8wgcYGCCsGAQUFBwICMIG5GoG2 UmVsaWFuY2Ugb24gdGhlIFN3aXNzY29tIFJvb3QgQ2VydGlmaWNhdGUgYnkgYW55 IHBhcnR5IGFzc3VtZXMgYWNjZXB0YW5jZSBvZiB0aGUgdGhlbiBhcHBsaWNhYmxl IHN0YW5kYXJkIHRlcm1zIGFuZCBjb25kaXRpb25zIG9mIHVzZSBhbmQgdGhlIFN3 aXNzY29tIENlcnRpZmljYXRlIFByYWN0aWNlIFN0YXRlbWVudC4wgcEGA1UdHwSB uTCBtjAzoDGgL4YtaHR0cDovL2NybC5zd2lzc2RpZ2ljZXJ0LmNoL3NkY3Mtc21h cmFnZDIuY3JsMH+gfaB7hnlsZGFwOi8vbGRhcC5zd2lzc2RpZ2ljZXJ0LmNoL0NO PVN3aXNzY29tJTIwU21hcmFnZCUyMENBJTIwMixkYz1zbWFyYWdkMixkYz1zd2lz c2RpZ2ljZXJ0LGRjPWNoP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/MB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUZ23/Tpw+gyFu2F1w 9gbeZPeengswDQYJKoZIhvcNAQELBQADggEBAI2tCeJIcc7ZDD8+SpCfuSNi6KRJ lo136f4XfuZj+51TTSDrAephQAQj/xW+QRCgu+J4tC+6rkiw0F474Z1tVf0HcezI HYKugDJQtBLX9dq63zlnJ/25Q6/Dc8wdtHz3vbLNpkFpEbpGU5GmOG+o+4e4i4hO OG+ti0tLx01xeHNrGrlCwnuKkm/0cuNTWTGwSE0g3IE14H8Pryq45ERNs60PsOy8 Pt328vvohlOcen7BqMhO65HdezCS4LW0snlYww/AafCpKivPLF9ESqlZSgbQ4Bdh f4KQcC9ebydEjrOmVQlGq9QyWwBG3fZuT//Ms8FDIIKKL53eIcyeRXuftOk= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ILkBt0ue1zlfrYJXrMf neeLu/ZCLgbEMjvZcba1RnJBD+eKMLHODl2xsXxcCoTei1+ubv9YKv9s8rykBtYj HyOGBwo+kLtgxaOKUS36z7oOx4wdROtNawhiWWX66CfelXH7PFqfAWOJRWMPHh8k K3c5jvzqXomZMO/udY43/mHtfj4N/PUvWE0QvlU+zfRYkWysTL+p4v3gOjnnXhU0 ZzbGtZkFrvkFM/YAZsmWA4bc/bSmgJdVUiez5IpqcSg7SgqI7i9uJyOqlQxLGiLR SvHtZBvrngy8sqkjeY6uPjcdCeSrEfDHqsyRrwLCttdI2pClma6Jrs6cTi4W6RL/ wwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 331561245337349489892589405037685299380 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Certificate Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom Smaragd CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-26 13:41:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 13:41:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valiant Bank AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwsec-t.valiant.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27836971716976905736809174137131596865713067337685581283313267132655161757401706040082020254547549503644374095365653694430416916978916488034255462722992161722816277053184372887395499923078896712134536811827867740393192172395616145149121402501997094042913395310017503560842350742986472027696390551451038128009410023696592908417445161268435173715544866854107594746360770060202423558734590416110956815803872300406106018639667998322476038038805332971952708518771572343841835811752675323096255708747678914932544234560035699225648638327300337955702086780143144492712921928809325180437202126098870461715559789132172921864131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e00804704ee3eb46b675826e307a9480d3e3ee7d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swissdigicert.ch/sdcs-smaragd2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swissdigicert.ch/sdcs-smaragd2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (267 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.83.17.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.swissdigicert.ch/cps/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 101 32 83 119 105 115 115 99 111 109 32 82 111 111 116 32 67 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 116 104 101 110 32 97 112 112 108 105 99 97 98 108 101 32 115 116 97 110 100 97 114 100 32 116 101 114 109 115 32 97 110 100 32 99 111 110 100 105 116 105 111 110 115 32 111 102 32 117 115 101 32 97 110 100 32 116 104 101 32 83 119 105 115 115 99 111 109 32 67 101 114 116 105 102 105 99 97 116 101 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swissdigicert.ch/sdcs-smaragd2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.swissdigicert.ch/CN=Swisscom%20Smaragd%20CA%202,dc=smaragd2,dc=swissdigicert,dc=ch?certificateRevocationList?' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 676dff4e9c3e83216ed85d70f606de64f79e9e0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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