www.omc.net

- OMCnet Internet Service GmbH -

Issued by GeoTrust EV RSA CA G2

About this certificate

This digital certificate with serial number 0b:0c:fc:20:0e:a2:44:87:e1:60:0e:b4:71:c6:f5:ed was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

OMCnet Internet Service GmbH

Company registration number: HRB 4445 PI
Organization: OMCnet Internet Service GmbH
Locality: Quickborn
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:0c:fc:20:0e:a2:44:87:e1:60:0e:b4:71:c6:f5:ed
Serial Number (int): 14688929222986772958637563719342028269
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:7c:b2:f9:9e:f8:cd:c4:d9:c5:6d:de:ed:c9:0f:33:4c:c7:d5:4d
AuthorityKeyId: 28:d2:cf:ee:09:84:75:dd:b5:b2:b5:bf:3c:d5:a0:c6:73:88:5d:1f

Fingerprint (sha1): 3a:48:44:9e:3a:87:a0:fe:16:02:41:6b:13:4a:90:ff:ae:8d:2e:ae
Fingerprint (sha256): e0:16:24:a8:65:ef:d6:48:82:7a:01:9d:20:f5:28:0a:e3:c2:db:03:bb:51:6e:fe:86:fe:ae:f4:f2:dc:0c:74

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl

Check the revocation status for certificate www.omc.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.omc.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.omc.net
omc.net
webmail.omc.net
dcp.omc.net
ocp.omc.net

Other certificates including the domain name omc.net

(limited to 100 certificates)
webmail.omc.net
swg2.omc.net
sslp1.omc.net
sslp1.omc.net
*.omc.net
www.cluster1.igefa.omc.net
mx-cluster.omc-mail.de
www.cluster1.jpre.omc.net
mail-cluster.omc-mail.de
sslp1.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
mc01.omc.net
*.omc.net
sslp1.omc.net
www.cluster1.jpre.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
sslp1.omc.net
ftp.mvg.omc.net
mx-cluster.omc-mail.de
*.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
omc.net
www.cluster1.igefa.omc.net
*.omc.net
ocp.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.cluster1.jpre.omc.net
*.omc.net
www.cluster1.jpre.omc.net
omc.net
*.omc.net
www.cluster1.jpre.omc.net
www.cluster1.jpre.omc.net
www.omc.net
www.omc.net
*.omc.net
ftp.mvg.omc.net
*.omc.net
www.omc.net
sslp1.omc.net
www.cluster1.igefa.omc.net
www.cluster1.igefa.omc.net
sbund-www2.omc.net
ftp.mvg.omc.net
www.omc.net
www.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
webmail.omc.net
*.omc.net
m.testing.cinemaxx.omc.net
mx-cluster.omc-mail.de
sslp1.omc.net
m.staging.cinemaxx.omc.net
*.omc.net
www.omc.net
*.omc.net
www.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
mx-cluster.omc-mail.de
webmail.omc.net
sslp1.omc.net
vmm1.omc.net
www.omc.net

Certificate

The complete raw certificate details for www.omc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14688929222986772958637563719342028269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pinneberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 4445 PI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quickborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OMCnet Internet Service GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.omc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890338254742488267384653765110945928500144479904855278974451716169076769937929793361076636994817500977095600960417027371177431012844895676744618951248510207320258006422499277466519369032925873737153425910984153716743829272765037690189827620461517738873926350145906455642485063413691653859182424105595099210403964792127912515022310479665806395575436648364016500606149912287460060848616216056177117468579082436056085089422209388970999596743859973320849635899861549406899689196408874201814093142523041456342177128040311932532627774860138753934949396383342047335794571517714941558781644776665027738032113916435413747796653531763506116646849777927501602613114287528022168322016624149071670181553757175930993987214297730891802945740746390768160313176710371166089416606564895062468559277473084302034100217569479811256924404396592425420223425424759764555919937138948070398127928316467301402163157464246703880188496789247524585501170602140214157815412616554551689859903334698577410783987182743794706112267402378364671027470738025694236369020676709307621044727424484877203996526524039899075143119040843311346593343233473238352944016850985865422588353834742818205576685069324470687700148945884699554589829949998256899925934158442204295307002067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28d2cfee098475ddb5b2b5bf3cd5a0c673885d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a7cb2f99ef8cdc4d9c56ddeedc90f334cc7d54d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcp.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocp.omc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a2c0c5b29b34ccec0d3001c27d3353d535cc7a70c46e61b4a9279e8f7fb4ef1879c1752498894a5cdb779027f469983e7be42e21259cdd9c3abbe5e129c81516e46ae81856c24f03cf13bb8c7879ca1c8d40d2c1e77110bfc6c4fde36e03d3772c05680dd3ddceafc7e972b281eed7c11c57f0454775ebe5c1f95702221184a2a62c71958d6e58286fba4bbcec432d2d19f54131b08800b0a877743c99390ce9f1cef1f2b475133957bc226bdcf177da678e6f9dbd15cafae1ca6c14af740826dd5b24e18912d9b29c383c84a24c4c2166bc3337d5eabe855e0edc79203b9d739b5b5ecbac32eb530fb346c58112a903760e22f4dbd290b8361845281e5d76e2