thenexuscommunity.de

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number fb:97:43:61:b6:2c:d9:fd:11:d0:5f:ae:a0:a5:09:44 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thenexuscommunity.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fb:97:43:61:b6:2c:d9:fd:11:d0:5f:ae:a0:a5:09:44
Serial Number (int): 334421630430608345561707338766227933508
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 43:bf:65:c0:e3:d4:fb:a9:2f:9f:08:69:53:fb:42:fd:9a:af:12:f1
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 71:98:9f:7d:5d:de:f2:d0:58:d8:7a:7f:bd:f9:b7:c6:a1:97:0b:ca
Fingerprint (sha256): f2:9b:02:e4:74:aa:04:1a:43:47:83:83:b5:d5:db:19:2a:ff:5a:05:64:bb:69:ca:e6:a0:c9:b4:94:4f:4e:1a

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/Kb2h2K0oYAc
CRL Distribution Point: http://crls.pki.goog/gts1p5/WKZ-7irV74A.crl

Check the revocation status for certificate thenexuscommunity.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thenexuscommunity.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thenexuscommunity.de
*.thenexuscommunity.de

Other certificates including the domain name thenexuscommunity.de

(limited to 100 certificates)
www.eis.playkev.de
n2017.witzepedia.de
*.gutscheinscode.de
presse.thenexuscommunity.de
imjjdk.panolook.de
www.discord.xwaretv.de
*.sukreiskleve.de
wp2.p-s-soft.de
www.schweiz.dstaraustria.at
*.verlaggottwald.de
aste.spdns.org
suop.kevinkoziol.de
ermania.lima-city.net
*.alfaresmarkt.de
www.staging.captain-camper.de
www.penthesilea-foundation.com
www.home.kettwig-net.de
ns1.rotglut.net
git.enjoi-sailing.com
www.podcast.thenexuscommunity.de
www.datenschutz.matthiasnolz.com
glpi.immo-look.ch
kingofdl.fam-gundacker.eu
*.orthuber.net
*.mybusinesscentral.de
*.ilona-kloth.at
www.arianagran.de
wlan.home.schulz-noll.de
thenexuscommunity.de
webapp.hutch79.ch
thenexuscommunity.de
thenexuscommunity.de
www.seopanel.swissparkett.ch
dev.ask-alfred.de
htmailrelay.moinalex.de
www.home.kettwig-net.de
*.landschaftsbau-weyhe.de
*.emiliobezz.de
*.ferienhaeusle.com
development.tjark.pro
pix.kulinautikus.eu
phpmyadmin.2icecube.de
ws.lima-city.info
backup.moinalex.de
*.normankranz.com
generation-europa.global-crafter.eu
*.j-blockbuster.com
satelite.cloudns.cc
server.thenexuscommunity.de
*.dew-kommunal.de
www.properties.dreamestate.pro
vfsynserver2.vidpxxel.de
games.burkinart.de
www.admin.derkleinemog.de
www.nachricht.mylonky.eu
htmailrelay.moinalex.de
*.zaitrus.com
abogaciing.hutch79.ch
*.fahrschule-tolga.de
2015.enjoi-sailing.com
www.sidbrowser.mathesoft.com
www.normal.drjustusadam.de
www.bofh-v6.tk
*.till-guenther.com
hrmorange.thenexuscommunity.de
chat.icekey.org
thenexuscommunity.de
suop.noobi.eu.org
www.shop.thenexuscommunity.de
*.ghb-service.com
rchasem.dt80.net
shop.jaegerhof-schneider.at
ng.peterschlenker.de
www.be-more.de
pop3.lima-city.org
*.recruiter.li
cpcalendars.kevinkoziol.com
passport.hampoelz.net
*.gasthaus-randen.de
accountwww.moin-alex.de
2018.icekey.org
ozttmbdjnxqquq.tjark.pro
www.zimmer.augl-hof.de
www.news.hilberg.info
www.eis.playkev.de
*.ergopraxis-herzing.de
thenexuscommunity.de
www.presse.thenexuscommunity.de
fe.lima-city.net
2015.enjoi-sailing.com
suop.bigpicture.at

Certificate

The complete raw certificate details for thenexuscommunity.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIRAPuXQ2G2LNn9EdBfrqClCUQwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwODIzMjMxOTUwWhcNMjMxMTIx
MjMxOTQ5WjAfMR0wGwYDVQQDExR0aGVuZXh1c2NvbW11bml0eS5kZTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBANCPgCiC/WZH0uyi/3D7vw0zOGS00d0G
DkG2GX5HsnFk94VKYhWF+Rt5wvvToNJU2ixG5DyOiUiRbZzWp2APswWaMq7tFOd0
l5Hi3DE4pLBS/BJIay/L45qv7JuhrUfbUr5UAJUKn9l2JpibZu13b/JIVc0he74W
qfP5Mf7kI8D9YonCNCMUxrI/K5sueknM8fZYusRDk5GjT8e7EstLoWV68xagMW4+
rwT7P5c8j0O33VirOcXXHNorjjF+JNW1ksyZB8+62dule35Ng8PgrLwIjcT6lHT3
cmDcseQFxGSHLtS0QX11XmQwPdvk3Bj+xaqieOxlY0xeu4b8d0FeizkCAwEAAaOC
ApMwggKPMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBRDv2XA49T7qS+fCGlT+0L9mq8S8TAfBgNVHSME
GDAWgBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0tiMmgySzBvWUFj
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUu
ZGVyMDcGA1UdEQQwMC6CFHRoZW5leHVzY29tbXVuaXR5LmRlghYqLnRoZW5leHVz
Y29tbXVuaXR5LmRlMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMw
PAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L1dL
Wi03aXJWNzRBLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AK33vvp8/xDI
i509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABiiTpZ4oAAAQDAEcwRQIhAN/iIyoA
RzXBaEXlJ5R6jKV8eJFVxuYTt38FDVx7zExUAiAPVofkdgXTc8Nn0SFrcqsRRCaP
n8QOzS9BkMKL5DA73gB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS
AAABiiTpZ40AAAQDAEcwRQIhAM6gD7ptCHAYEerggwLFDbA/LZwXSSlfK2ip0bB5
fi4LAiB/pntrW2Fxg6f0XQyvU+JqJgBQcxKdDY2lbXukEsbLqzANBgkqhkiG9w0B
AQsFAAOCAQEAPe9OfsktZ6yZyttVD+/t8JPIz6uTf2Ha8zuW+k9RQ9VXaOJ6OxRv
F817QqYeOj4Np+H5MzF7bCuFk4//r0agvPZOEWc8e/6tEkrd1kQqChej57Tbc40G
XVU5W9G630Rbsa2dPRdOCgzrpRJCWNwXlFoEmj5HiO+fxRm8USTAEiNPn/xuZWTt
Y02FIPX/ysdsWpVgApXos6qI3wm9giOqWceg+SI2O5kfv3ZLmr60q/PPmtfguD2M
ImssTtxJmjHm26kQm7pkLxcC1ZTuyeBd/M08pnZ9OCNL6LL2ZybHtXKcwDGrJBPI
OqETTxkgVovZxmMPlXWPUamhqhsaBrxfjw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I+AKIL9ZkfS7KL/cPu/
DTM4ZLTR3QYOQbYZfkeycWT3hUpiFYX5G3nC+9Og0lTaLEbkPI6JSJFtnNanYA+z
BZoyru0U53SXkeLcMTiksFL8EkhrL8vjmq/sm6GtR9tSvlQAlQqf2XYmmJtm7Xdv
8khVzSF7vhap8/kx/uQjwP1iicI0IxTGsj8rmy56Sczx9li6xEOTkaNPx7sSy0uh
ZXrzFqAxbj6vBPs/lzyPQ7fdWKs5xdcc2iuOMX4k1bWSzJkHz7rZ26V7fk2Dw+Cs
vAiNxPqUdPdyYNyx5AXEZIcu1LRBfXVeZDA92+TcGP7FqqJ47GVjTF67hvx3QV6L
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334421630430608345561707338766227933508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:19:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:19:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thenexuscommunity.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26328330225119860087708864890374797503944793669424120962576873543497459551337291202228277019365081856712010546967673010055587424020964642808675674979506937947120246059535169631357408084302377261783110400335508692026916309009498536892377726322546110987487264083890085272260831975454250465422020260663034809350411681445826728556086143975391901149302008980696380080130512385833627919583875111016957086105658269814411292947383398632269509055870732804851109785203071027363702491511496683975816874443399386161665212262781470803966380551636916974924354638497651068967591797345487884034320352882165199938182148211909798562617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43bf65c0e3d4fba92f9f086953fb42fd9aaf12f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/Kb2h2K0oYAc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenexuscommunity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenexuscommunity.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/WKZ-7irV74A.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a24e9678a0000040300473045022100dfe2232a004735c16845e527947a8ca57c789155c6e613b77f050d5c7bcc4c5402200f5687e47605d373c367d1216b72ab1144268f9fc40ecd2f4190c28be4303bde0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a24e9678d0000040300473045022100cea00fba6d08701811eae08302c50db03f2d9c1749295f2b68a9d1b0797e2e0b02207fa67b6b5b617183a7f45d0caf53e26a26005073129d0d8da56d7ba412c6cbab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003def4e7ec92d67ac99cadb550fefedf093c8cfab937f61daf33b96fa4f5143d55768e27a3b146f17cd7b42a61e3a3e0da7e1f933317b6c2b85938fffaf46a0bcf64e11673c7bfead124addd6442a0a17a3e7b4db738d065d55395bd1badf445bb1ad9d3d174e0a0ceba5124258dc17945a049a3e4788ef9fc519bc5124c012234f9ffc6e6564ed634d8520f5ffcac76c5a95600295e8b3aa88df09bd8223aa59c7a0f922363b991fbf764b9abeb4abf3cf9ad7e0b83d8c226b2c4edc499a31e6dba9109bba642f1702d594eec9e05dfccd3ca6767d38234be8b2f66726c7b5729cc031ab2413c83aa1134f1920568bd9c6630f95758f51a9a1aa1b1a06bc5f8f