www.omc.net

- OMCnet Internet Service GmbH -

Issued by GeoTrust EV RSA CA G2

About this certificate

This digital certificate with serial number 0f:45:5c:5e:13:80:ed:3f:49:0a:35:58:a7:ee:3e:4e was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OMCnet Internet Service GmbH

Company registration number: HRB 4445 PI
Organization: OMCnet Internet Service GmbH
State / Province: Schleswig-Holstein
Locality: Quickborn
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:45:5c:5e:13:80:ed:3f:49:0a:35:58:a7:ee:3e:4e
Serial Number (int): 20298561855179531554233070450348277326
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:7c:b2:f9:9e:f8:cd:c4:d9:c5:6d:de:ed:c9:0f:33:4c:c7:d5:4d
AuthorityKeyId: 28:d2:cf:ee:09:84:75:dd:b5:b2:b5:bf:3c:d5:a0:c6:73:88:5d:1f

Fingerprint (sha1): b1:29:86:54:4a:4e:8b:80:80:13:87:09:d2:37:eb:bf:38:be:8e:61
Fingerprint (sha256): f5:6f:a3:a0:4a:01:c8:7d:8e:de:77:9c:6a:dc:36:3b:21:46:cc:bc:7a:28:27:68:53:1e:b2:1f:06:92:f2:4a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl

Check the revocation status for certificate www.omc.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.omc.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.omc.net
omc.net
webmail.omc.net
dcp.omc.net
ocp.omc.net

Other certificates including the domain name omc.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.omc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2j08KfKxTRqm5B00dN2O
iQzuibc3WKiW71QUHBsVqLnxaefwuL3nvoWDBNQ3+DG7YQBLzNF2dvsY+xN7B3Lb
7DBtYutXk+//LUM9Kf0boLjnaNAgi3ELQqhXHtaZOrUvIwU+sxJjwpQA/B+TJY6b
J6xGN62PakPzHfKmnK4T5FcPGUXHUCxrcqVDLdyDGYokz+IJWitLNs0bFW09bEGU
9L51zMBgXX2gJNwrhLp2yKzKVrG8i9TsDxLAEPWPkpV15QpzTEnzj3bLDta4LE6q
qN6DEAwkFt2AQAmETtvh9lyr1ooKGdClSfgbcXQrLj6+CDHuq4xSsNOQtUZUY1F9
oTE0kKEdOU4t5g5TVrZZF8/Aq5GatmxYQ13IF725rum9SEoXFAukSYmQI3zAjVYV
CztVmPk6+LJEMgHAsEz881IbZFRg03wxWQy7lKdisNdpxCEqRs6OQdeWn/18qOop
+WAEF4MnGsllROw8Lu1XrQXTAY8z2a8zF4sn7x4r3+mEUHsJLM2XtWraWUpxnqNG
bgSHsTjdhWq9B8K0xd6qVtiNtIjVCWyFGNV8SrdbUeBTj8rGxizmK08AesHtAJ2X
j9hZLfyI/ASkaVZJjtlZOGJoitgt/RHBV4+iTOB4soDCyivx116qpNAHd3gF4HM5
CLiFa77JKK2+6F//z7RlANMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20298561855179531554233070450348277326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pinneberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 4445 PI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quickborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OMCnet Internet Service GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.omc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890338254742488267384653765110945928500144479904855278974451716169076769937929793361076636994817500977095600960417027371177431012844895676744618951248510207320258006422499277466519369032925873737153425910984153716743829272765037690189827620461517738873926350145906455642485063413691653859182424105595099210403964792127912515022310479665806395575436648364016500606149912287460060848616216056177117468579082436056085089422209388970999596743859973320849635899861549406899689196408874201814093142523041456342177128040311932532627774860138753934949396383342047335794571517714941558781644776665027738032113916435413747796653531763506116646849777927501602613114287528022168322016624149071670181553757175930993987214297730891802945740746390768160313176710371166089416606564895062468559277473084302034100217569479811256924404396592425420223425424759764555919937138948070398127928316467301402163157464246703880188496789247524585501170602140214157815412616554551689859903334698577410783987182743794706112267402378364671027470738025694236369020676709307621044727424484877203996526524039899075143119040843311346593343233473238352944016850985865422588353834742818205576685069324470687700148945884699554589829949998256899925934158442204295307002067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28d2cfee098475ddb5b2b5bf3cd5a0c673885d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a7cb2f99ef8cdc4d9c56ddeedc90f334cc7d54d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcp.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocp.omc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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