coffeelink-int.schaerer.com

- WMF Group GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 76:60:22:9a:ad:2a:5e:a0:6f:c1:22:27:1c:d7:1e:54 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF Group GmbH

Company registration number: CSM018247323
Organization: WMF Group GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 76:60:22:9a:ad:2a:5e:a0:6f:c1:22:27:1c:d7:1e:54
Serial Number (int): 157348065857695096253988272387999080020
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fd:8a:e7:ee:db:4d:19:53:c3:7d:76:c1:01:4b:47:74:00:be:03:d6
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 2a:9c:8e:05:d0:71:d5:56:8f:76:45:ec:ac:65:b1:f8:51:21:2f:64
Fingerprint (sha256): f8:51:fd:d2:03:4e:8f:78:fe:6e:0d:cf:25:9f:19:e8:6b:6e:f8:a6:eb:ba:d7:bd:97:a4:73:76:68:10:19:12

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate coffeelink-int.schaerer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coffeelink-int.schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coffeelink-int.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for coffeelink-int.schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157348065857695096253988272387999080020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 12:14:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 12:14:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018247323'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF Group GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coffeelink-int.schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700844484766529602514268071041838538471082564210941429151911990383895237235320177097642495924454616711023454639834573355564170891616605790837625001191601855732929928277445555685629623842734263654499133249443468789998862973612761236193211089286343249946435245335967774766512664244910411455107891414777070521925267925010688347683694892461513920948384597917374354499125867507966888749898563988844991447749247535134052299551533295262731252513084504217198597207938013689952910323614077465868309236437212658934212221777540452970659695070115237367142379490828256707292975932097413435701664444679232675569277559766825156045900294443204629714559651673354058729223327733284365644457758472471062521600913235234658635483482246059647260491122173591258067489101983036071130621455033684136415781141020165568908555473672493901353694517622715916674476736994837765791910653452071670341365793911104905828982559805086741948771400455176216644642186740428787389367069186991413510799155909018305985974306022322315969277351446723859218790210402578477175948339300829770371571284967275169829282168963954759779146160048173519751234435819026682680018014373645622623910195731865729385354692905859162838691102367831474527176739859347497749096031196071085097727121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1320 bytes)
							05260075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017015458941000004030046304402203746f7aab129f3673f1126960ba7485108cee19a2c43474bbe9defdd3f34baeb022003ecdcfbb66e469a63602e5d215c85bb010b008e788504fb2a70954ac45d5c4b007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000170154587bf0000040300473045022100fba11c8f7c187563ce02cc173437eba4277764f05e40f4c2d0b1b1297e150a6c02206d9ce7380b2ce747376d679c0733de9cca07e5f414513d442b1731cc00399d6b007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000170154587f3000004030046304402207d6b2a78d731008b3cee1c4452a88b871f2c86d7ae5195cac21edbce3456e6d802203a50863a4e89425a21f2d7528a3e24c94e0ead6836b5413fa00ffeaac3b6164a007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170154587f70000040300483046022100d0fd32da87ca53b6348dc5eb61938efab3489403db171957130bdbdcc4440af0022100a4c4e10fb479c237815a93df3585eb525e0ce5b0332daf2515beb37affea2dba0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001701545894f000004030047304502203b1cc9342531a8372dcec65f4bb39e82270ab48ee855020449629f492c97887d022100894a29e4f83da0372cfe8772ffe2aff153a3e87e74726701b40025c2f1a7c5980076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001701545899e000004030047304502203e25ec4ff9cded1bd4890d534b65cf0fd1dc20cba7d7f3b16dc76e1346f0c17a022100e836973553b9b22680761221f98a6169bb7ae88658fcbfa0e58e8d43299f9fc9007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170154589b80000040300483046022100aa0a0d556c4d1d08b0d560147e692371c99517c3e826b205a8bf97a922e7e544022100fd41c802944b3c10d079391bfc2a9c1845eb5eee3ba2ca4d4623a8207781e4320077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000017015458b4100000403004830460221008c6d1c4490df5e6332025809fa01cc1b014b0fb9abbcec5619f81a01e2da21e90221008095576e4e44424a47b524efe0c8009323e06fda6dcece83ece4d4c7ac135d790075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017015458a060000040300463044022055f03f034f246e1df8a40b23a97f37f9a10ab59dfd4ba576c6b8fb2eda996dc602207be9fe11b18fb2b198b1f5794598a75b4bdfa7bee87985794d27c3c45a1aa5d30075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017015458d1b00000403004630440220010eddca0af5ccefa15ae9a73ece466ee2ec7b7db7bbf91b15b049ecb241966e022078e8bdc6ecfcadf8001270db1ee548b19d046117dd0bbf84552814855a49e98b007500eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000017015458c9500000403004630440220108831f587573f12c2525dd4177601d39cb62ff944b7ed097de70a5203468f9202201c4cf6aaabb9731c0cc4534c55665776e4df69342e352361ef8377dc32d6b33a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeelink-int.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd8ae7eedb4d1953c37d76c1014b477400be03d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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