faber.kuleuven.be

- Katholieke Universiteit te Leuven -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 3c:61:a8:69:b4:20:84:e9:91:37:9d:f2:ba:f8:d7:84 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Katholieke Universiteit te Leuven

Organization: Katholieke Universiteit te Leuven
Organization unit: ICTS
State / Province: Vlaams-Brabant
Locality: Leuven
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:61:a8:69:b4:20:84:e9:91:37:9d:f2:ba:f8:d7:84
Serial Number (int): 80260748361889923187583446617693935492
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8b:8a:b1:2d:b7:13:3b:e7:63:03:ed:e9:c4:8d:f4:c4:c1:fc:d5:96
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c4:ef:a9:c5:9b:eb:5f:a3:80:ef:25:7c:9e:6d:15:3c:01:e1:e2:43
Fingerprint (sha256): 00:5a:9b:f7:0f:e9:73:3c:3c:8a:62:39:76:57:36:0a:b5:d6:ff:b9:12:69:ac:7b:22:6e:51:93:b7:3d:fe:22

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate faber.kuleuven.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faber.kuleuven.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

faber.kuleuven.be
www.faber.kuleuven.be

Other certificates including the domain name kuleuven.be

(limited to 100 certificates)
alum.kuleuven.be
support.themallschool.org.uk
print.t.icts.kuleuven.be
fac.ppw.kuleuven.be
icts-s-dc2.luna.kuleuven.be
mysql.cs.kotnet.kuleuven.be
bbup1.q.icts.kuleuven.be
account.kuleuven.be
faber.kuleuven.be
workflow.groupware.oad.icts.kuleuven.be
icts-s-exmbx8.luna.kuleuven.be
cwisdb.kuleuven.be
iks32.fys.kuleuven.be
icts-s-desigo3.LUNAH.KULEUVEN.BE
dylius.icts.kuleuven.be
lstat.kuleuven.be
ICTS-S-RDADYL1.lunah.kuleuven.be
vsm-rdg.fysad.fys.kuleuven.be
zebra.cs.kuleuven.be
testjo.t.icts.kuleuven.be
ICTS-S-RDSIVAT1.tad.kuleuven.be
testjo.t.icts.kuleuven.be
voxtron.icts.kuleuven.be
synth.cs.kuleuven.be
*.apps.sp2019.groupware.oad.icts.kuleuven.be
www-sso.groupware.t.icts.kuleuven.be
blackboard-saas.t.icts.kuleuven.be
*.apps-sp2016.groupware.oad.icts.kuleuven.be
kulapp.t.icts.kuleuven.be
groupware.tad.icts.kuleuven.be
fys.kuleuven.be
squaredup.q.icts.kuleuven.be
icts-s-scomgw2.lunah.kuleuven.be
extranet.kuleuven.be
dagkrant.kuleuven.be
fys.kuleuven.be
icts-s-exmbx23.luna.kuleuven.be
ccis-iam-voucherservice.q.icts.kuleuven.be
*.sp2007.groupware.oad.icts.kuleuven.be
spub.icts.kuleuven.be
scanner.ghum.kuleuven.be
butler.cs.kuleuven.be
gbw-s-llk01.luna.kuleuven.be
tickatlab.q.gbiomed.kuleuven.be
TD-GBS-metasys.icts.kuleuven.be
*.apps.ncbgroupware.oad.icts.kuleuven.be
icts-s-dc2.tad.kuleuven.be
prep.cc.kuleuven.be
sg1.icts.kuleuven.be
apitest.feb.kuleuven.be
*.kuleuven.be
mtm.kuleuven.be
*.groupware.t.icts.kuleuven.be
iiw.kuleuven.be
lioo-hardware.icts.kuleuven.be
testjo.t.icts.kuleuven.be
tfs.q.icts.kuleuven.be
sp.biw.kuleuven.be
graduateland.com
webi11.aps.kuleuven.be
gbw-s-vibdock01.luna.kuleuven.be
nexus.icts.kuleuven.be
ICTS-S-RDA1.tad.kuleuven.be
fs.q.icts.kuleuven.be
wayf.q.icts.kuleuven.be
my.kuleuven.be
qmp4e4.cc.kuleuven.be
nieuws.kuleuven.be
co-de.experiments.cs.kuleuven.be
hiva.esat.kuleuven.be
pool01.icts.kuleuven.be
www.cosic.esat.kuleuven.be
icts-p-idm-12.lnx.icts.kuleuven.be
toledo.q.icts.kuleuven.be
legacy-owa.groupware.kuleuven.be
find.kuleuven.be
listserv.icts.kuleuven.be
ICTS-S-RDSLIO1.tad.kuleuven.be
lidkaart.alum.kuleuven.be
*.apps-sp2016.groupware.z.icts.kuleuven.be
GHUM-S-VSH00.LUNA.KULEUVEN.BE
search.t.icts.kuleuven.be
nextvib.gbiomed.kuleuven.be
icts-d-ua-3.lnx.icts.kuleuven.be
rdweb.icts.kuleuven.be
pad.esat.kuleuven.be
icts-d-idm-3.lnx.icts.kuleuven.be
onderwijsaanbod.kuleuven.be
find.t.icts.kuleuven.be
webp12.aps.kuleuven.be
find.q.icts.kuleuven.be
wmsopleiding.cc.kuleuven.be
*.am.thomasmore.ezproxy.kuleuven.be
icts-s-crdwts1.tad.kuleuven.be
ida2014.org
icts-s-dc1.qad.kuleuven.be
drives.kuleuven.be
lyncaccess.kuleuven.be
icts-s-sfbt01.icts.kuleuven.be
stage.soc.kuleuven.be

Certificate

The complete raw certificate details for faber.kuleuven.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GJgORAB95G03+oL1KoC
ldWA9S9VDXDhYcSS10W+dkKHAfAIkaSbxGPIeOTjCIjFBBL2fF43m+ItGEnHKP2g
bcZG1l/p8vNEjRrLVSoiJUI7QZkOGOAaLC9MpzlcBZ0svi0jk9S/y0yF3+nZ3lE2
vOwnKadFmrLNGir2fxf9Au/zQo67THxz7jY9gcT9hDRl5UckKt3TxMAr2OKQlpW5
1NkawEUBwWS3iyGNa2N+ErGT3FLaU+AolEvZsYe2XeavsRmeqydE3dZ1+nnve9Ko
BmvFeW237yWMaRuseovXYF7Wttd3fQ+Kvn2tnmgH17EJlanXlWoDss3ChEsZh05T
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80260748361889923187583446617693935492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vlaams-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katholieke Universiteit te Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICTS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faber.kuleuven.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27315984822541213528354402517772040847878083427459090583201836146383992377914558804689111442579979002168111072236335817366546114517356603337546784181738224279994306585442747829444643419093710590672312132745747173055386431965845233682053927517421230879910447028964455757137918951748737500690260429750909820360559765660450161259482583862480426971405885271554819870293731401029155681248659433513748162868672608135983196350285507748953399726589750424427352251943000195053083183646778576602600390238974079095768744544877128054521185006282435611882847324692461886398527874784728115947238520454768871870707065043995715326723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b8ab12db7133be76303ede9c48df4c4c1fcd596
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faber.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faber.kuleuven.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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