learnonline3.cisl.cam.ac.uk

- University of Cambridge -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 60:af:61:94:5f:71:61:8e:0f:75:ae:c4:fd:9e:31:bd was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Cambridge

Organization: University of Cambridge
State / Province: Cambridgeshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 60:af:61:94:5f:71:61:8e:0f:75:ae:c4:fd:9e:31:bd
Serial Number (int): 128516518694633270197656121464279937469
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d2:79:87:76:97:62:6f:b4:a0:5d:70:df:dc:d8:2a:a7:b5:8b:27:13
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c6:10:22:6b:e8:92:b4:a2:9e:45:da:5e:10:ec:aa:c4:71:b3:00:ca
Fingerprint (sha256): 01:48:93:b8:76:3a:68:3b:e0:a2:d0:66:c5:28:4f:61:9d:9e:97:45:80:0d:f9:6d:bd:d2:1f:e8:d5:17:e8:59

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate learnonline3.cisl.cam.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learnonline3.cisl.cam.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learnonline3.cisl.cam.ac.uk
www.learnonline3.cisl.cam.ac.uk

Other certificates including the domain name cam.ac.uk

(limited to 100 certificates)
2015.gaobase.admin.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk

Certificate

The complete raw certificate details for learnonline3.cisl.cam.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlwq2qCIoX+a5cMdFjDR
QEAd6gjNmPrbpBzeL7eo5ePKyxCLcV9MENSQV0cIL+pCze8z7tiwVOD3bgKVygnl
55d9w4HSOEQmXRtLFEmGZyaxDwE2gzt+cctYruyqC5i6vh8J90StOJvlCObZeFz9
OYgFNon2FtI2A/ceGZgQA+1IZosGugf0JG5CGzHRP1DhYJBar7bk3XfVLxTGrTc0
/WztFdWJlFrB+BkSIt8TBBccvrOXgUy8LErTbW5i3w0ffmsLF3Y+4KQVgf6zWID6
fN2w7mBs2gJZXode/e8l6W3GHrEgi0RB48XsSBWUEFIGSTclyx2Wip4wzj//Tmx5
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128516518694633270197656121464279937469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridgeshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learnonline3.cisl.cam.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25040633821396105168451167899550979402968376186092006162097905652105218298945897948190724221737012022924423991681690912495581378773336916946176820840371944070651276981620577615827151743788894045405185483171691422756856618912044939803980875017824341921568173830150067400036215682526584817252744780995300696942492309437211662695407798602964570121610007445351797148590017541708803037667761267363537665150175743628759890627732484239447339589088745482315307863030109764971452896578899493385557710719946127826242876841541165464206250729107253907384585607188148729584240743021928234109198411659619139284434882852511120390591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d279877697626fb4a05d70dfdcd82aa7b58b2713
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnonline3.cisl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnonline3.cisl.cam.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a43d54b060000040300483046022100986434f6d61ff2a7174a35d1df8261dceec0813f47fc852a3290e181ec08f582022100c6f6c50feb908eb31fa8e8f9efb4e9c15ec55f98190a8f1d27d0fef60ec11be0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a43d54b56000004030047304502210099f48edce1681c9016d865a2fd7657616d9bea7d06372267139dc70de53e4959022025ebe93476618abb603b446faa0fdaf32fdcb0ad43aeb858796fa44e063d0f7e007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a43d54b7a000004030047304502201068e3a16282fc95eda360dd238e21dcecacdeec224b5a718ed9017554b32816022100d66e79dd8c22b979c8c5aa509a3f7901846b0ca804283704b3f5752bf47d9500
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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