lcg2mon.ific.uv.es

- Universitat de Valencia -

Issued by TERENA eScience SSL CA 3

About this certificate

This digital certificate with serial number 0d:6e:71:b3:6c:72:af:f3:45:0b:a8:20:6e:9d:da:6f was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitat de Valencia

Organization: Universitat de Valencia
Locality: Valencia
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:6e:71:b3:6c:72:af:f3:45:0b:a8:20:6e:9d:da:6f
Serial Number (int): 17853422727332069584772083981756521071
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:8c:d0:ab:9d:d1:71:d5:8e:5d:cc:1e:81:73:6e:1f:2e:f2:e0:6c
AuthorityKeyId: 29:aa:1b:6e:30:f9:30:67:63:a5:87:26:0c:ac:f1:81:9c:69:74:49

Fingerprint (sha1): e2:88:e2:2e:c8:fc:4e:7b:ad:11:eb:fe:49:ac:9e:70:5f:0a:3e:81
Fingerprint (sha256): 01:bf:d1:dc:23:e8:27:06:82:61:f9:c2:6c:f2:ba:9b:7b:92:5a:a7:87:86:c7:29:b2:06:7f:78:ed:f4:09:e9

Issuing Certificate URL: http://cacerts.digicert.com/TERENAeScienceSSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENAeScienceSSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENAeScienceSSLCA3.crl

Check the revocation status for certificate lcg2mon.ific.uv.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lcg2mon.ific.uv.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lcg2mon.ific.uv.es

Other certificates including the domain name uv.es

(limited to 100 certificates)
bdusu.uv.es
lhcpheno.ific.uv.es
ieee.uv.es
evalu137.ific.uv.es
uvapp.uv.es
mupart.uv.es
tapnas.uv.es
lcg2mon.ific.uv.es
www.uv.es
irt.ific.uv.es
epo.uv.es
mooc.uv.es
glass.uv.es
storage3demo.ific.uv.es
symposium.events
raspito1.uv.es
idal.uv.es
webservsec.uv.es
aulaarchivo.uv.es
correo.uv.es
tapec.uv.es
angelat.uv.es
moodle.uv.es
jirat.uv.es
webges.uv.es
admundsen.ci.uv.es
dmk.uv.es
dockprod.uv.es
imp.ific.uv.es
enquest4.uv.es
tapnas.uv.es
webgrec.uv.es
imageclef.uv.es
hodor.uv.es
hyperion.uv.es
references.ific.uv.es
entresiglos11.uv.es
cectmox5.uv.es
matronasmadrid.symposium.events
trobes.uv.es
symposium.events
sestud.uv.es
www.uv.es
research.uv.es
esamsv03.uv.es
piwik.uv.es
naslifalta.i2sysbio.uv.es
symposium.events
roderic.uv.es
radioastronomia.uv.es
uvmecenatge.uv.es
tapnas.uv.es
research.uv.es
ai4oceans.uv.es
preincoming.uv.es
tapec.uv.es
enquest4.uv.es
caucedo.uv.es
dmk.uv.es
alufis35.uv.es
research.uv.es
astrokit.uv.es
bdusu.uv.es
webges.uv.es
webstr.audio.uv.es
rififi.uv.es
jira.uv.es
clepsidra.uv.es
encuestas.uv.es
leito.uv.es
symposium.events
naslifalta.i2sysbio.uv.es
webgrec.uv.es
references.ific.uv.es
evauwm.uv.es
etsetv.uv.es
leito.uv.es
admundsen.ci.uv.es
symposium.events
sonarqube.uv.es
radioastronomia.uv.es
nextdesk1.ific.uv.es
cectsyn.uv.es
citas.uv.es
tiqueting.uv.es
sonarqube.uv.es
software.uv.es
sefuv.uv.es
llistes.uv.es
espejo.uv.es
apixat.uv.es
sestud0.uv.es
webific.ific.uv.es
inmaculados.uv.es
artelope.uv.es
corral0.uv.es
silknow.uv.es
susblaib1.tel.uv.es
webges.uv.es
tapec.uv.es

Certificate

The complete raw certificate details for lcg2mon.ific.uv.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJDzZH5ebYiCzZtfRL00
MuTtOWY8ZEddJle4M4qESmlr3S5qLQTGx2HsU+VDhYbA/tV3GvJ2NlA2SKZVI5F9
UREzuTrW9ApmGq9nsbJ2kmf/aY4LJf4x4EQS+BbI0qIFmnGvRPK6sXgqRiK9Aw/x
c9uLDAJoobxGQRvHNjtQZnf+4l04RRz9NZkyLCjyAQG1yoWOpUp6Dq7cYJTLVTdn
VJTM24drRNSKS/NvkP6KZDQmPzvuJH3I0XLf2cIc6gmwNJ2Kmx2h9wKXmsX2RLAD
0IdBNIvazWvrPNr3oRLnqUfs//YRYUaMQvT9FS7lYhIvmuePt4RYgI5gnaOUDGzy
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17853422727332069584772083981756521071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA eScience SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valencia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitat de Valencia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lcg2mon.ific.uv.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25824092092983652862579377644586991877584138777666152408116949212965061849458012976099590003203497136883534980742080243010611333738956131593739940570558511032975835259893486708818357107337171364179090602816225039203435576385136228937352251445186630215084604204484658200663808265145636718241170237809767767599018385357537421192129266469635592517487047710514624922550727305552510726305967907528881503039432142443287323704993820989179079743386875993479495125788907465974631392468439799165121436911122386742092438349143933570025071695006259559284332327601018088952983214372760377592703428375285710178701505836265746788997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 29aa1b6e30f9306763a587260cacf1819c697449
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c8cd0ab9dd171d58e5dcc1e81736e1f2ef2e06c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcg2mon.ific.uv.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENAeScienceSSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENAeScienceSSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.31.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENAeScienceSSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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