www.eneco.nl

- N.V. Eneco Beheer -

Issued by KPN BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 7b:18:49:14:b6:70:8b:dc:12:61:f0:ca was issued on by KPN B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

N.V. Eneco Beheer

Company registration number: 00000003242469700000
Organization: N.V. Eneco Beheer
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

KPN B.V.

Organization: KPN B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:18:49:14:b6:70:8b:dc:12:61:f0:ca
Serial Number (int): 38096015542530486601244602570
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e4:58:c8:20:4b:ee:b4:7a:2f:b2:7c:95:70:94:27:45:13:6f:5f:00
AuthorityKeyId: c3:9a:a6:7b:5e:74:2b:82:b6:c6:72:fd:74:4e:85:d2:97:cd:fd:18

Fingerprint (sha1): 48:db:1e:7c:d4:8f:39:a6:8a:05:8a:45:01:96:9e:bd:d3:2a:cb:0a
Fingerprint (sha256): 03:f4:d1:48:fe:18:9a:d5:f4:04:25:dd:c8:ce:71:27:13:b3:11:27:67:36:a3:0f:ad:3c:4a:5c:3b:fe:23:72

Issuing Certificate URL: http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer

Revocation information

OCSP Server: http://g3ocsp.managedpki.com
CRL Distribution Point: http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl

Check the revocation status for certificate www.eneco.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eneco.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.eneco.nl

Other certificates including the domain name eneco.nl

(limited to 100 certificates)
anwbvriendenvoordeel.nl
transactions.welkom-bij.eneco.nl
www.acc.eneco.nl
www.acc.eneco.nl
www.acc.eneco.nl
zakelijk-offerte.welkom-bij.eneco.nl
www.eneco.nl
zonnepanelenvoordummies.eneco.nl
jaarverslag2018.eneco.nl
www.acc.eneco.nl
mkb.eneco.nl
mijn.welkom-bij.eneco.nl
vriendendienst.eneco.nl
www.acc.eneco.nl
www.acc.eneco.nl
tst.oc.os.eneco.nl
www.acc.eneco.nl
schedulemaker.com
webmail.eneco.nl
www.eneco.nl
mijn.eneco.nl
anwbvriendenvoordeel.nl
www.acc.eneco.nl
www.acc.eneco.nl
prijstool.eneco.nl
contract.eneco.nl
www.eneco.nl
prijstool.acc.eneco.nl
inloggen.eneco.nl
www2.test.eneco.nl
vrienden.membergetmember.co
www.eneco.nl
www.eneco.nl
forum.eneco.nl
email.eneco.nl
inloggen.eneco.nl
anwbvriendenvoordeel.nl
anwbvriendenvoordeel.nl
binnenkort.eneco.nl
nieuws.eneco.nl
energyadvisor.eneco.nl
www.eneco.nl
tst.qis.eneco.nl
anwbvriendenvoordeel.nl
budgetenergievriendenvoordeel.nl
ketels.eneco.nl
dev.cf.os.eneco.nl
lt.oc.os.eneco.nl
warmtewinnerinschrijven.eneco.nl
mijn.enecozakelijk.nl
www.eneco.nl
*.eneco.nl
energiemanagerexpert.eneco.nl
speech.eneco.nl
app.eneco.nl
quby.eneco.nl
anwbvriendenvoordeel.nl
contract.eneco.nl
gisportal2.eneco.nl
www.acc.eneco.nl
*.acc.eneco.nl
anwbvriendenvoordeel.nl
jaarverslag2018.eneco.nl
mail.eneco.nl
prive.eneco.nl
prod.energyadvisor.eneco.nl
cf.os.eneco.nl
duurzaamwonen.eneco.nl
www.eneco.nl
elektrischvervoer.eneco.nl
services-wa.test.eneco.nl
businessportal.eneco.nl
mijn.eneco.nl
www.acc.eneco.nl
anwbvriendenvoordeel.nl
budgetenergievriendenvoordeel.nl
acc.qis.eneco.nl
zonnepanelenvoordummies.eneco.nl
anwbvriendenvoordeel.nl
prijstool.eneco.nl
*.eneco.nl
anwbvriendenvoordeel.nl
anwbvriendenvoordeel.nl
mail.eneco.nl
mail.eneco.nl
enecozakelijk.nl
nota.eneco.nl
energiemanager.eneco.nl
webmail.eneco.nl
e-sites-p.eneco.nl
mail.eneco.nl
nieuws.eneco.nl
toonopafstand.eneco.nl
tellafriend.ibood.com
zonnepanelenvoordummies.eneco.nl
zonnepanelenvoordummies.eneco.nl
energietegoed.eneco.nl
afspraken-acc.eneco.nl
zonnepanelensimulator.eneco.nl
www.eneco.nl

Certificate

The complete raw certificate details for www.eneco.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m7/PAWsPem+b+ET2Slo
OxKfwgpx+C+imjkbD1+v87gzbUNwjmR0m32Qeqtj2tzgb6/G4YKSpwYe/oHx5Z3d
8i6NGlmbF+9y6YAiU0yzRb737bjHcvyiwdGcPrchN0GIJrcs0kB8LKJUYjIAIwzH
tx5YJr/5e9szXdfrnv64PDlMQHtsdA7XmyuZ4es9akcbVmZJfXSbeGwh5lybyopm
pgvf+c2NlXmE5NCzgBtwvgqVIc11iJpV5rfkOITmz3RLSgMA+2MJKJkjgYigS4Lu
Ii3ec4zsqg3oKEYcrBlpfD+WVwIqlaGBryfckka9SD87x9ARb5nyhyP0UYlXg/f7
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38096015542530486601244602570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27124701'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 13:10:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-19 13:10:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'N.V. Eneco Beheer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003242469700000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.eneco.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27574685148031085367844176411303551374518853078008072470724230788747415871438636261471040825462876918494721569497160580413991028797678863347337122938363797763130241104031912743201206953752239194911587237859070599286960009275142603330603111926891594057909384862996926430944197452061400441554051880987663760948073199197838948219472126338996046101381788175820402338989225738710131172603890600327228823837154100302948838786854006268121846351065622313067636676594115806423542266955509639050120641351367930065443474282963244138803972401762472421538561108470431923423212105193805763532108228315919328752269740509342253710321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/CAcerts/KPNBVPKIoverheidOrganisatieServerCAG3.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g3ocsp.managedpki.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e458c8204beeb47a2fb27c9570942745136f5f00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39aa67b5e742b82b6c672fd744e85d297cdfd18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Op dit certificaat is het CPS PKIoverheid van KPN van toepassing.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.managedpki.com/KPNBVPKIoverheidOrganisatieServerCAG3/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eneco.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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