dsi.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 77:b8:ef:6f:f4:7d:d6:a6:4e:60:c1:9d:d6:d7:cc:ed was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 77:b8:ef:6f:f4:7d:d6:a6:4e:60:c1:9d:d6:d7:cc:ed
Serial Number (int): 159138370486263180769870050346300591341
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 20:f7:21:3a:b1:d9:d2:eb:65:c3:95:55:17:75:62:fd:8e:ca:d3:2c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): cb:a7:be:94:d7:b2:fe:99:eb:e9:a8:b8:15:c0:99:75:31:c6:cb:41
Fingerprint (sha256): 06:a8:50:a8:be:41:b2:95:2e:c5:78:2b:8e:19:80:f9:4a:91:75:17:e0:24:c3:a4:3a:2b:c6:99:80:d7:e9:9d

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate dsi.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsi.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsi.insa-lyon.fr
www.dsi.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for dsi.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzev3GNTWHdHsezOCLBiM
nhQQVt0/4ZLg9ysQuDAx3sqIq5RvPQ20ZCA96o4WALHMcNtrrzBst5dkLeITh+Q3
LqNjnLYru14gUD0R4BVM05C6Bpus8manuFbdVwfcQbaa63gRlcIQAU3Zwk+FqvFy
et77n3v03UMONWS9gTHoBEWMmsJ0qtogBgPhlpBAJ+1fA9FGSeuG5QO7EePOJi7q
SWaOohROe38FVhkmdKnomPwuYZfxvgZ9WPNYlWbyo2ne8/hYjbJ8QqY3jbMTohCP
QWGR4hELGtz1quHS5CbjfIH2Ve8pOEMKgX70Z3SrllmYXfNFlTZijnuyb4RDk9X+
koLjErMI39LsSgTjRQQKDVoRy/4MU27TCPOo7unwvJTXUxMtNW7ys4t0PQzuVCr6
VgNoPJBbuj0vxfxNPEkHu3oSLNYN7cXrra03yoo6OqTiN9GIY7GHeY7oBj03+Zlh
o7RcJ7qpwxLklyCj8T7v1xJTpOIIPMqqC54xqbCdolW4qZvTIS5IZADzXeSTTMlZ
4X5iR6JnnkoxTL+viFTmLAqC1OaILNKgJ0EIap7l448c8vPoAtcZsJml+oQRLaB+
epegMfLUuFXYsEf8bKuyPEkpKgmNwrOWc9IFkhIQvNpCPnD3Od2gPHq3DZHUgHp6
AAgaktWgQXoQxKs3JZMIJ6UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159138370486263180769870050346300591341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsi.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840087401603621266588295281043448597171632354370815971415698092199860271827029670981588185112662069206783443997856304807122993548017787852176022674035829132719260893398651700873243965600929445632929788070741127661325977365512488865672000073178850130936068773521890784047195073639352073136013443000729780408434959308173104355662559939958877357413064109327254763635151609802810032153065085029457005155193840058759303014192680180114868494442719195557050150531625834043273618451538449637631526015908103867557383499979289369825351990798128057091480816049788537933390955038743284123256011350978041616638080882332768029025431722416920520269974837021935862730548692931499094738986728040038293613535788040376183266717104835944223649672858729726604228877757828494931280463232752767887779972981975802098253046423035970166294918814163825884784209982666749563429222009989825834114779218398417987623755944205882127102336658071817359220508231950923681326418989261691061818420018939613247608777823908445589899543060422802029974073042107352393694527785036527776838471502764288775079753026550992004546512016426888149172232554183288352442994366255843833198671798846837410345672330319476250570005902728400335965503520044260574431603632001165798849128357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20f7213ab1d9d2eb65c39555177562fd8ecad32c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsi.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000e723c7a70eec00c516d6c604a6b8c681a05d9295b6080e7656424c7807a90b74d39f82e84976f1a0a4da39742254954d56acfca220da9956773a61083c3a8debfea4d98f46278a6593f3fb715e6a84ed192e602f175a2837f3c1e689556e376b4784e533e78e72c52eb93a2f9d0d2398711e0b74b0388e136fbc1163fc8dbb26a601495d2da070557445d43625b1ffe66bdf1cca40f730bfea24586db3ee72df63f5510bc3d04de3f3de1a1c12d65eb22a2a46629ae122a1346fe780f557fa61269035f2f9bb8b56c11cb5baf33c7f457311f61a100f94e8b0234240c0a997205506f7af0664126e59c9518d05323475fd222a142f923a0ed7f6fb2e7fc7e36e0bdbae4ff70e278afca135cc43175ab433373f4f258d7876d9f6b746caf378d80779c6ce7f27ba60814a7c0a8d48381171691080dc74b94787f048ca6ff03cd8c03bf54d213f2a5d43a6840e97ffe145d3c63efc1f379535be02e503e2efafd64493e29b0764a554702564e859bbd0e95a2c0a9f3d9ba80529dc15b97c60c8a0d2a89f45f43fe21e795a4ce0ddf6f038bd2acda4a20080932749f6c09fbfc39d90f2f29e780789bd049af428249b7f9f8dd05153ba11f948a16dd5746bf0b7d485be15f70278a337a26677c20e9d3829f96e4d8faa31177f97d5ee178a6e7a5fc3e2fe5fcb30627bafacc177c4d8c92ca6eb184e4ad83a1ccca5e5de418a94b