www.lbf.fraunhofer.de

- Fraunhofer -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 48:da:b9:d4:af:ea:14:d5:e0:02:28:12:bc:17:5f:a4 was issued on by GEANT Vereniging.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 48:da:b9:d4:af:ea:14:d5:e0:02:28:12:bc:17:5f:a4
Serial Number (int): 96840105508264527608314620034896322468
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 01:5a:e9:f1:72:a0:eb:6a:8f:a3:a1:3e:43:9d:96:31:29:e0:8f:e8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ab:30:1c:50:61:54:83:9a:52:fb:31:d4:28:db:c3:14:c5:be:5e:98
Fingerprint (sha256): 07:9e:8f:a5:f4:63:ac:08:25:8a:da:ac:0f:eb:e1:0c:04:54:8f:0b:d0:c7:66:b2:41:13:d5:78:e9:fd:03:0f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.lbf.fraunhofer.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lbf.fraunhofer.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lbf.fraunhofer.de
lbf.fhg.de
lbf.fraunhofer.com
lbf.fraunhofer.de
lbf.fraunhofer.org
www.lbf.fhg.de
www.lbf.fraunhofer.com
www.lbf.fraunhofer.org

Other certificates including the domain name fraunhofer.de

(limited to 100 certificates)
vhfraqototcs03.hec.fraunhofer.de
guest.mevis.fraunhofer.de
hmi-umfrage.iao.fraunhofer.de
www.iitb.fraunhofer.de
igb-bitwarden.igb.fraunhofer.de
wnlab.hhi.fraunhofer.de
webmail.fit.fraunhofer.de
nm-service.iais.fraunhofer.de
exilligare.iao.fraunhofer.de
bscw.izb.fraunhofer.de
applik-idz08.iee.fraunhofer.de
immufw-m.imm.fraunhofer.de
social.izm.fraunhofer.de
vceg.hhi.fraunhofer.de
vpn-gaeste-hh.ime.fraunhofer.de
netman.ipk.fraunhofer.de
www.umsicht-suro.fraunhofer.de
llcs-vi2.sit.fraunhofer.de
netsight.ise.fraunhofer.de
guest-lan2.zv.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
maverick.iao.fraunhofer.de
www.vision.fraunhofer.de
spitzentreffen.edu.cell.vfk.fraunhofer.de
kaa.iais.fraunhofer.de
vpn.fep.fraunhofer.de
iwu.crm.fraunhofer.de
tls1.ws.fraunhofer.de
filedirector.imw.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
sharepoint.sit.fraunhofer.de
muc-gv-dna.aisec.fraunhofer.de
issues.mevis.fraunhofer.de
ksi.scai.fraunhofer.de
iwes-spoke-pri.intra.fraunhofer.de
pwsafe01.iis.fhg.de
applik-idz21.iee.fraunhofer.de
vpn.idmt.fraunhofer.de
vdi.izfp.fraunhofer.de
vindex.fit.fraunhofer.de
ivv-dd.list.fraunhofer.de
nettools.igd.fraunhofer.de
cq-publish2.ws.fraunhofer.de
projekte-lfs.iff.fraunhofer.de
ipa-uipath140.ipa.fraunhofer.de
humit.fit.fraunhofer.de
iap.list.fraunhofer.de
listsrv03.fraunhofer.de
status.arb.fhr.fraunhofer.de
vhfraqototaw01.hec.fraunhofer.de
keepass.iosb.fraunhofer.de
xcom.isst.fraunhofer.de
mellon.hhi.fraunhofer.de
maestral.fit.fraunhofer.de
cryptshare.fraunhofer.de
zerobin.sit.fraunhofer.de
aem-www.iese.fraunhofer.de
wqtool.igd.fraunhofer.de
vhfraqototwslb.hec.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
subdepot.mevis.fraunhofer.de
wpa.emi.fraunhofer.de
www.isc.fraunhofer.de
blockchainlab-git.ipk.fraunhofer.de
www.aachen.fraunhofer.de
test.servicedesk.fraunhofer.de
gordian.ipa.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
exim2.iao.fraunhofer.de
pathme.scai.fraunhofer.de
www.subi2ma.fraunhofer.de
vpn-gaeste.iosb-ast.fraunhofer.de
fener-webport.ise.fraunhofer.de
upload.c.fraunhofer.de
h2t.intern.ise.fraunhofer.de
ldap.ibmt.fraunhofer.de
piwik.ipk.fraunhofer.de
gitlab-i.eas.iis.fraunhofer.de
reaalmarketplace.universaal.info
kub001.iao.fraunhofer.de
download.scai.fraunhofer.de
openproject.sit.fraunhofer.de
helpdesk.imw.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
ipib.ci.moez.fraunhofer.de
vpn.s.c.fraunhofer.de
vpn.ivi.fraunhofer.de
sand2.fokus.fraunhofer.de
diasim.igd-r.fraunhofer.de
miraculix-dmz.ivi.fraunhofer.de
portal.moez.fraunhofer.de
vpn.iem.fraunhofer.de
remote3.fraunhofer.de
zf-prognose.iao.fraunhofer.de
dynamo.sit.fraunhofer.de
dci2.easw2k.eas.iis.fraunhofer.de
support.igd-r.fraunhofer.de
tfs-extern.ibp.fraunhofer.de

Certificate

The complete raw certificate details for www.lbf.fraunhofer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96840105508264527608314620034896322468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lbf.fraunhofer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805718588271207541150335947188284762975744558514989157785519773952019094451209821321479386658434049631374563662999217716689481524465308778017282758594055203031745662502572749415384509858520437468345377200104130391751179413875390276637951967232127246159981181295967926607750556321997388659388256358409326178634299896693694837220200547961700057423190014446298954972981241764493053420452551906940717435909807695264851722167828772640505164311644960740310702494694758230275567770520168607376464163533421802437959652063447815182831415859975654936194123378449162103117216613858182326771347532000437796064224389824241004528298449001422116208093450795563708088478930120622700632104099293162144007831755774721070016494962735842102293366607040746830553284948319275575300213233338852102304991373937735216352290856664630938259426648008034250595884305222643727728075799173758066745984245599196419637372471871167046313468405592707583738394702179619968532540823034606339465616106980916211197992852009827962514798903752485976731082983089845639573593126057403945435936778564979296967034805102068793001842069026674637875525527722466483264058717756796218651748547396476696081632974228519105841980241156350644943297545942108698475273888497511263571296343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							015ae9f172a0eb6a8fa3a13e439d963129e08fe8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbf.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbf.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbf.fraunhofer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbf.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbf.fraunhofer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbf.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbf.fraunhofer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbf.fraunhofer.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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