vpn04.ac-aix-marseille.fr

- Académie d'Aix Marseille Rectorat -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 59:eb:27:77:a5:40:25:aa:a1:82:e8:09:34:ac:36:4c was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Académie d'Aix Marseille Rectorat

Organization: Académie d'Aix Marseille Rectorat
State / Province: Provence-Alpes-Côte-d’Azur
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 59:eb:27:77:a5:40:25:aa:a1:82:e8:09:34:ac:36:4c
Serial Number (int): 119522281879881654541867953404429219404
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:1e:1a:a6:ba:b0:be:d5:03:cd:00:76:a0:bd:67:1a:ac:f4:85:48
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 92:9c:ec:2d:3d:f4:9d:21:0a:77:8e:19:09:f7:ca:fa:a2:fa:24:1c
Fingerprint (sha256): 08:01:42:8e:4f:00:48:0d:56:42:29:8f:35:2b:80:a0:6f:7d:40:46:44:54:d3:75:bd:18:83:21:3e:72:f6:b2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate vpn04.ac-aix-marseille.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn04.ac-aix-marseille.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn04.ac-aix-marseille.fr
vpn02.ac-aix-marseille.fr
vpn03.ac-aix-marseille.fr
vpn04.in.ac-aix-marseille.fr

Other certificates including the domain name ac-aix-marseille.fr

(limited to 100 certificates)
clg-annefrank.ac-aix-marseille.fr
clg-giraudes.ac-aix-marseille.fr
alerte.ac-aix-marseille.fr
oasi.ac-aix-marseille.fr
clg-garcins.ac-aix-marseille.fr
clg-olympedegouges.ac-aix-marseille.fr
publinet-test.ac-aix-marseille.fr
vpn01.ac-aix-marseille.fr
www.clg-garcins.ac-aix-marseille.fr
cfaip.ac-aix-marseille.fr
si1d.ac-aix-marseille.fr
cal.ac-aix-marseille.fr
bv.ac-aix-marseille.fr
clg-pins.ac-aix-marseille.fr
exaco.ac-aix-marseille.fr
ent.acar.ac-aix-marseille.fr
pydio.ac-aix-marseille.fr
assistance.ac-aix-marseille.fr
bv.ac-aix-marseille.fr
clg-moulin-salon.ac-aix-marseille.fr
clg-veil.ac-aix-marseille.fr
vpn04.ac-aix-marseille.fr
ent.clg-olympedegouges.ac-aix-marseille.fr
clg-roydespagne.ac-aix-marseille.fr
caldav.ac-aix-marseille.fr
id.ac-aix-marseille.fr
clg-olympedegouges.ac-aix-marseille.fr
kdecole.ent.ac-aix-marseille.fr
teleservices.ac-aix-marseille.fr
www.clg-olympedegouges.ac-aix-marseille.fr
clg-mitterrand-veynes.ac-aix-marseille.fr
www.pedagogie.ac-aix-marseille.fr
clg-roydespagne.ac-aix-marseille.fr
dali.ac-aix-marseille.fr
foncstag.ac-aix-marseille.fr
clg-roydespagne.ac-aix-marseille.fr
publinet.ac-aix-marseille.fr
telephone.ac-aix-marseille.fr
alerte.ac-aix-marseille.fr
ocean.ac-aix-marseille.fr
appli2.ac-aix-marseille.fr
clg-forbin.ac-aix-marseille.fr
elise.provence.in.ac-aix-marseille.fr
assistance.otp.ac-aix-marseille.fr
calendar.ac-aix-marseille.fr
bulacad.ac-aix-marseille.fr
clg-darbaud-salon.ac-aix-marseille.fr
si1dint.ac-aix-marseille.fr
teleservices.ac-aix-marseille.fr
elise.provence.in.ac-aix-marseille.fr
clg-fontreyne.ac-aix-marseille.fr
clg-vauban.ac-aix-marseille.fr
oasi.ac-aix-marseille.fr
clg-gassendi.ac-aix-marseille.fr
rc.otp.ac-aix-marseille.fr
clg-claudel.ac-aix-marseille.fr
ent.acar.ac-aix-marseille.fr
clg-guehenno.ac-aix-marseille.f.ac-aix-marseille.fr
www.lyc01.ac-aix-marseille.fr
delibnet.ac-aix-marseille.fr
cyclades.ac-aix-marseille.fr
ia13.ac-aix-marseille.fr
clg-guillestre.ac-aix-marseille.fr
clg-malraux-marseille.ac-aix-marseille.fr
ent.clg-annefrank.ac-aix-marseille.fr
tsm.ac-aix-marseille.fr
clg-dumas-marseille.ac-aix-marseille.fr
bulacad.ac-aix-marseille.fr
interne.in.ac-aix-marseille.fr
sympa.ac-aix-marseille.fr
notes.clg-giraudes.ac-aix-marseille.fr
appli.otp.ac-aix-marseille.fr
zephir.ac-aix-marseille.fr
clg-batie-neuve.ac-aix-marseille.fr
smtpadm.ac-aix-marseille.fr
fichetab.ac-aix-marseille.fr
clg-milhaud.ac-aix-marseille.fr
www.clg-schoelcher.ac-aix-marseille.fr
appli.otp.ac-aix-marseille.fr
adcd05o36501.cd05.ac-aix-marseille.fr
www.clg-darbaud-salon.ac-aix-marseille.fr
cal.ac-aix-marseille.fr
isoprod.ac-aix-marseille.fr
www.clg-hauts-de-plaine.ac-aix-marseille.fr
clg-arc.ac-aix-marseille.fr
e-greta6.ac-aix-marseille.fr
clg-pesquier.ac-aix-marseille.fr
webasp.ac-aix-marseille.fr
foncstag.ac-aix-marseille.fr
dafip.ac-aix-marseille.fr
clg-tallard.ac-aix-marseille.fr
www.ac-aix-marseille.fr
clg-mitterrand-veynes.ac-aix-marseille.fr
foncstag.ac-aix-marseille.fr
fichiers.ac-aix-marseille.fr
buldep05.ac-aix-marseille.fr
clg-vieuxport.ac-aix-marseille.fr.ac-aix-marseille.fr
seshat.ac-aix-marseille.fr
smtp.ac-aix-marseille.fr
clg-chateaudouble.ac-aix-marseille.fr

Certificate

The complete raw certificate details for vpn04.ac-aix-marseille.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119522281879881654541867953404429219404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Provence-Alpes-Côte-d’Azur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Académie d'Aix Marseille Rectorat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn04.ac-aix-marseille.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726269244612061193539535175670410939985732987004009019937470459948503328662213027386800547996622253075378349094532588581073231626812465491812187567976344424783903697926607568195868488381366777352661906851000312430707906599097541779217702615373076986579650647713944616099246658306539136418843124822211225098432221618101079467802045683146339169186203688019936534473843720591723471966180207768203100707947906728614104162795743234471993559892806259479452627699024339584772074346968773532233049914661507684692167399241522150702482688484348492210609421665064970339587462818601073437044625643907091371609386350821696653646822292761273084808714638023213978060569071007735310796885281861741606324118436413572402564239166754877977313030520615086368790359883724641600107886205068254931898538276115920982847742979351363559549695985218654950515121654762352265148491344634508786792988468844730394706207506112549457494961888658883154524846617177832212591087020727505505652491337632052004147290027068749328790320455619085394118908888518294307380234907674971482949882967425402523338424212489608394634465635768823278599135707309616133346399178869648147216553091072756329352109657818794066993310364184870124780027881435165881402310084550400173730378507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d71e1aa6bab0bed503cd0076a0bd671aacf48548
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn04.ac-aix-marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn02.ac-aix-marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn03.ac-aix-marseille.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn04.in.ac-aix-marseille.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0026e2d3894107a74a17c9bb77629abe04f34f5dfe739532e3c5df0f4f26e36cd8e17ff070aaf523c5c5168b40da908883724876bf8f1552badd009348a890853853678c97f034df3310b9545c82123d4edebdd480b6486033ecce268307e010954057a373b98c052826325cf35fad529d74469ef4225f06bdb706390d8aba119a891febd161a91cfa644152c080b3f53007e70288778fce4db1a3c1011be003792c184614573e5ac2803645862217e7c8511c859d278828550c38bbcf49ab1e1499e6ac3336a87714f1bc8328e1b3db580226ebe778e48e2b6c6f0be09f58d15ab9902411f837dde8eec887a3132bf663e3f255938a3823d42733e6ae641399630355ca5df1ad6649f82c092746dd51cc091ede1f0d641f248ce0f063a6f3700cdf6633fcce53516946ccd557715c20e69f472ab6fc2dc823a4c4e9b05494f46afdb98e8b6b4b552c3602ce98c7ba520110698d86bce293ab45f6629c90bb2bbdb0a604683e0e31f979a93d30928c8984f4f25fee6a92f1b857716e391a5bba8460922a4e4d729d8fa18fee2eddd97cb44fe6abf8cd33a4eba57c7ebd2e5aaa33a344265bb2a61f2f65229a69c3833acae5fcbc5a7d31b44f3f465d32535ad106263b289df278e1bb0a65b66a00aba4e9ad57b25ff4e7adff5e35b93507e3df9fc1e1c959e09101b40fc32c5558f6898a16e51b7c79b2d9adb9309d0122062eed