www.sercalwims.ig-edu.univ-paris13.fr

- Université Paris 13 -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 08:d4:ce:e9:0a:ca:62:30:a7:cd:cf:de:9c:2f:14:9c was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Paris 13

Organization: Université Paris 13
Organization unit: Service Informatique
Locality: Villetaneuse
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d4:ce:e9:0a:ca:62:30:a7:cd:cf:de:9c:2f:14:9c
Serial Number (int): 11738787540168445311403105806940312732
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:ac:06:dd:c6:e0:d9:2e:48:6a:da:d0:1a:8a:8d:93:c1:58:08:08
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ed:eb:52:6b:89:cf:7d:9f:21:be:c6:3f:39:55:75:e8:0d:41:c2:e1
Fingerprint (sha256): 08:14:ba:c7:e7:84:27:a5:0a:15:57:49:12:14:7c:6b:bb:a4:3f:c1:b8:28:3d:51:57:91:eb:45:6e:28:b9:15

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate www.sercalwims.ig-edu.univ-paris13.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sercalwims.ig-edu.univ-paris13.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sercalwims.ig-edu.univ-paris13.fr

Other certificates including the domain name univ-paris13.fr

(limited to 100 certificates)
*.univ-paris13.fr
tilde.univ-paris13.fr
servens-galilee.univ-paris13.fr
*.ezproxy.univ-paris13.fr
sso.math.univ-paris13.fr
www.math.univ-paris13.fr
sso.lipn.univ-paris13.fr
mathstic.univ-paris13.fr
wapt.dsps.univ-paris13.fr
*.univ-paris13.fr
portail.lipn.univ-paris13.fr
gaia.univ-paris13.fr
servens-galilee.univ-paris13.fr
mail.eren.smbh.univ-paris13.fr
dsi.univ-paris13.fr
mail.lipn.univ-paris13.fr
mail.eren.smbh.univ-paris13.fr
portal.univ-paris13.fr
tal.lipn.univ-paris13.fr
www.sercalwims.ig-edu.univ-paris13.fr
edt.iutv.univ-paris13.fr
lipn.fr
etudiants.univ-paris13.fr
www-lipn.univ-paris13.fr
mail.eren.smbh.univ-paris13.fr
*.uren.smbh.univ-paris13.fr
moodle.iutv.univ-paris13.fr
invchimietst.univ-paris13.fr
lipn.univ-paris13.fr
*.univ-paris13.fr
webmail.lipn.univ-paris13.fr
toip.univ-paris13.fr
www.math.univ-paris13.fr
*.univ-paris13.fr
jsec.univ-paris13.fr
sso.lipn.univ-paris13.fr
cas.univ-paris13.fr
mathstic.univ-paris13.fr
gaia.univ-paris13.fr
www.math.univ-paris13.fr
gitlaga.math.univ-paris13.fr
*.cevif.univ-paris13.fr
*.univ-paris13.fr
sso.lipn.univ-paris13.fr
*.iutv.univ-paris13.fr
compta.univ-paris13.fr
imap.univ-paris13.fr
compta.univ-paris13.fr
tilde.univ-paris13.fr
depot.lipn.univ-paris13.fr
podcast1.univ-paris13.fr
git.lipn.univ-paris13.fr
ressources.lipn.univ-paris13.fr
sso.lipn.univ-paris13.fr
mail.eren.smbh.univ-paris13.fr
*.univ-paris13.fr
trac.lipn.univ-paris13.fr
www-irem.univ-paris13.fr
ecandidat.univ-paris13.fr
lipn.univ-paris13.fr
www.math.univ-paris13.fr
sphinx.univ-paris13.fr
www-l2ti.univ-paris13.fr
bred.univ-paris13.fr
intranet.lipn.univ-paris13.fr
servens-galilee.univ-paris13.fr
lipn.fr
trac.lipn.univ-paris13.fr
ecandidat.univ-paris13.fr
www-l2ti.univ-paris13.fr
sso.math.univ-paris13.fr
gaia.univ-paris13.fr
*.ig-edu.univ-paris13.fr
lipn.fr
gaia.univ-paris13.fr
www-info.iutv.univ-paris13.fr
www.math.univ-paris13.fr
servens-galilee.univ-paris13.fr
sso.math.univ-paris13.fr
ressources.lipn.univ-paris13.fr
sso.math.univ-paris13.fr
sso.lipn.univ-paris13.fr
rh.lipn.univ-paris13.fr
mathstic.univ-paris13.fr
iaprimoweb.univ-paris13.fr
servens-galilee.univ-paris13.fr
math.univ-paris13.fr
*.univ-paris13.fr
www.math.univ-paris13.fr
limicsb.univ-paris13.fr
gitlaga.math.univ-paris13.fr
sso.math.univ-paris13.fr
www.math.univ-paris13.fr
sso.lipn.univ-paris13.fr
sfdd.univ-paris13.fr
biqcrunch.lipn.univ-paris13.fr
tal.lipn.univ-paris13.fr
*.iutv.univ-paris13.fr
depot.lipn.univ-paris13.fr
math.univ-paris13.fr

Certificate

The complete raw certificate details for www.sercalwims.ig-edu.univ-paris13.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11738787540168445311403105806940312732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Villetaneuse'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Paris 13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Informatique'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sercalwims.ig-edu.univ-paris13.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 945226079103609319638899805564466706305691033049708011657153564519897100045725431680726501689604756758789939857052576911532057399485908466408808832123245679555165890836435385201339778372973099816152536465575063972123793188710367966758407634130161301952192053514094851521710176378952113613039364847468352581852038927145811131802909786122499547544138569021002249556076722165508624588048147128052987208692869084683543620405930462230136267011898029061974008778077381839713347017447233638470255096640227931089962504223444617091290559235338773175474533666585714488864683358076274107251207425911985767859859036225967671568318060241565649054731681271285874701862901216564636294036333296581564645586236448215513625323387497669618322430860839215364452469418810063655834993643195367842340012568774179312852391028302332105146285688573185829984238875754677978170564283239095864101721472674099975755725448457902298941004016696555090936928028266604429706673347584593284025080450883470304624169328815477647353213438157600191512821542989845018884557940020557972876475800004629018286401687468402945029597775614048421730508521716801593075069263299061611936614002718984540241924502677774424237977820252502956470165027423720278049763113696423790414449981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83ac06ddc6e0d92e486adad01a8a8d93c1580808
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sercalwims.ig-edu.univ-paris13.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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