keats.kcl.ac.uk

- King's College London -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number e6:d8:78:af:dd:8b:4f:2b:e7:06:e1:b2:28:e7:c0:31 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

King's College London

Company registration number: 10003645
Organization: King's College London
Organization unit: Education Applications
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): e6:d8:78:af:dd:8b:4f:2b:e7:06:e1:b2:28:e7:c0:31
Serial Number (int): 306846422974619653468601240354808119345
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d3:c4:da:68:54:d5:af:ca:ad:67:bf:7f:44:8a:17:81:89:0d:3e:82
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): 85:5a:d7:72:4d:26:84:78:eb:bc:e3:10:40:3c:74:af:41:67:11:f6
Fingerprint (sha256): 09:47:e1:32:28:05:b3:e5:09:f4:3a:d8:44:75:6b:83:6e:12:ed:0e:aa:87:46:92:71:6a:7c:a8:64:2c:aa:78

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate keats.kcl.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keats.kcl.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keats.kcl.ac.uk
www.keats.kcl.ac.uk

Other certificates including the domain name kcl.ac.uk

(limited to 100 certificates)
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
covid-testing.kcl.ac.uk
www.brightlinks.org
support.kcl.ac.uk
addneuromedsrs.kcl.ac.uk
achievements.launchyou.com
charm.kcl.ac.uk
training.kcl.ac.uk
achievements.launchyou.com
s2lab.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
www.brightlinks.org
ems.nms.kcl.ac.uk
www.ctr.kcl.ac.uk
www.kcl.ac.uk
thestrandgroup.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
www.brightlinks.org
mentoring.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
alumni.kcl.ac.uk
placement.kcl.ac.uk
www.brightlinks.org
athenaswan.kdl.kcl.ac.uk
triangle.mth.kcl.ac.uk
cturandomisationmvc.iop.kcl.ac.uk
*.libproxy.kcl.ac.uk
blogs.kcl.ac.uk
www.brightlinks.org
iospe.kcl.ac.uk
www.brightlinks.org
amdb.isd.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
mentoring.kcl.ac.uk
san01.hosted.exlibrisgroup.com
mentoring.kcl.ac.uk
automation.platform.kcl.ac.uk
achievements.launchyou.com
librarysearch.kcl.ac.uk
sharc.kcl.ac.uk
media.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
nmmoodle.kcl.ac.uk
kclsfbpool01.kclad.ds.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
api.erg.kcl.ac.uk
ircyr.kcl.ac.uk
mentoring.kcl.ac.uk
khcn.kcl.ac.uk
mentoring.kcl.ac.uk
library.kcl.ac.uk
achievements.launchyou.com
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
curium.nms.kcl.ac.uk
radiusacsd.kclad.ds.kcl.ac.uk
www.brightlinks.org
accessedge1.mykcl.info
www.brightlinks.org
accreditation.lumanity.com
keats.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
csgs.kcl.ac.uk
libcal.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.isd.kcl.ac.uk
www.brightlinks.org
kdl.kcl.ac.uk
mmee.kdl.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
kclpure.kcl.ac.uk
testlibrary.cc.kcl.ac.uk
accreditation.lumanity.com
s400.kdl.kcl.ac.uk

Certificate

The complete raw certificate details for keats.kcl.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwvDxfSkXmvt2+xHw7iZ
IBw8kjzlxOyQPPhGJ0/r0TIUgaqCuIH1jAEI33525lgRUL2CsDCUKVJoI2A9T/8n
mzsXM/MXShhCpykQKSfmYA6vKZfCsbozw1ZGjnn4XDDQPMRntZDsY1cg8z6Api6Q
rdRNg+V+hlBnW9CJnrYVVEi52kH+6A8SqGgThur+F63T88KOwlEjy4fzeWmDmEBj
RniEuPvLmU98XfyomOuVaVRqGrB7IRD5tvIVITeYEKsihPPW4M9NngTtASj0Dd1i
NeyQlm4fnWvDOPxJq4h3rfFdJWj0ZNcUIEx5/oGzHx2lF2wnLeh+KL0jnU5/Ge6L
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306846422974619653468601240354808119345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10003645'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'King's College London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Education Applications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keats.kcl.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25127224097422509868207178350744326226476846347306302449706367679251078398343668810451108870014907129132545277693267954900678235466919328826208634935556537273632568030172049588730965722205680713822290337802026502659563610131263231928613709097395063375686952798891081157391388830201731197996025501180841614560501254680433262271989584415990791344912855890181587827109805294077164573351692054010441986483254689393283145663629435481297092732614244824599439192786393832388006996933858828825855599602788553641419148609558925078031553878937789583928119279935600326234871012057142765745267528461758957799143478000876375673777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3c4da6854d5afcaad67bf7f448a1781890d3e82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keats.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keats.kcl.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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