muscat.astro.cf.ac.uk

- Cardiff University -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 29:d7:fd:d0:01:dd:43:72:68:22:40:7e:f0:b0:21:62:51:52:05:61 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cardiff University

Company registration number: Government Entity
Organization: Cardiff University
State / Province: Glamorganshire
Locality: CARDIFF
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 29:d7:fd:d0:01:dd:43:72:68:22:40:7e:f0:b0:21:62:51:52:05:61
Serial Number (int): 238885392011012652953794007786065863895921329505
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 43:c2:c9:06:4b:79:fb:2b:9d:1e:7d:9f:61:2f:ac:c5:4a:82:c3:e5
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): e1:a4:c7:45:5a:d8:f9:f4:fc:53:0b:82:71:f2:ab:36:d6:25:25:be
Fingerprint (sha256): 09:7b:e9:7f:43:c4:49:f6:00:89:7b:68:83:38:d2:f9:ef:7c:af:5f:8b:fb:d0:65:ec:f4:20:e8:dc:c2:81:8f

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate muscat.astro.cf.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for muscat.astro.cf.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

muscat.astro.cf.ac.uk
muscat.astro.cardiff.ac.uk

Other certificates including the domain name cf.ac.uk

(limited to 100 certificates)
skrinkle.bios.cf.ac.uk
itsupport.bios.cf.ac.uk
netstorage-mwe.cf.ac.uk
library-mwe.cf.ac.uk
studies.cubric.cf.ac.uk
itdocswiki.cf.ac.uk
exampapers.cf.ac.uk
itsupport.bios.cf.ac.uk
probe.biosi.cf.ac.uk
staging.sites.cf.ac.uk
tardis.cs.cf.ac.uk
ebs.cf.ac.uk
socket.cf.ac.uk
climgen.bios.cf.ac.uk
websites.cs.cf.ac.uk
sentinel.cs.cf.ac.uk
wayfinder.bios.cf.ac.uk
siteadm.cs.cf.ac.uk
horizonqp.cf.ac.uk
*.cs.cf.ac.uk
ligo.arcca.cf.ac.uk
wiki.ics.cf.ac.uk
nascent7.bios.cf.ac.uk
cardiffmail15.cf.ac.uk
audit.bios.cf.ac.uk
orca.cf.ac.uk
sharelatex.cs.cf.ac.uk
*.cs.cf.ac.uk
static.cf.ac.uk
mappedsites.cardiff.ac.uk
mailman.cf.ac.uk
gitlab-grav.astro.cf.ac.uk
muscat.astro.cf.ac.uk
dataportal1-wiserd.cf.ac.uk
myprint.cf.ac.uk
sims-mwe.cf.ac.uk
alexandria.astro.cf.ac.uk
learningcentral.cardiff.ac.uk
skrinkle.bios.cf.ac.uk
research.astro.cf.ac.uk
fusion.cf.ac.uk
netserv.insrv.cf.ac.uk
nascent6.bios.cf.ac.uk
horizonst.cf.ac.uk
service-monitor.cf.ac.uk
taiga.cs.cf.ac.uk
group.cs.cf.ac.uk
home.cf.ac.uk
esa-qdip-gsp.astro.cf.ac.uk
cardiffmail03.cf.ac.uk
www.cardiffnetwork.cf.ac.uk
sentinel.cs.cf.ac.uk
esa-uk-tes-ctp.astro.cf.ac.uk
itsupport.bios.cf.ac.uk
probe.biosi.cf.ac.uk
scolgp.insrv.cf.ac.uk
absences.chemy.cf.ac.uk
ilrb.cf.ac.uk
psych.shared.cf.ac.uk
librarysearch-pre.cf.ac.uk
www.law.cf.ac.uk
signal.biosi.cf.ac.uk
storc.cf.ac.uk
servicedesk.cf.ac.uk
lost-visions.cf.ac.uk
inside.psych.cf.ac.uk
probe.biosi.cf.ac.uk
itsupport.bios.cf.ac.uk
climgen.bios.cf.ac.uk
skrinkle.bios.cf.ac.uk
webdav.cf.ac.uk
qyber.black
cscloud.cf.ac.uk
projectsite.cs.cf.ac.uk
brian.cplan.cf.ac.uk
ebs.cf.ac.uk
inside.biosi.cf.ac.uk
servicedesk.cf.ac.uk
illustrationarchive.cf.ac.uk
svn.cs.cf.ac.uk
gravity.astro.cf.ac.uk
www.astro.cf.ac.uk
pf.cf.ac.uk
siteadm.cs.cf.ac.uk
gitlab.cs.cf.ac.uk
s-vm6.cs.cf.ac.uk
healthcarestudies.cf.ac.uk
simstestlearn.cf.ac.uk
librarysearch.cf.ac.uk
myprint-mwe.cf.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
mteluni01.cf.ac.uk
bigr.bios.cf.ac.uk
nascent6.bios.cf.ac.uk
webmo.arcca.cf.ac.uk
leopard.bios.cf.ac.uk
wikis.cf.ac.uk
ilrb.cf.ac.uk
amr.bios.cf.ac.uk

Certificate

The complete raw certificate details for muscat.astro.cf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wudw+EnNLEKtzdRk6YN
UIypBKugi9FtLTTSFKot4NlbdPiPMv0+7aXoPGeBTwDwJYG+hobyiuLIoLKuuTOf
K6ekmH9e2s8JQgwpt34Rt77IG7CYdwN22Eb8H+2pfPBUI/jvTShRNIAVsoSjp/3D
RWAhdYIfqrUQ8TVxC5ZKsXLn+PTiC4krgAAq6yOkEzDJmmnlT8aySjJTffIhH0zI
+XLwpjU8aWr2GlQOeQGiWB0rumVMxev8v3llGdDquH/rHhVgT9oaAi4HaJb0zNgK
XCoqjM3GnYhRQDykljZ0VE9hemXYUCZtudSf1BdkxzCFapvE/Hilwc84zXe59URh
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 238885392011012652953794007786065863895921329505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 08:46:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 08:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glamorganshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CARDIFF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cardiff University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'muscat.astro.cf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26436873298564419089710823618220759944981608901770127920709950770258100229915296122049947905560440663775232660942287835305579995541650776187390500522091781868278335849586266175304716104624227095191003619930434911024129842159805313805419139175007679292988879571885178099567637512114102134083957237036736324776634280167863829010997161732777206855438965871308294671762363875569080567513006538455762462346735149474416614750078603418612434284570371230513154849427992210785292959917524748338117876259079604313025100412283909757471162678645797101980838830926505237291054196120427441404493875864342440133089226736990536622457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muscat.astro.cf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muscat.astro.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43c2c9064b79fb2b9d1e7d9f612facc54a82c3e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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