*.apps-acc.mobilit.fgov.be

- Federale Overheidsdienst Mobiliteit en Vervoer -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 48:d0:f5:a5:38:f4:a5:24:69:7a:da:ef:00:32:19:4b was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Federale Overheidsdienst Mobiliteit en Vervoer

Organization: Federale Overheidsdienst Mobiliteit en Vervoer
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 48:d0:f5:a5:38:f4:a5:24:69:7a:da:ef:00:32:19:4b
Serial Number (int): 96789395723715814820812403141376088395
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8b:ba:42:c7:af:cc:32:6e:b7:ec:08:5f:99:1d:5e:24:3c:b9:5e:86
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 09:f0:e0:8d:35:c3:b0:b0:90:ba:a2:9c:fe:a4:97:8b:b1:11:b3:c5
Fingerprint (sha256): 0a:42:af:dc:8c:b2:39:6d:11:2e:17:08:53:47:79:6e:1b:e8:7e:f3:07:32:37:20:af:55:0b:83:e7:ba:c7:d3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.apps-acc.mobilit.fgov.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.apps-acc.mobilit.fgov.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apps-acc.mobilit.fgov.be
apps-acc.mobilit.fgov.be

Other certificates including the domain name fgov.be

(limited to 100 certificates)
kruispuntbank.fgov.be
eservices.minfin.fgov.be
dabs-acc.ext.wss.just.fgov.be
bpp.economie.fgov.be
www.business.belgium.be
minfin.be
eolf.economie.fgov.be
cap.mobilit.fgov.be
wwwacc.capac-hvw.fgov.be
ilite.wss.just.fgov.be
air.mobilit.fgov.be
justsignal-acc.client.just.fgov.be
www.rsvz.fgov.be
webdwtc01.rrn.fgov.be
jft-acc.wss.just.fgov.be
www.capac-hvw.fgov.be
www.incc.fgov.be
sdvampf001.intra.just.fgov.be
spvwebtpi001.intra.just.fgov.be
webdwtc01.rrn.fgov.be
portal.health.fgov.be
HVB-Liege.just.fgov.be
apptst.riziv.fgov.be
moncomptedevacances.be
*.ehealth-09.paas.cloud.ehealth.fgov.be
www.ehealth.fgov.be
natgw-eessi.ksz-bcss.fgov.be
wahlen.fgov.be
c-b2b.SPFETCS-FODWASO.fgov.be
www.likiv.fgov.be
www.capac-hvw.fgov.be
appsoc.caami-hziv.fgov.be
bibforum.fgov.be
*.statbel.fgov.be
appsoc.caami-hziv.fgov.be
ccff02.minfin.fgov.be
handicap.belgium.be
news.sfpd.fgov.be
ede.onssrszlss.fgov.be
hbca.client.just.fgov.be
savdiv000.intra.just.fgov.be
eucertificates.economie.fgov.be
handicap.belgium.be
residencepalace.be
archi.ccecrb.fgov.be
auth-signing.sigedis.fgov.be
premier.be
www.mybenefits.fgov.be
auth.minfin.fgov.be
www.rsvz.be
vsp.smals.be
forfaitdebase.economie.fgov.be
login.dev.mobilit.fgov.be
mailings.ibz.fgov.be
FODJ-STS-Token-Signing-2018.just.fgov.be
bel1fedlaeaacc01.fed.oncsfm.com
meldpunt.belgie.be
ibz.be
telework.just.fgov.be
circa.health.fgov.be
PAUTH.riziv.fgov.be
e.koba.be
accreditation-new.belgium.be
b2b-tst.rsvz-inasti.fgov.be
stvjira000.intra.just.fgov.be
spvnpsradius001.intra.just.fgov.be
auth.meta.fgov.be
ede.onssrszlss.fgov.be
emm.rrn.fgov.be
*.vpn2.fanc.fgov.be
kce.fgov.be
savelasticb000.intra.just.fgov.be
appsoc.caami-hziv.fgov.be
rsvz-inasti.fgov.be
adldsacc.integration.just.fgov.be
spvxwiki000.intra.just.fgov.be
bgcturn.intra.just.fgov.be
biblio.intra.just.fgov.be
arttiepe.intra.just.fgov.be
www.sigedis.fgov.be
fgov.be
www.riziv.fgov.be
savsdstatbe000.intra.just.fgov.be
viewportal.integration.just.fgov.be
www.decroo.belgie.be
bel1fedlaeaacc01.fed.oncsfm.com
www.capac-hvw.fgov.be
HVB-Mons-test.just.fgov.be
nrmobility.mobilit.fgov.be
infradocs.just.fgov.be
ccff02.minfin.fgov.be
test.ehealthplatform.info
www.caami-hziv.fgov.be
ibz.be
acc-cjcsr.just.fgov.be
www.webapp.rrn.fgov.be
*.apps-acc.mobilit.fgov.be
casfactory-dev.intra.just.fgov.be
enigloket.acc.mobilit.fgov.be
DAC-X3.rsvz-inasti.fgov.be

Certificate

The complete raw certificate details for *.apps-acc.mobilit.fgov.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriQ3T7AdZEXPLBzdS66P
MyTLAxyRkRXvjFsFaumvPGMiLLHwxN+hcmWvRN7gLL9QKbpNtInm+ePlLwU0NJQP
MppheiqV37C0ARNF1q9npmlogzK65FFn3bS7PuaJ+Rx9FCceWZppSEbzJKbcvx1H
nWeGA1b68cKYSi3J8e9uL9AHEtMYLXHzEqeauIE5xiQM4T67osYh9LXoP8mrvu+B
dpEeyDjohNk+2QXZqKDu2QOsfRvVB/BHZCIn8FlSW+O1DmgjMCcAMKJtOqpAIzpU
EOvmKC+vOhPiJCyle1bg9S6foeXyzU1j0Z/9gPPhYPMwCWd88r4y4un2pQKszuNo
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96789395723715814820812403141376088395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Mobiliteit en Vervoer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.apps-acc.mobilit.fgov.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21983323868734890773569499026317828077741314909032108156141171297148954089686450361891574427863047482433203139685063225730220332401070871127894383555240305546696271347151815644118441456826821386202311970331541484519874427325272871267066590684525420896590598595353282762334347634837139723060358640313126814030788898842295656444874077054868941247218891124000470736804552883922287579563629348190300240543043682483077031325438283488370911931363315162559386602037534063430133691118890977726392453553926617824192867512889933730152159711973204861578149930813387444399955784581625634657648002292791141773828679278054552594611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bba42c7afcc326eb7ec085f991d5e243cb95e86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps-acc.mobilit.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-acc.mobilit.fgov.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b2327d3bd000004030047304502210098b843d703b0ce42465c4d46bf65d9d5c2263bc914231a4b6085d5d5fc1a0ecb02200d9cefb9391c27f31d2ad4fff5749aa80b27457d9425c23b37b43034d8221fd8007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b2327d40b000004030046304402201ce9b49b9ad5adbe4edd51f84546d622e8bb728909426fd9924bc43fdafee9fe0220587cb5c0bd8b20a845f315e820abc83abaaba029702eb14af2cbc91d6f14a282007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b2327d43c0000040300473045022100f8ea26c209e7742587c644afd942cfb4cb619c77d21bf62d762de2712eabffe8022061a908380aae4a1e6114b3cea8d65e28c350c15f5d8898c94607cb66be3ecd72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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