cloud.garr.it

- Consortium GARR -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f6:0c:31:57:c0:e5:cc:f5:a8:e4:6d:92:0f:71:75:df was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Consortium GARR

Organization: Consortium GARR
State / Province: Lazio
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f6:0c:31:57:c0:e5:cc:f5:a8:e4:6d:92:0f:71:75:df
Serial Number (int): 327053395316011374131501826148335187423
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d2:c0:8a:d0:c2:e1:35:ec:dc:82:47:74:c7:cb:b5:8b:8e:41:48:df
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 34:bf:fb:0f:b5:c0:98:07:fc:a5:3a:96:19:78:7e:85:01:54:0e:5e
Fingerprint (sha256): 0b:96:fe:fe:bf:e2:b3:ac:7c:5f:a3:a1:de:b6:db:14:c2:14:d2:32:e6:44:b5:e3:dc:a9:ba:ac:e7:d5:b6:2c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cloud.garr.it

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud.garr.it

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud.garr.it
cloud.garrservices.it
www.cloud.garr.it
www.cloud.garrservices.it

Other certificates including the domain name garr.it

(limited to 100 certificates)
co.aai.garr.it
learning.garr.it
wiki.garr.it
st-be-ba1-test.infra.garr.it
idp-ospedalesanmartino.irccs.garr.it
idp-iov.irccs.garr.it
idp-css.irccs.garr.it
wkngx2.garr.it
mx2.dir.garr.it
www.garr.it
filesender-test.infra.garr.it
garrbox.garr.it
idp-ubuntu.aai-test.garr.it
test.webmeetings.garr.it
agenda.garr.it
git.garr.it
idp-neuromed.irccs.garr.it
filesender-test.infra.garr.it
enea.workplace.garr.it
dashboard-devel-mellon.cloud.garr.it
gbox.garr.it
dashboard-staging-idem.cloud.garr.it
ca.garr.it
icdi.workplace.garr.it
idp311.idem.garr.it
wiki.garr.it
idp-oasi.irccs.garr.it
vpnsrv.garr.it
webmeetings.garr.it
cartellino.dir.garr.it
keystone-staging.cloud.garr.it
cloud.garr.it
demo-idp.ct1.garrservices.it
eosc.eu
vconf.garr.it
open.meet.garr.it
hv02b-mgmt.bo1.infra.garr.it
eosc.workplace.garr.it
wiki.idem.garr.it
grouper.idem.garr.it
wayf.idem-test.garr.it
pexip-mgmt.infra.garr.it
git.garr.it
le1.test.garr.it
idpopen.garr.it
hv02c.bo1.infra.garr.it
idp-css.irccs.garr.it
aarc-satosa.aai-test.garr.it
idp-maugeri.irccs.garr.it
idp-stellamaris.irccs.garr.it
sg-liferay.garr.it
meeting01.garr.it
www.idem.garr.it
cert.garr.it
rancher.infra.garr.it
idp311.idem.garr.it
idp-fbf.irccs.garr.it
wayf.idem-test.garr.it
grouper.idem.garr.it
sg-liferay.garr.it
lx5.dir.garr.it
hv02d-mgmt.bo1.infra.garr.it
printers.dir.garr.it
wkngx1.garr.it
hv03a.bo1.infra.garr.it
wiki.idem.garr.it
*.mirror.garr.it
vpnops.dir.garr.it
icdi.workplace.garr.it
gridsrv3-4.dir.garr.it
garr.workplace.garr.it
idp-sicilia.izs.garr.it
onlyoffice.cloud.garr.it
idp-fticks-test.aai-test.garr.it
login.sso.garr.it
idp-portici.izs.garr.it
rinnovoconvenzioni.garr.it
www.idem.garr.it
www.support.garr.it
wireless.dir.garr.it
turn-02-preprod.meet.garr.it
gn4-3.workplace.garr.it
registry.idem.garr.it
hv01d-mgmt.bo1.infra.garr.it
idp-sdn.irccs.garr.it
dashboard-staging.cloud.garr.it
sp24-test.garr.it
metadata.dir.garr.it
idp-ieo.irccs.garr.it
idp-css.irccs.garr.it
agenda.garr.it
garr.it
grouper.idem.garr.it
filesender.garr.it
kibana.aai.garr.it
primologin-gbox.garr.it
idp-iccu.beniculturali.garr.it
learning.garr.it
gn4-3.workplace.garr.it
dashboard.cloud.garr.it

Certificate

The complete raw certificate details for cloud.garr.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAqIlAXEz8500f3lsASg61
0uMRYsZXSW4tcujAqeBJH4X6/+XTsy1jj9ckgKUKm6CkB9p9fktlyh3pQlq/rZD4
byH4jkPlkzAjvTZ+dl9y5kAlZX6rk6mfevNj6RPnxO5/ShovdrXbNra52uKqd+hK
KisCV+RHkZQ8FTtDNGbeVjwSrbOchZxEQewYWjPfdVWq/G3q7lb8Nswn9k4pp53v
Yvim8T4Z8P7wC28yWzdYeFsQVwoNOlsuMkOncP+OrgnvOvM9UDdz6oeIb7nfBchD
0Vb1mI3Bmew8ZQJPKdRyp8HBIwxp/3ADWtMy4hZxEs93UWE0Cl+lZDrfaFyREI9t
ecCF7N7go5b+ybUno6DjdbgRQczwuVb8WlqfIU18Xq4+MD4ejkVOzgI/5kyuXB+w
0h2TGkllkoUosFlN4SzfJkSFf58lmPlEN2Ag48y7/7GTsOMsq3VuKPSt6Ca90/ao
kYhQ3Y+O7kZGukxLoegib9ytwNU3Rrnvyq4nYmOlqGqpAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327053395316011374131501826148335187423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consortium GARR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.garr.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3824720935882108137107005926917282017679120414642625132734054392386424377797802741168277225169174223057828676004214220993990867782885047854180571157873567452473425857326397203078837304096594826871631815571578387267101009591705186668391094202251453170177386728092691841748995537958435417007466342123818130762408408065872755152635579354221132998534441822108140571556051334995212440669940120186434297790822209465612606381223422128295994909756196094183355156624104505760175758249781010055971257166787175077745293602176046306300332547216028669330571515268729115411418388612143657905105637224538998458742601970105993771419935361913695341011311640188136253811907864082892224259213552659031440045764316652786716237548936139784692199710302876462702179108253739003631427178928830692413172846256997747187310814261147733271497549953470996387357716637175318985177509279872637120530341383037232525948133345116936947628524363146258333330089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2c08ad0c2e135ecdc824774c7cbb58b8e4148df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018796e210960000040300483046022100d9cda6729b24cbc533b6d327db9193e8479a619b14dbc3860a8e9e23fbf46b29022100b19fc9888ad7579ba153202e845e15abf1c60c238a60dc593b586ffaa8dba2f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018796e210f80000040300483046022100c5d9bf101d78cf65b354c5dfd4e0b7a13ee4193a6edbf7ecdeb1b602ca461062022100a3b8f49ba7750d91ba7522422e7fffa6bd4230c115596653b0c30750c1d9b320007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018796e210bf00000403004630440220071a58dda3a754cc08d273b8ae33da76fb43ef5f2ff62e94f00dfe8247e709b302200fb22394874a647caf8082f1c2c676896af4511c764513a7b0974fb997dfca22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.garrservices.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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