plastic-apps.transform.inrae.fr

- INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:eb:47:1b:89:88:66:0b:da:1f:ec:6a:f5:e3:05:0f was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE

Organization: INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE
Locality: Paris
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:eb:47:1b:89:88:66:0b:da:1f:ec:6a:f5:e3:05:0f
Serial Number (int): 14513911952411432532484795187052348687
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:93:30:70:7b:a2:ea:ec:9a:7a:f8:29:73:b5:e1:b9:bb:5e:69:a6
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 09:0f:46:af:a3:46:88:5c:bf:07:e7:dc:3e:24:bd:1d:47:4e:bc:95
Fingerprint (sha256): 0d:21:c3:e3:48:19:61:0d:ad:c8:93:d1:d2:61:d5:44:fc:9f:da:8a:a9:ad:51:00:9a:38:32:17:27:b6:32:af

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate plastic-apps.transform.inrae.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plastic-apps.transform.inrae.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plastic-apps.transform.inrae.fr
www.plastic-apps.transform.inrae.fr

Other certificates including the domain name inrae.fr

(limited to 100 certificates)
org.hub.inrae.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr
colloque-mdv-preproduction.inra.fr
wiki.dijon.inra.fr
base-des-conventions.irstea.fr

Certificate

The complete raw certificate details for plastic-apps.transform.inrae.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuBF5Kt3vxtHGQI2QOF4
HWfyggzegvod/VgF1XfAjo2h24G8Vsht9hp1MQmKe/+MBzaM/J7wwFEV1KXRDPuw
GpGhohpr5jmjJe2rkFVq6f1rSfHEowmYLpi7MCH7H/nllBQa1A6oJQ+nHdtQ7yXQ
EDkoEn+uOo+Zn99AAWMJE9Y/3+LnZZ4CKQ2kAR+ZhovfmbU2Pz1TsTUbmEVru97Z
UY74Xbg2HAYe4Lg6UEGxKJXEnXDfiWFeREiFeQykKl59+jqVXiFrvL9jnRzkhdxE
4whi/n/S1wf9h8IkbChpmhLZesBEXUe4zPSyS0+L7j/hlpNKQACySFRFFKpjvREh
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14513911952411432532484795187052348687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-11 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plastic-apps.transform.inrae.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25610730751402743225763026706489043498793368057879148248527688313028265535128740720460105388583041907947044192145744502443526110147048723475049089427076865686804858483049615829009277751707982636259546041730405557539720445332173361583285462768127134365449429420108335293144283799698370395959404448558868687501846673040702517827320168934580905768292213276760686279727793096995245701300695579429016900245220420313021431911429244267413929547226082965591833472805955827447370988389922849846160026746136305461315019096433847286094840694002620496873113343495605073766642897803012764088446578208010330701012233467733575016801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							269330707ba2eaec9a7af82973b5e1b9bb5e69a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastic-apps.transform.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plastic-apps.transform.inrae.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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