*.univ-grenoble-alpes.fr

- Université Grenoble Alpes -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 80:13:35:ca:be:76:84:04:2c:5b:43:d7:91:e2:5b:81 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 80:13:35:ca:be:76:84:04:2c:5b:43:d7:91:e2:5b:81
Serial Number (int): 170240928131524643418687073588359617409
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8f:0d:f9:a2:09:0d:f1:db:c1:9e:cd:c6:1c:45:71:13:fb:87:c1:2a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c0:75:3e:7a:d1:de:89:d8:62:29:29:d1:42:26:3f:26:17:85:82:08
Fingerprint (sha256): 0d:ac:6e:a5:b8:d0:c6:b3:b7:23:e7:78:32:73:7e:38:94:f4:4e:5b:8d:3f:c2:40:53:9a:7a:bb:d4:d7:d4:18

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.univ-grenoble-alpes.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.univ-grenoble-alpes.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.univ-grenoble-alpes.fr
univ-grenoble-alpes.fr

Other certificates including the domain name univ-grenoble-alpes.fr

(limited to 100 certificates)
chamilo.iut2.univ-grenoble-alpes.fr
shib3v3.univ-grenoble-alpes.fr
iut1-srv-web18.univ-grenoble-alpes.fr
enquetes.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
copass.grenet.fr
miage-grenoble.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
gin5-serv.univ-grenoble-alpes.fr
fuga-media-stock.univ-grenoble-alpes.fr
www-fourier.univ-grenoble-alpes.fr
partage-lsi.univ-grenoble-alpes.fr
persyval-lab.univ-grenoble-alpes.fr
sk-cic-it.imag.fr
gricad-registry-test.univ-grenoble-alpes.fr
copass.grenet.fr
ifmail.univ-grenoble-alpes.fr
apple-uga.u-ga.fr
pilote.univ-grenoble-alpes.fr
gricad.univ-grenoble-alpes.fr
ist-web3.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
lig-expire-web.imag.fr
echamilo.grenet.fr
datageosciences.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
fabmstic.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
self6.univ-grenoble-alpes.fr
ulea-wiki.univ-grenoble-alpes.fr
ifmission.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
sante-lsurvey.univ-grenoble-alpes.fr
iut1-culture-etudiant.univ-grenoble-alpes.fr
wcp.univ-grenoble-alpes.fr
self7.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
self.univ-grenoble-alpes.fr
resa-ictiss.imag.fr
vpn2-int.iut2.univ-grenoble-alpes.fr
iut1-mmi-moodle.univ-grenoble-alpes.fr
copass.grenet.fr
gricad-doc.univ-grenoble-alpes.fr
chamilo-uga-vs.grenet.fr
copass-client.grenet.fr
projects-call.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
ifmission.univ-grenoble-alpes.fr
ldap.iut2.upmf-grenoble.fr
*.gricad-pages.univ-grenoble-alpes.fr
portail.univ-grenoble-alpes.fr
www-liphy.ujf-grenoble.fr
self5.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
www-fourier.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
ist-geodyn.univ-grenoble-alpes.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
ametys-uga.grenet.fr
shibboleth.univ-grenoble-alpes.fr
intranet-timc.imag.fr
cloud.univ-grenoble-alpes.fr
arpont.imag.fr
observatoire.univ-grenoble-alpes.fr
*.gricad-gitlab.univ-grenoble-alpes.fr
sum-graf.univ-grenoble-alpes.fr
iut1-srv-web14.univ-grenoble-alpes.fr
fourier.univ-grenoble-alpes.fr
lig-wwwphp.imag.fr
dev-1.u-ga.fr
ifforge.univ-grenoble-alpes.fr
auth.univ-grenoble-alpes.fr
ist-sismalp.osug.fr
*.comar-project.univ-grenoble-alpes.fr
eformation.univ-grenoble-alpes.fr
ljk.univ-grenoble-alpes.fr
im2ag-wiki.univ-grenoble-alpes.fr
help.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
veri-web-projects.univ-grenoble-alpes.fr
visio-preprod.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
www-info.iut2.upmf-grenoble.fr
www-fourier.ujf-grenoble.fr
iut1-srv-web19.univ-grenoble-alpes.fr
gin11-web.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cloud-test.univ-grenoble-alpes.fr
hal.univ-grenoble-alpes.fr
gricad-wiki.univ-grenoble-alpes.fr
chamilo-iut2-vs.grenet.fr
enquetes.univ-grenoble-alpes.fr
superdoc.iut2.univ-grenoble-alpes.fr

Certificate

The complete raw certificate details for *.univ-grenoble-alpes.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvEte9jIKUujoqFyrpC7
jUKuAAj8Imbm0c8y1zbGcLuwLCbnQXcRzRItVIzRXFBsXny9PJ5RbHugBfBVOp3K
i+KUbfsM4kDE6vYymGJBMUhOSaQE8rUdwnR9D3rT5C6+lO5k5kdDtt4c5lFBhmvK
kP5bvqb7+3Low3NDEqcSG1u/BZZQHauLsgu5iIHN1g72iu/5hyJ6gS6U15YJLgid
MSXzY7119iBcSgOJvOFMfl49XOT8Pke159UT1o2FOjEmTv0qMU2FDmC4MzG39U+I
vz1/UrfkwtXW0OOB203g0SGuIVwwe9QNEv2CQrAOCgzpqrLR6gcdZZwLgiUcdEkO
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170240928131524643418687073588359617409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.univ-grenoble-alpes.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20064581326758306298451322349557482748557705015343100022354514381444160530934775162297572379921667948723527420457370174574253731949843049141881969286892328828995130271613604861440844115829913730316558323275914279595355239659744233563290176172020196211202555213260857239759817926839984887827085247075149619156778743758830570755833697460426896138029812533415876518323696603722729662383055302953566729429186092681527533302768146186708077237391750812624568608159947777625250623134739966022928433490823327469077922727949170622257328689834780494484006695698046613049881122663891967995133600844588912516715519125093993746171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f0df9a2090df1dbc19ecdc61c457113fb87c12a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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