*.rosetta.irstea.fr

- INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0f:c0:96:73:20:2b:63:04:e2:97:86:a7:51:3e:88:ad was issued on by TERENA.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE

Organization: INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE
Locality: Paris
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:c0:96:73:20:2b:63:04:e2:97:86:a7:51:3e:88:ad
Serial Number (int): 20938392416247633618120295215318075565
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2d:77:88:6c:16:59:82:11:48:f3:39:af:a9:d2:a6:43:36:50:4f:c4
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 62:2b:65:08:25:7a:85:02:31:cc:db:54:f5:a6:c8:6a:da:81:95:1b
Fingerprint (sha256): 0f:70:3b:a5:81:d7:21:3a:72:e8:d7:a3:f8:5e:c3:de:0e:97:da:39:ff:0b:84:44:e2:be:dc:8b:02:9d:62:45

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.rosetta.irstea.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rosetta.irstea.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rosetta.irstea.fr
*.rosetta.inrae.fr
rosetta.irstea.fr
rosetta.inrae.fr

Other certificates including the domain name irstea.fr

(limited to 100 certificates)
passport.irstea.fr
vocabulaires.test.irstea.fr
gmd.irstea.fr
deepomics.test.irstea.fr
acme.irstea.fr
energie-step-diagnostic.irstea.fr
energie-step-diagnostic.irstea.fr
gitlab.irstea.fr
demdoc.irstea.fr
accesdistant.irstea.fr
sam.irstea.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
iwa-gmp-tg.irstea.fr
idp.test.irstea.fr
*.irstea.fr
irsteadoc.dev.irstea.fr
heart.irstea.fr
auth.irstea.fr
agirh.irstea.fr
piwik.irstea.fr
ldap.irstea.fr
metacatalogue-theia.cines.teledetection.fr
sturwild.irstea.fr
agirh.dev.irstea.fr
kanban.irstea.fr
resa.irstea.fr
wiki.irstea.fr
pad-public.irstea.fr
energie-step-diagnostic.test.irstea.fr
agirh.irstea.fr
is.irstea.fr
transect.irstea.fr
bdoh.irstea.fr
deas.irstea.fr
*.rosetta.irstea.fr
mdl4eo-cartes.irstea.fr
base-des-conventions.irstea.fr
demdoc.irstea.fr
deepomics-api.irstea.fr
bdoh.irstea.fr
energie-step-diagnostic.test.irstea.fr
iwa-gmp-tg.irstea.fr
svn.irstea.fr
plantedefi.irstea.fr
agirh.irstea.fr
plandefi.recette.irstea.fr
wwtmod2016.irstea.fr
svn.lyon.cemagref.fr
domfeu.irstea.fr
sondage.irstea.fr
actisurtt.cemagref.fr
heart.irstea.fr
ldap.irstea.fr
agirh.irstea.fr
isdevtools.irstea.fr
sygade.irstea.fr
hydroeco.irstea.fr
pasi.irstea.fr
deepomics-api.irstea.fr
sondage.irstea.fr
is.irstea.fr
base-des-conventions.recette.irstea.fr
sygade.irstea.fr
riverhydraulics.inrae.fr
r2d2-2050.irstea.fr
mattermost.irstea.fr
www.irstea.fr
annuaire.irstea.fr
acme.irstea.fr
vulnefeux.irstea.fr
activites.irstea.fr
extraflo.irstea.fr
deepomics-api.test.irstea.fr
forge-irti.irstea.fr
piwik.irstea.fr
*.rosetta.irstea.fr
sam.irstea.fr
pmad.irstea.fr
mapliz.irstea.fr
webmail.irstea.fr
garabie.test.irstea.fr
bdc-simple.recette.irstea.fr
irsteadoc.irstea.fr
gitlab.irstea.fr
activites.irstea.fr
chimitheque.irstea.fr
idp.irstea.fr
usactcal.irstea.fr
passport-iam.test.irstea.fr
coupesrases.irstea.fr
resa.irstea.fr
sturwild.irstea.fr
vocabulaires.irstea.fr
passport-iam.recette.irstea.fr
sympa.irstea.fr
hydroscope.irstea.fr
tsmo.dev.irstea.fr
sondage.irstea.fr
sam.irstea.fr

Certificate

The complete raw certificate details for *.rosetta.irstea.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxq0EMPeS+l04o5jGSoj
HyfVhBvxUQrTB+gUfzMdRzpiT72zLud7EvlH6GXhVFSsqDzQBnUfMJ9jaYy/Tkoo
HQcUUUzMkFmgt9nXnrsb4YsogOPf3M8tHcUgVYh1EcTOr+iob+Ovw7vjzkIa+q+w
1tjWIcBt5APtiQMfV1hEslJZGaMEowNJ5zHekkv9ntfskX4cYaTrgQ+dZ8rSp7cD
iUxJPs8rPDZmqT741F/i2Pw7lCFdBHZ573xDn/6zP+IWMvfnLf+KfVZOAVKWLkx8
kMl+wbkx3YGPLJY2MAM1ZPTDtiUO5SNSFVe+02/1LKa4MzbGxSmcH4q21N2Sjjxa
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20938392416247633618120295215318075565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rosetta.irstea.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21094964857187200652572763626769762041359906031745136428407195786206230662288871018695926259704473260202657336845553110281614834146714168657854821454751841009209490916930920357894218461736229528269791080088891156065998559171298309147555957347313062638530922756142160107507624399577367868378475541773150415277217976588025164944833870187352059485525594849970072851251911736031017860697582565282366720313606669435804340961187514103972662208916631966276920007531981540816472694959965997452832680470920203530464498466380027314076060667803606021337406436015997234213253066383141348731238097568243340629126805798709226134141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d77886c1659821148f339afa9d2a64336504fc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosetta.irstea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosetta.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosetta.irstea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosetta.inrae.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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