xylofront.pierroton.inra.fr

- INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:62:d6:3f:a1:b3:b7:25:40:b7:a2:38:33:9c:10:c5 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE

Organization: INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE
Organization unit: ICOS
Locality: Paris
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:62:d6:3f:a1:b3:b7:25:40:b7:a2:38:33:9c:10:c5
Serial Number (int): 15134698522844256748868704269114282181
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:f4:8e:78:21:40:05:86:91:4b:4f:bb:aa:e3:30:88:a3:04:9b:64
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 0a:33:ad:c9:be:64:30:60:f7:e5:1c:9a:fc:f4:d1:5a:bd:cb:8f:f5
Fingerprint (sha256): 10:1f:22:b9:9f:d4:5c:61:60:bc:39:46:10:86:25:86:a1:4a:15:85:30:35:a1:07:60:48:3a:98:87:8f:01:3a

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate xylofront.pierroton.inra.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xylofront.pierroton.inra.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xylofront.pierroton.inra.fr
xylofront.pierroton.inrae.fr

Other certificates including the domain name inra.fr

(limited to 100 certificates)
lovinra.inra.fr
activite-plateforme-lait.intranet.inra.fr
vmi-prod-90.jouy.inra.fr
colloque.inra.fr
*.montpellier.inra.fr
cartes.cesaer.inra.fr
demo.sig.inra.fr
plateforme-alimentation.sae2.inra.fr
plateformedevappweb-preproduction.inra.fr
*.supagro.inra.fr
lix1.toulouse.inra.fr
admin-bioinfo.angers-nantes.inra.fr
partage-fichiers.extranet.inra.fr
vmi-dev.97.jouy.inra.fr
wiki.siirgo.inra.fr
entretiens-evaluations-pre.inra.fr
vmi-preprod-344.dcidf.inra.fr
catisae2.toulouse.inra.fr
ddi.dsi.inra.fr
*.toulouse.inra.fr
partage-fichiers.inra.fr
symbiose.toulouse.inra.fr
vmi-preprod-311.dcidf.inra.fr
messagerie.inra.fr
cas.inra.fr
gestion.rpcas.inra.fr
gestion-test.dsi.inra.fr
vmi-prod-312.dctlse.inra.fr
reco.inra.fr
trs-gateway01.tours.inra.fr
bureau-distant.inra.fr
cas.inra.fr
vm-galaxy-prod.toulouse.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
*.poitou-charentes.inra.fr
lovinra.inra.fr
cas-preprod.inra.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
appli.poitou-charentes.inra.fr
portail-invite.inra.fr
*.corse.inra.fr
dcimneo.inra.fr
www2.versailles-grignon.inra.fr
wsus-theix.clermont.inra.fr
*.paris.inra.fr
genome.jouy.inra.fr
messagerie.jouy.inra.fr
nextcloud-preprod.dctlse.inra.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
usine-logicielle.inra.fr
data-preproduction.inra.fr
partage-fichiers.inra.fr
usine-logicielle.inra.fr
vega.toulouse.inra.fr
pmad-preproduction.inra.fr
temps-activites.inrae.fr
enquetes-preproduction.intranet.inra.fr
hn-preproduction-hnqua.s2i.inra.fr
atcha.toulouse.inra.fr
intranet5-bck1.inra.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
vmi-preprod-345.dcidf.inra.fr
phenoscope.versailles.inra.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
intranet.centre.inra.fr
demo.sig.inra.fr
www2.versailles-grignon.inra.fr
dcavptmgr.dsi.inra.fr
webmail.jouy.inra.fr
vmi-prod-90.jouy.inra.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
colloque6.inra.fr
portail-eduspot.inra.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
didacticiels.si.inra.fr
mulcyber.toulouse.inra.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
eivp.inra.fr
usine-logicielle.inra.fr
sig.inra.fr
dynafor.toulouse.inra.fr
demo.sig.inra.fr

Certificate

The complete raw certificate details for xylofront.pierroton.inra.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15134698522844256748868704269114282181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INSTITUT NATIONAL DE LA RECHERCHE AGRONOMIQUE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICOS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xylofront.pierroton.inra.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725607552560293299904714041660475722453115314720971690617029546354817341518841831514458699526693572039412748823156536842916116902827612464486323909226223797222885057266291933517603024587856524199746413628587914962032712726519439588340464241047262216329664963003485822950488747447706063768067498149474129447432599662767184884146880216995463758788949473802644191120019257729841624019812986831156763752694273114084908516313116686112770919040751304654090104205804316685136009689752286440957879421505087116054981179910828377699474571325415731415308402752094428066745032644817050660412191917309799173799806081110669450035916175157618052951797679710986573683711788969567480994986039072172976192774802638512685635901294111693096538833154206230486867406617376162186735162152656970830493957929351798031374544131176415623742715060203088656562759201304306743491771372629063633751555999237110804181311266110225987177483217529118658886722840710117859873963833846423949566906413287348679080890519556492557832041819685103299059928751956830146856081202362197843639773012553997810260781856849562378564817588105710815691829033801459296203772671727288275703068653621846439555636569273884076800478974431779259455227581688427686644697309157853456104294813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cf48e7821400586914b4fbbaae33088a3049b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xylofront.pierroton.inra.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xylofront.pierroton.inrae.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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