opendata.platformrijksoverheid.nl

- Rijksoverheid -

Issued by QuoVadis Europe SSL CA G2

About this certificate

This digital certificate with serial number 59:82:7b:52:85:3e:57:6b:d1:03:f0:fd:bb:e2:e1:05:97:f5:93:bb was issued on by QuoVadis Trustlink B.V..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksoverheid

Organization: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 59:82:7b:52:85:3e:57:6b:d1:03:f0:fd:bb:e2:e1:05:97:f5:93:bb
Serial Number (int): 511010018370565411648799996245248145638573839291
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 83:4f:19:5d:ae:fb:24:30:0a:9b:b5:c4:c9:c0:08:f2:e3:11:cb:e5
AuthorityKeyId: 2f:ad:64:aa:cf:29:0d:30:da:cb:44:3e:3f:d6:4f:ba:1a:9f:f1:78

Fingerprint (sha1): 60:de:ed:cc:7b:65:bf:97:7f:ca:99:e3:3d:04:3d:64:64:f2:7a:c8
Fingerprint (sha256): 14:98:45:66:97:90:bf:2a:5d:bd:59:9d:6e:45:eb:ef:fc:b6:16:02:54:1f:1b:e8:cd:4f:e1:21:ae:e2:f2:77

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl

Check the revocation status for certificate opendata.platformrijksoverheid.nl

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opendata.platformrijksoverheid.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opendata.platformrijksoverheid.nl
opendata1.platformrijksoverheid.nl
opendata2.platformrijksoverheid.nl
opendata3.platformrijksoverheid.nl
opendata4.platformrijksoverheid.nl

Other certificates including the domain name platformrijksoverheid.nl

(limited to 100 certificates)
platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
opendata.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
onderzoek.rijksoverheid.nl
h1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
webanalyse.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
survey-collect.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
toegang.platformrijksoverheid.nl
a-toegang.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
performance.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
a-api.a-subscribe.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
survey.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
survey-cache.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
artifactory.rijksoverheid.nl
a-cms.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
vpn.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
c-cms.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
ps1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
api.subscribe.platformrijksoverheid.nl
cms.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
platformrijksoverheid.nl

Certificate

The complete raw certificate details for opendata.platformrijksoverheid.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRM4kWQrDWt2hJ6gFwNu
dVQHJohFM3SiD7Zata+pcarMTux5J5UntpNYVRhhLgfUANNfBSI38fEMR33jaIt0
5Rs5/qo0ws97InFGclxSXG3b3v3XprVTP9GFAT1F1zAOGRqvMNMy3FfwiVCA5Cng
1x1KdCIPRhr3dP4PtFJnLltfkYEdRTsBNl1vgy7DtlkCTZW+VjGa5NtNMQ6XN2Jt
9bCc+tKzedXY1bPVnVKZkKV6xvmS649jGdY7uZLosY7rrGUqhglY50WSDakTIlA9
zzWNfzeatIJlFhxx5A3bORifuBmbDadWpzIkkgM3BCA1a2eHyS709YJkuk44swb0
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 511010018370565411648799996245248145638573839291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe SSL CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-07 12:43:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 12:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'opendata.platformrijksoverheid.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22353658191815042164591393056078509811803103860609491012246277574518210377183261547057372781718760499160909644281315275145983727255684087903207537011860111740442430125373272177207695210838252863606663258264646508131733580269462159813176111000244460654948539288536543171729409588764041013402159857634686633586220274185833690115016525012643420618756897614305236577966208427327123704193916733834993871805262761091874064651974313354134660036552857416681580659206240532842163119686844811704745872841902849689423105188132286311272239887453855226637938320609844904466365626302192540792553859146475667226193318058191804101881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2fad64aacf290d30dacb443e3fd64fba1a9ff178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata1.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata2.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata3.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata4.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							834f195daefb24300a9bb5c4c9c008f2e311cbe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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