saint-nicolas.kinepolis.lu

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:7f:80:6f:b3:79:cb:e5:af:44:db:76:23:5f:66:bd:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saint-nicolas.kinepolis.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:7f:80:6f:b3:79:cb:e5:af:44:db:76:23:5f:66:bd:de
Serial Number (int): 426883566953886411235040557609407205522910
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 66:d7:ed:14:f8:bd:f9:65:1c:29:0e:47:30:30:90:bc:2f:d6:57:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:d7:7e:c0:41:21:3d:05:b4:82:ab:62:ae:39:a3:3d:bc:11:72:14
Fingerprint (sha256): 14:e9:d1:41:d2:e2:85:60:c3:26:83:23:5e:f5:59:5f:14:87:d8:e0:29:cd:49:49:10:a3:64:e3:75:0b:d5:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saint-nicolas.kinepolis.lu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saint-nicolas.kinepolis.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saint-nicolas.kinepolis.lu

Other certificates including the domain name kinepolis.lu

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
*.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
saint-nicolas.kinepolis.lu
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
business.kinepolis.lu
kinepolis.lu
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
kinepolis.lu
shop.kinepolis.be
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
shop.kinepolis.be
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
saint-nicolas.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
saint-nicolas.kinepolis.lu
stage-kinepolis.megatix.be
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
dev.business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.lu
business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.be
www.kinepolis.lu
saint-nicolas.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
*.kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
dev.business.kinepolis.lu
tickets.kinepolis.be
www.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
www.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.megatix.be
business.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
kinepolis.lu

Certificate

The complete raw certificate details for saint-nicolas.kinepolis.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISBOZ/gG+zecvlr0TbdiNfZr3eMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAyMDEyMjM0MDlaFw0yMjA1MDIyMjM0MDhaMCUxIzAhBgNVBAMT
GnNhaW50LW5pY29sYXMua2luZXBvbGlzLmx1MIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAnnhKhIjKyFceJkmDx0VpSDl8XWsmKVXOQCPTHTYl4jv+U8R1
W5+GYeuNAn+SdpE4ooG1qqnXSrdBt8mijs9Dnwr86BReqO7NVbOWXAXvpBfb8sWk
LsDooulW5C5wr/KdlzFV2sUYdpW/4Db+kZUa5MEBCRXOmiL+p95T5rONoedPzG7L
PvfYJHB81HfRojiz+qR3h1tEgcNgpkjsAtwsbo4TYXquf53KgkvOxSaw6TSIZv23
8ZZGyEz5IBnq7Q3hKPVenoVBAX7akOKl/GJhSiR6mLqVr/RG81VqMNxvb362KvU2
5Z0XZBhrj44WVlkTBZwiGBOLoiphi9k++eAK7aXkp/q+nSkkm+J4HWxnmW2CPNFe
+fKlElfLqdSFFIWsLHHpWy0011Cq89edcF41DKslWRah4YRwWB2fAEHE9yTe7RmP
Qk8BReqPzhgMfoXMT6pFn2ozKA3NPMfDrfkWSa/ua1GN0QHzq0Bs3fpQ2kjjmf0U
IlEmTj5yFnG7ETse0aN4wTk12VjTCeuPYtHiu18BTH5MlXNsSg+8RXd81m0ZHaXK
WR29SeYxM6GYmLHP0yNQPIxLrLLaGboXseBi6NReW7D2NAjMgFfDrBMhhK5v+N83
OlqMYjDV5WICEqZuzqAi/7sfeH+tF+xJS7zeW0FBNezEeK+p9AWg2dlZCQMCAwEA
AaOCAWIwggFeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZtftFPi9+WUcKQ5HMDCQ
vC/WV64wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wJQYDVR0RBB4wHIIac2FpbnQt
bmljb2xhcy5raW5lcG9saXMubHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGVCRirl
URq02g7SrFI132YcmR2RAWq8UtPeuw9O/SUAgWvc8sbtfi8jLzNkPl7NVKb6bQUo
Y7x307BIWZd9e5uwTpeX/MASAyxJfpcVdYpf7PLbW8EbvoIebT6ldTWw/U8XmwBA
ZlLjNU8N8SaMQTQ1/nvMrP7NoPgJ9bxbhchQ3T4EE4vDXs+fV6IceQHxgfIcdZnc
8+m2dX6/6x9SehshrtI+nBcvNRrOsN9TrPnqBoQjNY8ePCoVjelZhx/kzFl8vvhN
q6T+aOKH6ghFQs2t6nINWuZBIFKkwz6aOX1563ExbovZr5QSnVMRNDisytPJ43Xa
29W7257pqX4xMW0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnnhKhIjKyFceJkmDx0Vp
SDl8XWsmKVXOQCPTHTYl4jv+U8R1W5+GYeuNAn+SdpE4ooG1qqnXSrdBt8mijs9D
nwr86BReqO7NVbOWXAXvpBfb8sWkLsDooulW5C5wr/KdlzFV2sUYdpW/4Db+kZUa
5MEBCRXOmiL+p95T5rONoedPzG7LPvfYJHB81HfRojiz+qR3h1tEgcNgpkjsAtws
bo4TYXquf53KgkvOxSaw6TSIZv238ZZGyEz5IBnq7Q3hKPVenoVBAX7akOKl/GJh
SiR6mLqVr/RG81VqMNxvb362KvU25Z0XZBhrj44WVlkTBZwiGBOLoiphi9k++eAK
7aXkp/q+nSkkm+J4HWxnmW2CPNFe+fKlElfLqdSFFIWsLHHpWy0011Cq89edcF41
DKslWRah4YRwWB2fAEHE9yTe7RmPQk8BReqPzhgMfoXMT6pFn2ozKA3NPMfDrfkW
Sa/ua1GN0QHzq0Bs3fpQ2kjjmf0UIlEmTj5yFnG7ETse0aN4wTk12VjTCeuPYtHi
u18BTH5MlXNsSg+8RXd81m0ZHaXKWR29SeYxM6GYmLHP0yNQPIxLrLLaGboXseBi
6NReW7D2NAjMgFfDrBMhhK5v+N83OlqMYjDV5WICEqZuzqAi/7sfeH+tF+xJS7ze
W0FBNezEeK+p9AWg2dlZCQMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426883566953886411235040557609407205522910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 22:34:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-02 22:34:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saint-nicolas.kinepolis.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646500734663568801504684591671995417999470107550838250682919999243588205354566967052297021451407799943773764031776380277504278485845708641292950657835630037879524937171656250493590117227085761648789838094470936452517292588917961496010088632381763544712585490265756883348960986081663453321227947200615802414347804652605555018596790921995389411194332654169339136869322274425665793957440570538709899895766505889702321357660993725485980448923169021172916253746251562672915210818521747073891466748000617524105114973768150066898376874211941778771280129972036608126997483667100184699041365017772163143394256522971430670673293369544483634549445607891318201508221632927379456757617274488109525339487200052607946858484415981044887550657623069861962330050942891061459709490181621601377045862408845959181835967862117919883383278233445995549205973740083917770178455747690559469183212428011462584112414116425863259315265265478668318545897259026190355577466024865841404867126945797915462205841812495269130724638589603003336702458049064361873278515381840804893161572014762650554755920481010048252979035532479442773545577797655158849704130926003843755405214220490236910392763954961118862911313226660464689574154152547781587762233455829800288473647363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66d7ed14f8bdf9651c290e47303090bc2fd657ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-nicolas.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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