onlyoffice.umrthema.univ-fcomte.fr

- Universite de Franche Comte -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0d:33:70:53:9e:3f:41:84:87:2c:16:43:b7:11:14:7d was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universite de Franche Comte

Organization: Universite de Franche Comte
Locality: Besançon
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:33:70:53:9e:3f:41:84:87:2c:16:43:b7:11:14:7d
Serial Number (int): 17547049339777383504772080780033725565
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:38:cc:9d:df:50:6e:ce:a1:ef:05:b6:7d:5b:0d:e1:04:fc:52:0c
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): a2:78:05:9f:3f:cf:06:ac:95:d7:da:4b:aa:fd:16:8f:6a:1c:63:b9
Fingerprint (sha256): 1d:80:f9:0b:d0:14:0c:64:d0:61:f1:4f:ed:e7:14:bb:c2:67:b1:7e:52:92:5d:70:79:2d:8e:6f:08:46:9e:c2

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate onlyoffice.umrthema.univ-fcomte.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onlyoffice.umrthema.univ-fcomte.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onlyoffice.umrthema.univ-fcomte.fr

Other certificates including the domain name univ-fcomte.fr

(limited to 100 certificates)
mail.univ-fcomte.fr
angron.univ-fcomte.fr
dna-library.univ-fcomte.fr
applications.univ-fcomte.fr
oae.univ-fcomte.fr
c2i.univ-fcomte.fr
media-phototheque.univ-fcomte.fr
mescours.univ-fcomte.fr
ewet-db.univ-fcomte.fr
scd.univ-fcomte.fr
applications.univ-fcomte.fr
trimestres-lmb.univ-fcomte.fr
agora.univ-fcomte.fr
ent3.univ-fcomte.fr
monitoring.univ-fcomte.fr
mail-edu.univ-fcomte.fr
ged.univ-fcomte.fr
gitlab.usrmshe.univ-fcomte.fr
mail-edu.univ-fcomte.fr
moodle.univ-fcomte.fr
webmail.iut-bm.univ-fcomte.fr
mmi-projet.pu-pm.univ-fcomte.fr
lizmap-mshe.univ-fcomte.fr
nextcloud.umrthema.univ-fcomte.fr
cri.univ-fcomte.fr
moodle.univ-fcomte.fr
paleofire-tmp.univ-fcomte.fr
acces.univ-fcomte.fr
ged-dev.univ-fcomte.fr
acces.univ-fcomte.fr
applications.univ-fcomte.fr
saturne.univ-fcomte.fr
mescours.univ-fcomte.fr
agora.univ-fcomte.fr
chrono-environnement.univ-fcomte.fr
courrier.iut-bm.univ-fcomte.fr
demat.pu-pm.univ-fcomte.fr
dom.univ-fcomte.fr
unicampus.univ-fcomte.fr
wifi.univ-fcomte.fr
agora.univ-fcomte.fr
sedna.univ-fcomte.fr
web-edu.univ-fcomte.fr
chrono-cloud.univ-fcomte.fr
virt-rezo-3-eduroam.univ-fcomte.fr
mmi-projet.pu-pm.univ-fcomte.fr
webmail.univ-fcomte.fr
chrono-cloud.univ-fcomte.fr
monitoring.univ-fcomte.fr
chrono-pf.univ-fcomte.fr
mail-edu.univ-fcomte.fr
emaeval.univ-fcomte.fr
disc.univ-fcomte.fr
lifc-svn2.univ-fcomte.fr
zaaj.univ-fcomte.fr
onlyoffice.umrthema.univ-fcomte.fr
oae.univ-fcomte.fr
co2dim.pu-pm.univ-fcomte.fr
zaaj.univ-fcomte.fr
oae.univ-fcomte.fr
liste.univ-fcomte.fr
acces.univ-fcomte.fr
absences.pu-pm.univ-fcomte.fr
webmail.univ-fcomte.fr
gpwg.univ-fcomte.fr
web-edu.univ-fcomte.fr
mail.univ-fcomte.fr
mmi-projet.pu-pm.univ-fcomte.fr
angron.univ-fcomte.fr
oae.univ-fcomte.fr
idp.univ-fcomte.fr
mescours.univ-fcomte.fr
ent.univ-fcomte.fr
wifi.univ-fcomte.fr
demat.pu-pm.univ-fcomte.fr
moodle.univ-fcomte.fr
reinscriptions.univ-fcomte.fr
dept-info.univ-fcomte.fr
lifc-svn2.univ-fcomte.fr
dept-info.univ-fcomte.fr
scd.univ-fcomte.fr
c2i.univ-fcomte.fr
disc.univ-fcomte.fr
ent-1.univ-fcomte.fr
lidar-mshe.univ-fcomte.fr
fanum-txm.univ-fcomte.fr
lifc-svn2.univ-fcomte.fr
bigbluebutton.serveurs.dsi.univ-fcomte.fr
mail-edu.univ-fcomte.fr
psm-serv.pu-pm.univ-fcomte.fr
applications.univ-fcomte.fr
ged.univ-fcomte.fr
ent-1.univ-fcomte.fr
smtps.univ-fcomte.fr
ent-0.univ-fcomte.fr
cloud-cri.pu-pm.univ-fcomte.fr
ent-1.univ-fcomte.fr
messager.iut-bm.univ-fcomte.fr
data-mshe.univ-fcomte.fr
mobility.univ-fcomte.fr

Certificate

The complete raw certificate details for onlyoffice.umrthema.univ-fcomte.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGOgdKdJk5tgLPwWEWp
rG+WCL8LKtiyoJaaNhYGv+HAp2Lsdiuj/TJmKZbvM/rT7hDh/LK5HzgIPA0/7P1K
RHjQACzJ8MaG1+tPN6URB6asMiR25cge14HGhKhDqp66yDK11/14/4p7WpoP3N1Q
FqMw7weuDDR3b5XXnrrvNyLAoRVNFMHm6W3cjKRdwuJE1ZQmJ4Bz8rRcNTnp1oE8
5HjilNO7yzsVFm6RV8PiTWc+u2IU2zGLzJqhyI/H7fUgP3PayNkfXV3cqsYeUVws
uy2vTSOVkQL7FVu3NSUYKteOmBU689UTL4X+DiGO3pAujk3tDyO1Nx/K1fbIpQmL
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17547049339777383504772080780033725565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Besançon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universite de Franche Comte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onlyoffice.umrthema.univ-fcomte.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22400176859231142789918687043064810449846682850143609233169956315694657938848212455787954792311092230588068934538239233974575921550363501907348380913860721758067467536056359605799824255083422415026226165473004978952028678482481551639648988854210047808977042931075974705575184634982703973014180352711415709404984858562940176307565041476038089862248896398273735808379449473973639355804328875577944648139931759358327671893281838978369711946792008789683616284588611835860182396435548825299591509206486030642062888180649156883276537475887882802471412962126719488854953956255368227185586890067366635405534394833850230999977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c38cc9ddf506ecea1ef05b67d5b0de104fc520c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyoffice.umrthema.univ-fcomte.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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