spirale.ac-reims.fr

- Rectorat de l'Académie de Reims -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0e:cc:01:4b:a2:c8:03:ce:87:ef:fb:11:1d:1d:46:70 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rectorat de l'Académie de Reims

Organization: Rectorat de l'Académie de Reims
Organization unit: ac-reims
Locality: Reims
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:cc:01:4b:a2:c8:03:ce:87:ef:fb:11:1d:1d:46:70
Serial Number (int): 19668446775030094010274142085067916912
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c4:6b:d1:7d:59:69:e6:92:a5:16:47:a0:24:d2:7e:6d:34:94:62:ff
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 90:66:06:6f:80:94:3f:90:46:f6:af:97:4a:7c:2b:93:e2:23:c8:e6
Fingerprint (sha256): 1d:d1:a6:c1:6f:31:78:ee:92:cc:89:81:91:89:2e:30:9e:af:69:2e:fd:29:bf:2c:61:44:f6:f3:16:81:0e:7d

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate spirale.ac-reims.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spirale.ac-reims.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spirale.ac-reims.fr

Other certificates including the domain name ac-reims.fr

(limited to 100 certificates)
ent.clg-arcis.ac-reims.fr
recette-jalladdin.ac-reims.fr
webcours.clg-grandpre.ac-reims.fr
ent.lp-argonne.ac-reims.fr
ent.clg-langevin.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
apache-extranet-t.ac-reims.fr
webcours.clg-pont-ste-marie.ac-reims.fr
partage.ac-reims.fr
web2.ac-reims.fr
php71-dev.in.ac-reims.fr
lyc-oehmichen.ac-reims.fr
php72-dev.in.ac-reims.fr
sympatic.ac-reims.fr
sepia.ac-reims.fr
ent.clg-signy-petit.ac-reims.fr
note.lyc-givet.ac-reims.fr
webmail.ac-reims.fr
webcours.clg-aix-en-othe.ac-reims.fr
ent.clg-george-sand.ac-reims.fr
webcours.clg-george-sand.ac-reims.fr
demo-envole.ac-reims.fr
lp-diderot.ac-reims.fr
webcours.clg-le-noyer-marchand.ac-reims.fr
sepia2.ac-reims.fr
sepia2.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
wheb.ac-reims.fr
hesia.ac-reims.fr
atlantique.ac-reims.fr
wordpress1.ac-reims.fr
ent.clg-delafontaine.ac-reims.fr
ent.clg-nouvion.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
sympatic.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
note.lyc-la-fontaine-du-ve.ac-reims.fr
ovidentia.ac-reims.fr
webmail.ac-reims.fr
ent.clg-vouziers.ac-reims.fr
formation-envole.ac-reims.fr
ent.clg-juniville.ac-reims.fr
smtps.ac-reims.fr
webcours.clg-portier.ac-reims.fr
apache-extranet-t.ac-reims.fr
ent.clg-mace.ac-reims.fr
web2.ac-reims.fr
webcours.clg-chaource.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
dialog.ac-reims.fr
ent.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
atlantique.ac-reims.fr
ent.lyc-edouard-herriot.ac-reims.fr
webclasseur.ac-reims.fr
ocean.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
smtps.ac-reims.fr
ent.clg-belgrand.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-mery.ac-reims.fr
spirale.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lp-simone-veil.ac-reims.fr
clg-bastie.ac-reims.fr
webcours.clg-vireux-wallerand.ac-reims.fr
extranet.ac-reims.fr
webclasseur.ac-reims.fr
ent.clg-vendeuvre.ac-reims.fr
sepia.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lyc-edouard-herriot.ac-reims.fr
piatest.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
wheb.ac-reims.fr
ent.clg-rimbaud.ac-reims.fr
ent.clg-fumay.ac-reims.fr
xxi.ac-reims.fr
lp-diderot.ac-reims.fr
spirale.ac-reims.fr
sitetab3.ac-reims.fr
iwc.ac-reims.fr
bv.ac-reims.fr
ent.clg-juniville.ac-reims.fr
lyc-chagall.ac-reims.fr
ent.clg-raucourt.ac-reims.fr
tage.ac-reims.fr
syndicat.ac-reims.fr
hub-envole.ac-reims.fr
webcours3.ac-reims.fr
iwc.ac-reims.fr
ovidentia.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
lp-simone-veil.ac-reims.fr
ent.clg-vrigne.ac-reims.fr
ent-tournebonneau.ac-reims.fr
ovidentia.ac-reims.fr
ocs-ext.ac-reims.fr
ent.clg-mery.ac-reims.fr

Certificate

The complete raw certificate details for spirale.ac-reims.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiLn/F+xieFmioE1bFym
pbMrILXh4WxgQVE7vl0pPo+tCC+pyMhyGTnWksokSQ4hwhxgyxLmSVXD/JjDxOpA
GlzGTX2i2f6Npzf7Qe0sfwjPJ9p0fUHgGIaxfpHB6vWgs8VtN/YRMzuZs9gZLAwD
1Iic4yYTANkqeuvMgZV3i6Y1QLRUvypDkNyG7URSN8sPHQQgJCGc7ukPNQME5tAe
cSGhsKqb28IpcKoqSyEY8nWk31hQgXliEEMZgVnVhQHmZExD/GxqZZjTr+UhlB31
O7bbNCbwzGsydZ5SRseTqP7LzbPP5OIWa2LvyqSAmnr0dbpaHWhY8/kBaWv+NfEJ
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19668446775030094010274142085067916912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reims'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rectorat de l'Académie de Reims'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-reims'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spirale.ac-reims.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20972771510489879896415605635930060088117913891909821445568352906435991872597511503365704400519278791177163358091620829684983777954350821340896961229184434941083292069663181803379695340717365994868151056186416481483314323848817632884407016528626581882902629515553385455639066604290934824409816718792086561092831786274134737744288438524243181229897188565500580283127272107752385240201366485317737756830982098656769390778357203365445249245340582455160160158101511841132661225373877080953703773675933778128619402228650962911082223281241973273302134437888258240104492106557631965447946452561333119644848227219377084238251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c46bd17d5969e692a51647a024d27e6d349462ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spirale.ac-reims.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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