bscw.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a0:7f:66:ff:bc:99:30:d3:d4:5a:f0:01:c6:39:1b:c9:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bscw.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a0:7f:66:ff:bc:99:30:d3:d4:5a:f0:01:c6:39:1b:c9:1d
Serial Number (int): 403063669191092149328048680046875626948893
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:b9:d7:06:44:b5:55:2d:4a:b2:c6:0b:5d:7c:15:a4:3a:79:24:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:7a:01:a4:94:df:c6:05:42:20:3e:bc:ca:cd:1e:b9:91:e5:ed:b5
Fingerprint (sha256): 25:55:04:0c:34:c7:47:e1:3f:f2:ca:06:c7:3d:94:dc:2d:55:7a:e5:fd:da:2d:5d:fc:e3:23:6a:ec:e1:a0:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bscw.ercim.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bscw.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bscw.ercim.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for bscw.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISBKB/Zv+8mTDT1FrwAcY5G8kdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzAxNTM2MTNaFw0y
MDAzMjkxNTM2MTNaMBgxFjAUBgNVBAMTDWJzY3cuZXJjaW0uZXUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDWN6zhqsAh3BegE/4l343CSbb491HDhpuY
Be5p2q7XcBWOujgpfFv8UGsHx+x6DuFd4167ErsMd8PYbsGY6rLY6WHHjUs9Istn
xM4vbSSqN54A2lSa8z931n0J4/bDRPhODoeiiM66C+pNzrEimHwYTKw1THzdyI5c
FgHZLp56wLB5Mn0EK3phTdhi0kGJ0a2Yzw9jljXKgo58o4Pa5ZmgwhNmObiCnPVQ
4tE217RX0l2Ps+gVIDdizYno7u0KMgyj2SvUZjq+WG9WDjsS2I8AP9IzzfsG6mz2
99ApK59ceXBa8IcRfBKCkBdpxk5T7tVUQ5A2uBX2eRNmd8BoBgeff8XH5D9aXgQL
jb8AabhhPwAv4IRomNDVqmGcGEDDbNFX7wQETzYnQi3l77hipq/GL6owV/h9o/dD
J4Q3w6sUlHWqkZBjO/bkkpY95pcQkUTgogk27kZ2VgUS9tiSi2cYwjGYQPHr1sBL
5PTKjRSPUFJFBxrtVcNbhN8OElngtaDRS49rGp0jWd+EZ+4Gzoztj4u/jOxC+b8q
1UlwYc1+amfJusE6D3Nr6FlsGIA2fomO2dIHOcfmSnPTYVePPCCOe5wuNFKthFfq
4ReHiOQx+HuEh93VnomVhBzW7u2Tsy3ZQAUuRXk+TNNYwxaH3WPjP6AfBTTswrOm
mkTeT3srZwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQiudcG
RLVVLUqyxgtdfBWkOnkkajAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWJzY3cuZXJjaW0uZXUwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW9XqkMYAAAE
AwBIMEYCIQD0YOHuq+37WH13tb3D4pgHsF/wiiCEZYWIVaHoqeeDcwIhAIRwNMiH
fd4qqF6GAOrQCiracTA9XtsCa8AERL6KOPLZAHUAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFvV6pDCQAABAMARjBEAiAeM6ZViZeIAIyYFX6B4SLa
netiA6Fw7CALAY1/AmVgxAIgRRBRvk19W18eXbwPjw4YJu2j5vkPD+UiP95vyvb8
wVUwDQYJKoZIhvcNAQELBQADggEBABi8fPOCSeur49M+MrMhUnJFcupmEEEy2+Hg
ynmX7jPDmwUL/rAkY1Aop4N1CIGnMQvT6JQB+Yg8SCjmzOQWY9ALSIBWn8cHeOz6
3efwtz4llZLfx3suvVAS21+O8wsC3QjP/3c/5+KePtBJz7L1h9FqkY3pPflxRyOP
M/lmdxWbhfaGaYNP4aGgg1VA5fRHVBGCM7p75G8YrMJrFFSnanKVkaY20JcQKpQO
B6ClnZJMzjFBKCMn4L+GVWq3dM5o5nEsa8oBLUGNqy2OZc0Q49ppWUam7PfgIWJV
1RDGDHH95aYXNJpzJkRyR6g/rmwuhUGAjvcQrp9TeDzAcOayTTM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403063669191092149328048680046875626948893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 15:36:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 15:36:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bscw.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873931078534691341039026980730920894970802005570043472323380287493438472227149109367479570296118311144395951554304900678601295341351133935159392927917615803818009276834591125749858140459502095789606715595757229045891851616665420944481641138032748012006259765305298628297914797191516366009260016255577300317677033379253059130420827093211390417552813511319423266110698233766532704436644181962119963956425238973423784291675826734604057034571025673303512134383760571917747362128959287936129828566682798112245741957754414285348886307204923726146065164642675946097386513153146858532065366300879434012138043637300439943854795381484531778691462730566273965737122074701707903172476251377760704915054015006229444939891512697149683148617243603395057669339660355404245937986997098875236458872245210047476958412588585414430641444059793122844569237180266599374134139164436452809115700896139583015308795888900596476764650962841231964585194316331678930832913019228060867421587836403588210748297418608551202063093150314567522555653143173842523436369956695583019763768041825738688179776502422458846500997480904775780854175789194763285352978716217261898397119047253544608585117955561381017056283451536433193868573263934642722515708926606402762175097703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22b9d70644b5552d4ab2c60b5d7c15a43a79246a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bscw.ercim.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f57aa43180000040300483046022100f460e1eeabedfb587d77b5bdc3e29807b05ff08a208465858855a1e8a9e78373022100847034c8877dde2aa85e8600ead00a2ada71303d5edb026bc00444be8a38f2d9007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f57aa4309000004030046304402201e33a655899788008c98157e81e122da9deb6203a170ec200b018d7f026560c40220451051be4d7d5b5f1e5dbc0f8f0e1826eda3e6f90f0fe5223fde6fcaf6fcc155
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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