vpn.woonzorg.nl

Issued by KPN Corporate Market CSP Organisatie CA - G2

About this certificate


This digital certificate with serial number 76:12:8e:6e:d8:60:39:73:f2:64:b3:73:cc:aa:a0:71 was issued on by KPN Corporate Market BV .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has key usage [KeyAgreement] set
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Woonzorg Nederland

Company registration number: 00000003331078940000
Organization: Woonzorg Nederland
Organization unit: ICT
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

KPN Corporate Market BV

Organization: KPN Corporate Market BV
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 76:12:8e:6e:d8:60:39:73:f2:64:b3:73:cc:aa:a0:71
Serial Number (int): 156945253730300385320065031703009861745
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 32:27:1d:d9:6c:93:9b:5d:22:39:38:e6:dd:6c:2c:5a:dd:d8:10:c3
AuthorityKeyId: 26:d0:65:13:f1:ee:7a:6f:61:08:28:de:4d:98:07:12:48:78:b4:ef

Fingerprint (sha1): f4:8a:59:25:a8:48:17:67:96:d9:18:f0:47:48:12:96:f3:e0:c6:4a
Fingerprint (sha256): c5:25:18:61:9a:a9:66:12:7f:61:cd:d2:18:f2:d4:e3:41:7c:73:cc:4c:ca:b4:76:ce:98:20:b0:61:68:a6:ff


Revocation information

OCSP Server: http://ocsp3.managedpki.com
CRL Distribution Point: http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl

Check the revocation status for the current certificate on vpn.woonzorg.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: vpn.woonzorg.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGdTCCBF2gAwIBAgIQdhKObthgOXPyZLNzzKqgcTANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJOTDEgMB4GA1UECgwXS1BOIENvcnBvcmF0ZSBNYXJrZXQgQlYx NTAzBgNVBAMMLEtQTiBDb3Jwb3JhdGUgTWFya2V0IENTUCBPcmdhbmlzYXRpZSBD QSAtIEcyMB4XDTE1MDMwMjAwMDAwMFoXDTE4MDMwMTIzNTk1OVowgZ4xCzAJBgNV BAYTAk5MMRYwFAYDVQQIDA1Ob29yZC1Ib2xsYW5kMRMwEQYDVQQHDApBbXN0ZWx2 ZWVuMRswGQYDVQQKDBJXb29uem9yZyBOZWRlcmxhbmQxDDAKBgNVBAsMA0lDVDEd MBsGA1UEBRMUMDAwMDAwMDMzMzEwNzg5NDAwMDAxGDAWBgNVBAMMD3Zwbi53b29u em9yZy5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSCuET4y+QN Eb1a0en3wMQLMMNRxOkAD0zPLPdXMhMwSfA9kWU+VW8dF0HVx6weT/1zNqPxPRo7 dIlxyEjhJOdSp9E7gdETFy5SGzomWDwLhs7srdCBvGSWVxEAMtwUN1SEZsICPh82 lzeGhhl3W2ouM4nwPuBMST2OqMeE8pAGRHdgYkZi351ZAWEzUP4JFqedvhPTd07o ZqZXL+CmihpFo16yxGr0DEyoTFNKaZH5t0OY8gfb3csuBcyAhPGO+/Ar3oloFE4/ UGR+/KpBxCNSZWlKlqaq6tcRxOMcj3AQdnhRZ5g4eAkQssSG4vRuADSr1383Bybb usiDdAGUKR8CAwEAAaOCAeQwggHgMAwGA1UdEwEB/wQCMAAwYgYDVR0fBFswWTBX oFWgU4ZRaHR0cDovL2NlcnQubWFuYWdlZHBraS5jb20vY3JsL0tQTkNvcnBvcmF0 ZU1hcmtldENTUE9yZ2FuaXNhdGllQ0FHMi9MYXRlc3RDUkwuY3JsMA4GA1UdDwEB /wQEAwIDqDCBpwYDVR0gBIGfMIGcMIGZBgpghBABh2sBAgUGMIGKMDcGCCsGAQUF BwIBFitodHRwczovL2NlcnRpZmljYWF0Lmtwbi5jb20vcGtpb3ZlcmhlaWQvY3Bz ME8GCCsGAQUFBwICMEMaQU9wIGRpdCBjZXJ0aWZpY2FhdCBpcyBoZXQgQ1BTIFBL SW92ZXJoZWlkIHZhbiBLUE4gdmFuIHRvZXBhc3NpbmcuMB8GA1UdIwQYMBaAFCbQ ZRPx7npvYQgo3k2YBxJIeLTvMB0GA1UdDgQWBBQyJx3ZbJObXSI5OObdbCxa3dgQ wzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGgYDVR0RBBMwEYIPdnBu Lndvb256b3JnLm5sMDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAYYbaHR0cDov L29jc3AzLm1hbmFnZWRwa2kuY29tMA0GCSqGSIb3DQEBCwUAA4ICAQB/5o8rA3L1 nCgb3ejZUxo/C9xn/SWUNW2Ugduug+odVzDNdE2IL1+VLtGyusGvE1pXIWrzbW84 obOj3ZAuU6dYMISqzf5xvDItLPyMWdBc6Wk/ZjjZlXoBEpjyUZ+JupjDKBmY0bgU Zx0nC3CZc8Nuddf6XlzhdrFG6dWKzcS2TWv68zeE0Ra4si1Yw31T/jxvszrWdAcs 4ZQY7nTlgJOrnYHM3y0ZrdHU6kFc9cpcB04YCE8wW7KOXLYSs8Qf9HOu3kfL1sdT v1vXTeh/auPbyKrAnGS3o01bdMWoOMi7W5Hq2aZ7teu7iZzGL8Ui416cDcb92Bzg AR59o/voidD/qJaB3UdzAvuV5QdQADjcek4NToY+wmH3M11UJ6I/Py0XcHX6GNL3 p5H/F/ujpgZbIfrZYQ+6iUVy01vASTOSHIDw/0byLJ/obzP34lp4RW1oRv0RoJ6R oclXlIeueuXmcEqnKEe4DKKb2rJMqJTdDH++qXonwKV9QuYj/brDQ4cWGmAILryP 7gpaBGcQDcE1d4bCCagoMJz4ve1d1Ncsa7ABLJEs7uLezL6jBPF2FEraZoXDIxh7 P+FUGSQNihLJ2mP7+P8KSQmlrdTOvcj80IChDtSdQqwztuF8PNF1MdScGNO/xreo cg9bC/HhsefwcwMLThmRKIlsEdwo5lRzYQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIK4RPjL5A0RvVrR6ffA xAsww1HE6QAPTM8s91cyEzBJ8D2RZT5Vbx0XQdXHrB5P/XM2o/E9Gjt0iXHISOEk 51Kn0TuB0RMXLlIbOiZYPAuGzuyt0IG8ZJZXEQAy3BQ3VIRmwgI+HzaXN4aGGXdb ai4zifA+4ExJPY6ox4TykAZEd2BiRmLfnVkBYTNQ/gkWp52+E9N3Tuhmplcv4KaK GkWjXrLEavQMTKhMU0ppkfm3Q5jyB9vdyy4FzICE8Y778CveiWgUTj9QZH78qkHE I1JlaUqWpqrq1xHE4xyPcBB2eFFnmDh4CRCyxIbi9G4ANKvXfzcHJtu6yIN0AZQp HwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 156945253730300385320065031703009861745 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KPN Corporate Market CSP Organisatie CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amstelveen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Woonzorg Nederland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003331078940000' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.woonzorg.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20767542351480069827846775790987552923906168534101559841627463685680330134748954517630887643577647203535141155450422522680862836264486628727524891528395214147194347789999750932380428192284969420854012683219127675282117944620511671482459005861667920703099385674967778232600080783716043871983993209687139600448823278920731130880064068643130951352085350246009058292111043835720752107345594380320963950900146468368900370665793347199547137594557488175562739080907825117272433895646876293434313483311132962448224272654115097122231383976692066205943098785782669292970278948271224289016832865540789280924314550457719042877727 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.managedpki.com/crl/KPNCorporateMarketCSPOrganisatieCAG2/LatestCRL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificaat.kpn.com/pkioverheid/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [79 112 32 100 105 116 32 99 101 114 116 105 102 105 99 97 97 116 32 105 115 32 104 101 116 32 67 80 83 32 80 75 73 111 118 101 114 104 101 105 100 32 118 97 110 32 75 80 78 32 118 97 110 32 116 111 101 112 97 115 115 105 110 103 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26d06513f1ee7a6f610828de4d9807124878b4ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 32271dd96c939b5d223938e6dd6c2c5addd810c3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.woonzorg.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.managedpki.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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