www.gares-sncf.com

- VSC Technologies -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:a3:91:ca:91:7a:3d:3d:0e:65:ba:54:f5:11:05:ff was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VSC Technologies

Organization: VSC Technologies
Organization unit: Exploitation Applicative
Locality: PARIS LA DEFENSE CEDEX
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a3:91:ca:91:7a:3d:3d:0e:65:ba:54:f5:11:05:ff
Serial Number (int): 14141581344294797570828511184059172351
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:a7:75:13:43:0a:cd:7b:0b:4f:8a:9d:d1:28:d3:02:03:48:6d:bc
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 45:e4:15:0e:d9:a0:fe:53:e2:c4:5c:d7:54:98:db:5e:d8:92:a1:b3
Fingerprint (sha256): 2c:4c:d9:e3:53:2a:23:e1:78:3a:b6:54:97:6f:c6:ee:7f:43:2e:9d:7f:9a:83:b6:f4:85:93:e8:56:3f:7d:2a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.gares-sncf.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gares-sncf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gares-sncf.com
gares-sncf.com
www.garessncf.com
cms.gares-sncf.com
www.gare-sncf.com
www.objets-trouves-sncf.com
objets-trouves-sncf.com
www.garesncf.com

Other certificates including the domain name gares-sncf.com

(limited to 100 certificates)
www.gares-sncf.com
survey.gradwell.com
*.sncfconnect.com
citybooster.gares-sncf.com
survey.westernwindowsystems.com
tenue-technigares.gares-sncf.com
supportsurvey.control4.com
autocars.gares-sncf.com
surveys.myarg.com
api.recette.autocars.gares-sncf.com
citybooster.gares-sncf.com
surveys.fredmangroup.com
surrogate.omegafamilysurrogates.com
challenge-open-beacon.gares-sncf.com
www.gare-sncf.com
soiree.gares-sncf.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
gares-sncf.com
*.sncfconnect.com
certificates.getfeedback.com
eval.bts.com
api.autocars.gares-sncf.com
survey.boomtownroi.com
citybooster.gares-sncf.com
feedback.wufoo.com
feedback.blackboardinsurance.com
challenge-open-beacon.gares-sncf.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
wifi-euro2016.gares-sncf.com
www.gares-sncf.com
supportsurvey.control4.com
feedback.liftago.com
challenge-open-beacon.gares-sncf.com
feedback.nanotempertech.com
customdomain.getfeedback.com
soiree.gares-sncf.com
survey.westernwindowsystems.com
survey.adstream.com
surveys.fredmangroup.com
mes-donnees.gares-sncf.com
feedback.auditorservice.com
wifi-euro2016.gares-sncf.com
tenue-technigares.gares-sncf.com
surveys.elkay.com
customdomain.getfeedback.com
feedback.nextdc.com
feedback.inap.com
feedback.auditorservice.com
autocars.gares-sncf.com
survey.gradwell.com
feedback.nextdc.com
citybooster.gares-sncf.com
certificates.getfeedback.com
autocars.gares-sncf.com
recette.autocars.gares-sncf.com
citybooster.gares-sncf.com
feedback.qualityhosting.de
challenge-open-beacon.gares-sncf.com
feedback.nanotempertech.com
getfeedback.wire.com.au
certificates.getfeedback.com
feedback.smilebooth.com
cms.gares-sncf.com
api.autocars.gares-sncf.com
ws1031.nkws1031-a.s7.netkin.io
citybooster.gares-sncf.com
www.gare-sncf.com
cody-test.getgetfeedbackback.com
api.recette.autocars.gares-sncf.com
www.gares-sncf.com
recette.autocars.gares-sncf.com
autocars.gares-sncf.com
ws1031.nkws1031-a.s7.netkin.io
citybooster.gares-sncf.com
*.sncfconnect.com
green-connexions.gares-sncf.com
cityetconnexions.gares-sncf.com
feedback.nanotempertech.com
api.autocars.gares-sncf.com
soca-prod.gares-sncf.com
surveys.nextep.com
surveys.verisys.com
feedback.spscommerce.com
test-customdomain.getfeedback.com
citybooster.gares-sncf.com
test-customdomain.getfeedback.com
export-gsc.gares-sncf.com
ws1345.nkws1345-a.s10.netkin.io
*.sncfconnect.com
votreavis.gares-sncf.com
feedback.qualityhosting.de
enquete.pietervanforeest.nl
challenge-open-beacon.gares-sncf.com
export-gsc.gares-sncf.com
votreavis.gares-sncf.com
tenue-technigares.gares-sncf.com
challenge-open-beacon.gares-sncf.com
www.gare-sncf.com

Certificate

The complete raw certificate details for www.gares-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurmD/Ec720N9c8ZRMvPR
BxYdFxf6OU1rtqer5N3vy+AcHe0TOw0USYUW5+dQiCdNxP6QpLKmGAQe9ALnFPkq
GYTP6RLA4nhOe847fWjkpK/GgN3yg7JjtYqEFT0nI6mql/B8YxxIRVCvKXghxWFh
Dxj8QMJDuUCWw66+7y17dzUBIo6/zpTMBx9SrPqaoormoGPKvW31FqTY2P4FxZKv
MHxT5fLGX1skHju0+IvrJwcOcG9Qan1E3J3BFHRuZcCjeTSAO4zWTv+iaenUBRs9
u1NaLFguXsKA8zOVvEePHOqCpPy6pST9f4G6cR5i9F9htMQr5xH3UyyAKRExJ1pc
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14141581344294797570828511184059172351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS LA DEFENSE CEDEX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VSC Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Exploitation Applicative'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gares-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23571805859920244576824528454711670143257097154463133029234782840700067900253064485970056083520628380495963942257511014089499324273396012172043943633229393273933525511916835080151798202964324136970860417959949915759351151498010120900772984128349610034032585750298605630309779174354128591233942056790811595154331504614414369227406068765792477603169879349952100324032856276983855433668494098598056737005144301978112036925829255338541522505194966219030073306873806719057945229039884117879900634649665031877896110398309798693010362635197977421837195133064780760819021853580306570858399069054403975048422699604940397632699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77a77513430acd7b0b4f8a9dd128d30203486dbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gares-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gares-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garessncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.gares-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gare-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.objets-trouves-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'objets-trouves-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garesncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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