wachttijden.nza.nl

- De Nederlandse Zorgautoriteit (NZa) -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 43:2c:17:8b:df:a2:d3:08:0b:48:59:cf:db:5f:34:62 was issued on by Sectigo Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

De Nederlandse Zorgautoriteit (NZa)

Company registration number: 52503143
Organization: De Nederlandse Zorgautoriteit (NZa)
State / Province: Utrecht
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 43:2c:17:8b:df:a2:d3:08:0b:48:59:cf:db:5f:34:62
Serial Number (int): 89287214356712369112025447985416451170
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 59:28:3f:43:f4:1e:39:35:b9:80:ab:f3:ef:1f:50:81:57:db:d2:be
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 83:43:e4:60:55:79:c7:1d:ec:4e:60:dc:d8:ff:0e:5e:de:44:d5:b0
Fingerprint (sha256): 2e:a9:c1:23:e7:a2:0a:f6:df:64:bd:62:f0:17:93:15:36:b9:8f:56:56:e0:fd:4f:63:b2:b2:ec:e0:92:ac:20

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate wachttijden.nza.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wachttijden.nza.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wachttijden.nza.nl

Other certificates including the domain name nza.nl

(limited to 100 certificates)
www.nza.nl
zorgproducten-test.nza.nl
customerportal.uk.rlb.com
www.werkenmetdbcs.nza.nl
systems.squaredup.com
dbcregels.nza.nl
adfs.nza.nl
praatmee.nza.nl
zorgproducten-test.nza.nl
*.nza.nl
hub.theriderfirm.cc
dbcregels.nza.nl
nza-portaal1.nza.nl
servicedesk.esmsglobal.com
nzarpsamd001.nza.nl
nzarpsamd001.nza.nl
service.littlegarth.org
nza-form6.nza.nl
www.nza.nl
leren.nza.nl
dkdlmodel.nza.nl
zorgvraagtypering.nza.nl
nza-form5.nza.nl
uitwisselportaal.nza.nl
zorgproducten-test.nza.nl
customerportal.uk.rlb.com
hybrid.nza.nl
tarievenzoekerzorgprestatiemodel.nza.nl
dkdlmodel.nza.nl
support.homeinstead.ie
zorgvraagtypering-test.nza.nl
dbcregels.nza.nl
meldingsformulier.nza.nl
nzarpsamd001.nza.nl
nzarpsamd001.nza.nl
dbcregels.nza.nl
zorgclustertool-test.nza.nl
nzarpsamd002.nza.nl
nzarpsamd001.nza.nl
zorgproducten.nza.nl
www.nza.nl
zorgproducten-test.nza.nl
support.homeinstead.ie
service.littlegarth.org
soporte.martinezabolafio.com
zorgproducten-test.nza.nl
zorgproducten-test.nza.nl
nza.nl
servicedesk.coram.eu
uitwisselportaal.nza.nl
zorgcijfers.nza.nl
sd.srk-zuerich.ch
zorgproducten.nza.nl
login.nza.nl
nza-form2.nza.nl
mijn-accp.nza.nl
helpdesk.sunlight.gr
support.brill.com
portal.nza.nl
www.werkenmetdbcs.nza.nl
dbcregels.nza.nl
support.homeinstead.ie
nzarpsamd001.nza.nl
leren.nza.nl
helpdesk.itwfasteners.com
dbcregels.nza.nl
nzarpsamd002.nza.nl
mijn-accp.nza.nl
nzarpsamd002.nza.nl
nzarpsamd001.nza.nl
dbcregels.nza.nl
wireless.nza.nl
nza-portaal1.nza.nl
zorgproducten-test.nza.nl
zorgcijfers.nza.nl
uitwisselportaal.nza.nl
nza-form1.nza.nl
zorgproducten.nza.nl
nzarpsamd002.nza.nl
dbcregels.nza.nl
www.werkenmetdbcs.nza.nl
zorgproductenviewer.nza.nl
adfs.nza.nl
mta-sts.nza.nl
acceptatie.crm.nza.nl
owa.nza.nl
zorgclustertool.nza.nl
adfs.nza.nl
l1.platformrijksoverheid.nl
werkenbijde.nza.nl
ithelpdesk.koinly.io
nzarpsamd002.nza.nl
nieuwmodelggzfz.nza.nl
aanvragen.nza.nl
customerportal.uk.rlb.com
nzarpsamd001.nza.nl
nza-form3.nza.nl
l1.platformrijksoverheid.nl
helpdesk.sunlight.gr
wachttijden.nza.nl

Certificate

The complete raw certificate details for wachttijden.nza.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfvmGrIdXu7zuU9gYO9+
vCl6KrPJFT3hG9FVqM0arTYjt78MU9jhgxR4LkKPzjUt+js/x/oDTMvKK1Y+1KSK
SedfnpO0T8X1WCJjf8mNMdkPYXyigd0EgmndA9hImQMXzS7epQm0v0NB91L5+enE
Kn4GRUDupxIL2vIcv7aOZ/9Jy2fuqZ8j6bHuLon8i25O0abERQiRziWJTr3r5V1K
gdusH5MJOTfjQHGbggHw0Qd9DYSRU7+1Otm90+ET5CUKg7zL8inNTz9VGXhWzvYC
1+Xf5OMd8T1TMORpLa8pxrwDTTCRdsuRz8UvVirEEM7XEytvvw+hxnN9iqheBloA
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89287214356712369112025447985416451170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '52503143'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'De Nederlandse Zorgautoriteit (NZa)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wachttijden.nza.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20953536269384588976152440192987619776031965092721478224327963920489479860665106151494710227529405453697405394110509058088640680469712458612245232042587450178957995245207167082378761043111961137831887415849343788077336076377909616541868735423429386080683860308704276359194067759515548211242024118755355204502340293549753744569319915673680894492615383832261247031374135808151291999402814309083062052840666453113453079929495882131886602702024341212418281438346430074526742231042490753731534676137660431899045260338832931910282623307872897226887474689359163564140388824386782623041473919793801910371444070396419286630433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59283f43f41e3935b980abf3ef1f508157dbd2be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wachttijden.nza.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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