*.liberation.fr

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number ac:e9:90:6b:de:1a:6b:f3:c1:fd:04:89:78:21:d2:40 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.liberation.fr

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): ac:e9:90:6b:de:1a:6b:f3:c1:fd:04:89:78:21:d2:40
Serial Number (int): 229839949656178073885126987312118485568
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 99:5d:2b:8f:b3:98:f5:27:97:42:f5:8d:6a:bf:ec:eb:3b:fd:5e:bb
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 53:e5:1d:cb:51:94:c5:f1:20:a1:b6:37:f8:3b:e4:81:4a:89:f2:4a
Fingerprint (sha256): 35:d3:80:56:3f:20:fd:49:ac:bc:46:24:6d:96:23:80:74:d1:ce:8d:6c:09:e4:9c:1b:07:29:05:c4:05:dc:48

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate *.liberation.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.liberation.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.liberation.fr
liberation.fr

Other certificates including the domain name liberation.fr

(limited to 100 certificates)
abo.liberation.fr
f7ds.liberation.fr
pws.actus-business.fr
*.liberation.fr
boutique.liberation.fr
*.liberation.fr
api.sandbox.abo.liberation.fr
staging.mobile.abo.liberation.fr
boutique.liberation.fr
*.liberation.fr
journalfacebook.liberation.fr
boutique.liberation.fr
*.sandbox.abo.liberation.fr
liberation.fr
auth.api.liberation.fr
boutique.liberation.fr
consent.liberation.fr
abo.liberation.fr
staging.api.abo.liberation.fr
*.liberation.fr
f7ds.liberation.fr
demo.front.abo.liberation.fr
bulb.liberation.fr
api.unes.liberation.fr
api.abo.liberation.fr
bulb.liberation.fr
abo.liberation.fr
*.liberation.fr
abo.liberation.fr
boutique.liberation.fr
boutique.liberation.fr
liberation.web.arc-cdn.net
f7ds.liberation.fr
boutique.liberation.fr
sandbox.api.abo.liberation.fr
*.liberation.fr
*.liberation.fr
api.abo.liberation.fr
mobile.abo.liberation.fr
staging.abo.liberation.fr
cms-resources.api.liberation.fr
oeilsurlefront.liberation.fr
staging.webhooks.abo.liberation.fr
staging.api.abo.liberation.fr
abo.liberation.fr
abonnement.liberation.fr
petites-annonces.liberation.fr
docs.api.abo.liberation.fr
webhooks.abo.liberation.fr
f7ds.liberation.fr
boutique.liberation.fr
abonnement.liberation.fr
boutique.liberation.fr
auth.api.liberation.fr
24h.liberation.fr
f7ds.liberation.fr
*.sandbox.abo.liberation.fr
*.sandbox.abo.liberation.fr
staging.abo.liberation.fr
boutique.liberation.fr
f7ds.liberation.fr
partners.abo.liberation.fr
boutique.liberation.fr
f7ds.liberation.fr
*.liberation.fr
boutique.liberation.fr
webhooks.abo.liberation.fr
cours-anglais.liberation.fr
boutique.liberation.fr
*.liberation.fr
f7ds.liberation.fr
f7ds.liberation.fr
*.sandbox.abonnement.lexpress.fr
boutique.liberation.fr
sandbox.abo.liberation.fr
pws.actus-business.fr
boutique.liberation.fr
statics.liberation.fr
liberation.web.arc-cdn.net
boutique.liberation.fr
petites-annonces.liberation.fr
api.abo.liberation.fr
f7ds.liberation.fr
*.liberation.fr
*.em-cms.liberation.fr
api.abo.liberation.fr
staging.partners.abo.liberation.fr
f7ds.liberation.fr
abo.liberation.fr
id-factory.api.liberation.fr
f7ds.liberation.fr
abo.liberation.fr
abo.liberation.fr
petites-annonces.liberation.fr
f7ds.liberation.fr
portail.liberation.fr
f7ds.liberation.fr
f7ds.liberation.fr
f7ds.liberation.fr
f7ds.liberation.fr

Certificate

The complete raw certificate details for *.liberation.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG9zCCBN+gAwIBAgIRAKzpkGveGmvzwf0EiXgh0kAwDQYJKoZIhvcNAQEMBQAw
SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T
U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMjAyMDMwMDAwMDBaFw0y
MzAyMDMyMzU5NTlaMBoxGDAWBgNVBAMMDyoubGliZXJhdGlvbi5mcjCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM8eJfZ/WrL9Ck+JCSxedvPwxee9q37k
ZIt0ec6BmpjYuDcLR0agmv39grnyNd1YNfo0kyA91LD6867Mic3uKKUAzt7Pc7sU
f5mRaCUJIDwig6mDE/7ekv+DsVLGvx7aGeWwoM8k4UkFWOrseZaUu2HO8mNGxgFQ
5GJg73MydYa0JO7/nCxxAWsVp4yPXdG1NecnRBeVyitZ7puf5LjGVrL+INzsX272
wEg7jcb9Ecw8Y8YAYrwD3NwuE52fqLbeTGXpcraasmijCCrrwcodwDF984vai62q
Kac0WNFJ6UyzVQWGgR8NTSaDN+HqPayYwK73CFS0fqqRunKV83qS13MCAwEAAaOC
AwUwggMBMB8GA1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoamMB0GA1UdDgQW
BBSZXSuPs5j1J5dC9Y1qv+zrO/1euzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/
BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0
BgsrBgEEAbIxAQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29t
L0NQUzAIBgZngQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEFBQcwAoY/aHR0
cDovL3plcm9zc2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FEb21haW5TZWN1
cmVTaXRlQ0EuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3NzbC5vY3NwLnNl
Y3RpZ28uY29tMCkGA1UdEQQiMCCCDyoubGliZXJhdGlvbi5mcoINbGliZXJhdGlv
bi5mcjCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcArfe++nz/EMiLnT2cHj4Y
arRnKV3PsQwkyoWGNOvcgooAAAF+wCMmBwAABAMASDBGAiEA0ZXm5/5OzyGWQtGH
0E1PLsiG8s1wkrgeKjaLVN/lTfQCIQCV2MBZa/fvW034lGpmeRA2VnoXBC93EIkq
sWGYVhXChQB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABfsAj
JcwAAAQDAEcwRQIgDqhg00wRGK3/k6qq0BRkFs4o5N8+n2cuUcY4rdDJQZcCIQDc
luo/CxVL+BVmDCxlY1oJjKItL5Gr//Y0AYc4N4QZswB2AOg+0No+9QY1MudXKLyJ
a8kD08vREWvs62nhd31tBr1uAAABfsAjJaYAAAQDAEcwRQIgLzNp6UDOWxraBdi3
Mfp37qPxD3/h/ayZOyqusgGt5+YCIQDGX/E87xHqkxlDmvzDITgfJWbbnh0oMGXX
hczfjzlFCTANBgkqhkiG9w0BAQwFAAOCAgEAapZfw2QFFTcQJ2BiwIYB/mRLiear
AG9yH6TaY0pYMlcgzS+efSRfN5x0AhTGGnG8uN6oBXvWQGI45aA5ezR/w/jLiBAE
FgfxCVhcRdwM+zI/4dLM4a0sIqjyLxqZELQUoI/szbUf6TH6CCWptXpVacVdWtKT
G/Nku+jA6P/2u0/OTq5kPlHG8HFQGFqsrOkqeTX5iswT478WoLaaAXGiIBB+VIey
qgX5dLk3rmFQsnYRGtJl7flWmpaDqtd3O2A4wpOXEe1p5zQbpLDow75lPq/KrQI3
nTGbSFAOo3xUkjaPxSfuuv4d65BYGfFoZZQe/W6NIX7kg5Y8MvS4cu2wBZjmDef9
ZcWChsSDgWt3fwAj7XuZhrhx+n5kuDTYm0Klagf3BK+esZxlAcHSn2wr73QE3DWR
SZLzXOI0k5o15kqt7TwmjIcNywXUF94HOiR+Dsz9SQG8z5nNO4lhNZyxVq9wC+Tm
ucsJGBTrT+W6Uu0gJO7dlKnKLohYJTLxtqv9UWTBN+9GupGZXV43Y5ic9/bjH/4k
skk3ND0dzYoG+yHTfVnmp2YeM+vGbVIUAagPbzWdEUpN56h1Y5n4FBF/NMO+VLSf
DW2ucNeDwGICxsOlddmpl5MgHvDAypQanqfISxvHEE8dlyabu/a9pTLCkU0GzxaS
dDV9tSb/nHlAhnw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx4l9n9asv0KT4kJLF52
8/DF572rfuRki3R5zoGamNi4NwtHRqCa/f2CufI13Vg1+jSTID3UsPrzrsyJze4o
pQDO3s9zuxR/mZFoJQkgPCKDqYMT/t6S/4OxUsa/HtoZ5bCgzyThSQVY6ux5lpS7
Yc7yY0bGAVDkYmDvczJ1hrQk7v+cLHEBaxWnjI9d0bU15ydEF5XKK1num5/kuMZW
sv4g3OxfbvbASDuNxv0RzDxjxgBivAPc3C4TnZ+ott5MZelytpqyaKMIKuvByh3A
MX3zi9qLraoppzRY0UnpTLNVBYaBHw1NJoM34eo9rJjArvcIVLR+qpG6cpXzepLX
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 229839949656178073885126987312118485568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.liberation.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26146195805096016741984963276898030294750586801445213799201212377887458536123941526303411162096554992619275800159006102338979793869307197088401127493287095045214400710836674987509538081755277212063466741874716015253361186728745297156681323527755040389219685595243700794757822826442757008343725056145659851827347923912336608056895880000179010952098893682330190629012571596210135319615518774521728968967602846352965483973910861516853947892710254090677000829232268728574514315328259828542153067482343951155620850983675184013262294158291577837412332375444465630910770228768135051004456579744686187022091305555808442570611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							995d2b8fb398f5279742f58d6abfeceb3bfd5ebb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liberation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberation.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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