websso-gardian.edf.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:dd:47:dc:6a:c1:a6:b5:65:fd:1d:03:b7:a0:db:99:4a was issued on by KEYNECTIS.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:dd:47:dc:6a:c1:a6:b5:65:fd:1d:03:b7:a0:db:99:4a
Serial Number (int): 1492432311459048814842661802582886345054538
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 1a:7a:ad:7e:6b:ff:60:c4:60:e2:2e:3d:7e:e3:69:5d:de:86:5c:26
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): c5:a4:2c:f7:4d:54:6b:1f:00:d6:53:95:d2:09:51:21:48:cc:4c:ee
Fingerprint (sha256): 3c:33:e4:85:ce:1e:0e:5a:92:b5:98:dd:a4:fa:ec:06:d3:6d:21:2b:0e:e6:f7:7e:3c:0f:fb:80:e8:a5:a9:90


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate websso-gardian.edf.fr

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for websso-gardian.edf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

websso-gardian.edf.fr
proxywebsso-gardian-tdc-ext.myelectricnetwork.fr
proxywebsso-gardian.myelectricnetwork.fr
websso-gardian-tdc-ext.edf.fr
si-sesame.enedis.fr
si-sesame.erdf.fr
si-sesame.edf.fr
pcy00brp.pcy.edfgdf.fr
pcyfybrp.pcy.edfgdf.fr
noev05t3.noe.edf.fr
noefy5t3.noe.edf.fr
pki-websso-gardian.edf.fr

Other certificates including the domain name edf.fr

(limited to 100 certificates)
mypgi-recette.edf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
VDI1380023.atlas.edf.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
monagencepart.edf.fr
zep304di.distribution.edf.fr
pwa-sso-rbb.edf.fr
portail-osr-prestataires.enedis.fr
sso.edf.fr
zer331b7.distribution.edf.fr
ldap-part-interne-a-rbb.edf.fr
pblock-dev.edf.fr
ldap-part-interne-a-perf.edf.fr
publish-rcc-siterc.cie.edf.fr
commerce-ottawa-rbb.edf.fr
pcyintplypdi001.neoprod.edf.fr
emm-iq.edf.fr
test-websso-gardian.edf.fr
paas-pp.edf.fr
services-mobiles-iq.edf.fr
distri-vermeer.edf.fr
bo-preprod-travaux.cie.edf.fr
int-myaccess.edf.fr
sei-raccordement.edf.fr
one-module.edf.fr
websso-gardian.myelectricnetwork.com
odicee.edf.fr
portail-osr-prestataires.enedis.fr
preiq-websso-gardian.edf.fr
iceua.edf.fr
intranetetendu.edf.fr
acces-1.a2i.edf.fr
appli-ssa-qual-fhm.edf.fr
publish-rf2-siterc.cie.edf.fr
mypaas-r7.edf.fr
ELECTRICITE DE FRANCE
hydrovigie-int.edf.fr
*.usine-stg2.edf.fr
hydro-doctopus-rec.edf.fr
prod-sdin-passerelle-partenaire.edf.fr
paas-data-r7.edf.fr
icesb.edf.fr
mrbot-edf-entreprises-prd.edf.fr
pcydmzplywfe001.intranet.edf.com
opendata-martinique.edf.fr
noefy8jc.noe.edf.fr
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
appli-ssa-prod-web2.edf.fr
icecp.edf.fr
equilibre.corse.edf.fr
eboard-recette-r1.edf.fr
pwb-sso.edf.fr
opendata-guadeloupe.edf.fr
collab.intranet.enedis.fr
opendata-reunion.edf.fr
si-devops-repository.edf.fr
sso-perf.edf.fr
noea06te.noe.edf.fr
remit.cie.edf.fr
rh-olimp-distributeur.edf.fr
owapcy.extranet.edf.fr
iceua.edf.fr
projet-piscine.edf.fr
no2fyb45.noe.edf.fr
autoconsommation.dn.edf.fr
travaux.edf.fr
partenaires.edf.fr
eboard-recette-r2.edf.fr
commerce-smoothie.edf.fr
ldap-part-b-perf.edf.fr
vote-pulse.cie.edf.fr
portail-osr-prestataires-rec1.enedis.fr
emm-iq.edf.fr
immoconforme.edf.fr
proto-b-prod.edf.fr
rh-gama.edf.fr
itzmirecette.edf.fr
partenaires.edf.fr
pcyintpirgw001-mopieurs.edf.fr
panel-particuliers.dn.edf.fr
eboard.edf.fr
www.paiement-particulier.edf.fr
edfrecrute.edf.fr
edf.fr
iasvi-recette.edf.fr
opendata-guadeloupe.edf.fr
prod.sfdb.edf.fr
noeintplypfe002.neoprod.edf.fr
owa.extranet.ppmccu.fr
opendata-corse.edf.fr
pc2fy72t.pcy.edf.fr
zep3321n.distribution.edf.fr
api-r7.edf.fr
opendata-reunion.edf.fr
mrbot-edf-entreprises-prd.edf.fr
publish-pp2-siterc.cie.edf.fr
dbi-dev.edf.fr
noedmzplywdi001.intranet.edf.com
pilotimmo.edf.fr

Certificate

The complete raw certificate details for websso-gardian.edf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//HjviFs+dXkEOETgs9
hVVRlC/gn8Vqtk2DrQhQcbb5dc6aZLlXyrtmbLbtZE+4JTN3Y/RNytkyHeRq7nFL
nOo2w6FfGTP2Nf+lK2jUNIepVf6XhzvnJ3krg6rQDD4qMh+Xdlkb2dEQ1UQ+dilU
0BxZlM+JKVSwNluCKegIM4w/5Irw4pN4tTxp8xT4z3dDKACuxITpayQDQRiu/Y/a
ebwHGQx7GKHwrjsFUrgtKKs/ZwAR+/ZIr9ZKj2gcgNqpIP3qLTqyHgeCVzwxyyA1
3hUA5PufQzgVWWuupiGtS/+mn9MTXe5T9+BWafHZnS/EvCyzjCOQwHkznKwPNr7I
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492432311459048814842661802582886345054538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 12:21:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-31 12:21:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'websso-gardian.edf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21712879734040946273141372620655183301344328591001354104433765763867776439526758377825119704434037954476831682195650346887915711310320386044136307294977766960435770590632967528558601569424125182684252358959502002705037114402260325974520946570437052681424487636995032504055744929257525284319798974934460466571575665171299448049399570145985418433682900483419566364112714037707268194121755104384310892400723581559202682431791543491412543954780553706638397307283138073931055787370149971121219910750067417655675043283930635347835735001021138947510203838295588005283475722102000967473977693939487538064383907490390286977241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websso-gardian.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxywebsso-gardian-tdc-ext.myelectricnetwork.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxywebsso-gardian.myelectricnetwork.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websso-gardian-tdc-ext.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si-sesame.enedis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si-sesame.erdf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si-sesame.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcy00brp.pcy.edfgdf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcyfybrp.pcy.edfgdf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noev05t3.noe.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noefy5t3.noe.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pki-websso-gardian.edf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a7aad7e6bff60c460e22e3d7ee3695dde865c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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