www.pointdecontactfraudesociale.belgium.be

- Federale Overheidsdienst Werkgelegenheid, Arbeid Sociaal Overleg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number db:6d:5d:d1:85:ec:aa:41:67:aa:ad:f8:25:c1:d0:93 was issued on by GEANT Vereniging.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Werkgelegenheid, Arbeid Sociaal Overleg

Organization: Federale Overheidsdienst Werkgelegenheid, Arbeid Sociaal Overleg
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): db:6d:5d:d1:85:ec:aa:41:67:aa:ad:f8:25:c1:d0:93
Serial Number (int): 291668794298703594272517927916013736083
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3c:7b:73:70:98:0f:32:20:53:30:77:37:89:79:ad:75:99:71:e4:8d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b6:e6:85:0a:3d:cf:50:05:ca:76:e9:12:b4:17:91:db:2e:e4:23:8f
Fingerprint (sha256): 45:35:7a:66:90:8b:5f:1a:0e:53:1a:8b:e9:25:ea:78:7f:ab:ba:c7:d3:cf:38:f3:28:4c:c2:35:51:c9:24:4c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.pointdecontactfraudesociale.belgium.be

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pointdecontactfraudesociale.belgium.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pointdecontactfraudesociale.belgium.be
www.kontaktstellesozialbetrug.belgien.be
www.kontaktstellesozialbetrug.belgium.be
www.meldpuntsocialefraude.belgie.be
www.meldpuntsocialefraude.belgium.be
www.pointdecontactfraudesociale.belgique.be
www.pointofcontactsocialfraud.belgium.be

Other certificates including the domain name belgium.be

(limited to 100 certificates)
www.venezuela.diplomatie.belgium.be
16-loi.be
www.australie.diplomatie.belgium.be
www.business.belgium.be
5226.web01.f2w.blue4you.be
www.koeweit.diplomatie.belgium.be
wtsvcvic099a.services.gcloud.belgium.be
rma-help.fedict.belgium.be
*.spaas.gcloud.belgium.be
www.japon.diplomatie.belgium.be
2014.jaarverslag.financien.belgium.be
fedict.be
digiflow-mm.ta.belgium.be
support.eloket.belgium.be
www.bulgarije.diplomatie.belgium.be
www.griekenland.diplomatie.belgium.be
*.ta.belgium.be
finances.belgium.be
consular.diplomatie.be
www.jordanie.diplomatie.belgium.be
www.ierland.diplomatie.belgium.be
www.panama.diplomatie.belgium.be
*.adriatic.belgium.be
www.zweden.diplomatie.belgium.be
www.portugal.diplomatie.belgium.be
2013.jaarverslag.financien.belgium.be
bienarrondir.belgium.be
www.verenigdestaten.diplomatie.belgium.be
*.belgium.be
organesdeconcertation.sante.belgique.be
www.evenements.emploi.belgique.be
*.infocenter.belgium.be
www.chili.diplomatie.belgium.be
www.mozambique.diplomatie.belgium.be
finshop.belgium.be
www.ofoifa.belgium.be
bibforum.fgov.be
www.ofoifa.belgium.be
www.oeganda.diplomatie.belgium.be
*.services.belgium.be
www.maleisie.diplomatie.belgium.be
myhandicap.belgium.be
www.mozambique.diplomatie.belgium.be
*.decroo-i.archive.belgium.be
handicap.belgium.be
www.inde.diplomatie.belgium.be
www.duurzaamevenement.belgium.be
premier.michel.archive.belgium.be
www.zuid-afrika.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.saoedi-arabie.diplomatie.belgium.be
www.kosovo.diplomatie.belgium.be
panorama.belgium.be
complaints.p-o.belgium.be
handicap.belgium.be
residencepalace.be
smp.belgium.be
wahl2003.belgium.be
eIDAS-M.iamfas.belgium.be
premier.be
www.koeweit.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
rapport.mobilit.belgium.be
www.qatar.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.spfeconomie2018.belgium.be
www.diplomatie.be
www.vaticaanstad.diplomatie.belgium.be
meldpunt.belgie.be
www.ivoorkust.diplomatie.belgium.be
bienarrondir.belgium.be
cass.justice.belgium.be
www.jamaique.diplomatie.belgium.be
www.evenements.emploi.belgique.be
e.koba.be
belrai.org
cgra.belgium.be
accreditation-new.belgium.be
consular.diplomatie.be
www.turkije.diplomatie.belgium.be
www.venezuela.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
mailings.social.belgium.be
idp.iamfas.belgium.be
2014.jaarverslag.financien.belgium.be
www.kmteams.belgium.be
*.news.belgium.be
scope.belgium.be
*.spaas.gcloud.belgium.be
www.wellrounded.belgium.be
2018.jaarverslag.financien.belgium.be
certif.iamfas.qa.belgium.be
ibfp.be
www.italie.diplomatie.belgium.be
gutgerundet.belgium.be
webdiv.mobilit.belgium.be
www.ofoifa.belgium.be

Certificate

The complete raw certificate details for www.pointdecontactfraudesociale.belgium.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhnIipRcDPg4PdLRhGCM
BagzgMWDqb8Nw0FJxNlXMMu/Leoi+ouWhPCjJrCY/SiIwCnw1WUOLtmdgSpMgm9o
PJ7WWKZZO98nASlB0mHl4QX7hY8HSprGA7Tfd836TcuwyHy2zz+pMydFajMYr9hL
7xJzmmPOWy5ZMr/tCpH4PyK5l2KLKnpDyIeoiq6SnazXJmwNV2O3C2zLtAOG7oLQ
yUwwFl+RbaIpMZEqGNYl91a7h++XR4kzltjol4habsm/1rU608EWp8OTRZH7WEir
MceiiXqiHc53UR37qpGZI+8WufDuuYelodkPG46aUHNM8XN8qOZ1BcATkYy/UmiQ
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291668794298703594272517927916013736083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federale Overheidsdienst Werkgelegenheid, Arbeid Sociaal Overleg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pointdecontactfraudesociale.belgium.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25512851854072933272682408240618675501730711722477395628159585663252467133436972994936805275452373560726443255232138270954248561133727991898077975856057861549767868025056571096579138888061439283085862740250480618664455639574003265871134398711447898027802097455896496981468683791205385103707759922504603237355435238616625601234479359391050004245021960914163175619379517012077268049286658848232251021019110197791730376294121616188555532222143346060553657042154247922815063551510501259752012248293171470371174350622025865810376396842740118273358001245846564548713372118116493352646455924051384646944888923781884365279447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c7b7370980f3220533077378979ad759971e48d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointdecontactfraudesociale.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kontaktstellesozialbetrug.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kontaktstellesozialbetrug.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meldpuntsocialefraude.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meldpuntsocialefraude.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointdecontactfraudesociale.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointofcontactsocialfraud.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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