www.diplomatie.be

- FOD Buitenlandse Zaken, Bu. Handel en Ontwikkelingssamenwerking -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b8:03:ea:d2:b2:ad:27:65:0d:4e:28:9e:9e:fd:60:81 was issued on by GEANT Vereniging.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FOD Buitenlandse Zaken, Bu. Handel en Ontwikkelingssamenwerking

Organization: FOD Buitenlandse Zaken, Bu. Handel en Ontwikkelingssamenwerking
State / Province: Brussels Hoofdstedelijk Gewest
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b8:03:ea:d2:b2:ad:27:65:0d:4e:28:9e:9e:fd:60:81
Serial Number (int): 244598290892059169534941673755078647937
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:52:d7:cf:13:a7:9f:5b:11:d2:b8:d4:52:77:78:92:c6:af:82:91
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d7:8a:0b:20:90:4d:e2:c8:a9:69:be:e9:fd:fc:70:bd:c8:5d:a9:d2
Fingerprint (sha256): 6e:31:a1:52:c2:7d:8c:3f:9e:0a:47:e9:b7:8f:5f:ba:e2:c2:85:09:ee:de:b9:61:5d:1c:88:de:03:dc:1e:57

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.diplomatie.be

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.diplomatie.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.diplomatie.be
apps.abh-ace.be
apps.diplomatie.be
apps.diplomatie.belgium.be
apps.maisonschengen.eu
apps2.diplomatie.be
apps3.abh-ace.be
apps3.diplomatie.be
apps3.diplomatie.belgium.be

Other certificates including the domain name diplomatie.be

(limited to 100 certificates)
*.diplomatie.be
consular.diplomatie.be
antispam.diplomatie.be
www.b-fast.be
*.diplomatie.be
www.diplomatie.be
consular.diplomatie.be
www.b-fast.be
consular.diplomatie.be
www.b-fast.be
www.b-fast.be
consular.diplomatie.be
consular.diplomatie.be
diplonet.diplomatie.be
5255.web01.f2w.blue4you.be
5255.web01.f2w.blue4you.be
www.biometrie.diplomatie.be
5245.web01.f2w.blue4you.be
5255.web01.f2w.blue4you.be
*.diplomatie.be
*.belpas.diplomatie.be
www.biometrie.diplomatie.be
ume.europa.diplomatie.be
www.b-fast.be
www.biometrie.diplomatie.be
5255.web01.f2w.blue4you.be
*.diplomatie.be
www.diplomatie.be
www.diplomatie.be
5245.web01.f2w.blue4you.be
consular.diplomatie.be
www.biometrie.diplomatie.be
consular.diplomatie.be
travellersonline.diplomatie.be
www.biometrie.diplomatie.be
www.biometrie.diplomatie.be
consular.diplomatie.be
www.b-fast.be
consular.diplomatie.be
5245.web01.f2w.blue4you.be
5245.web01.f2w.blue4you.be
www.diplomatie.be
consular.diplomatie.be
consular.diplomatie.be
www.biometrie.diplomatie.be
guest.diplomatie.be
guest.diplomatie.be
www.b-fast.be
5245.web01.f2w.blue4you.be
*.Diplomatie.be
www.biometrie.diplomatie.be
www.biometrie.diplomatie.be
www.biometrie.diplomatie.be
5255.web01.f2w.blue4you.be
www.biometrie.diplomatie.be
portail.diplomatie.be
www.biometrie.diplomatie.be
*.diplomatie.be
*.diplomatie.be
www.biometrie.diplomatie.be
www.b-fast.be
consular.diplomatie.be
www.b-fast.be
*.diplomatie.be
consular.diplomatie.be
www.b-fast.be
www.biometrie.diplomatie.be
www.biometrie.diplomatie.be
www.belgianstobrazil.diplomatie.be
*.diplomatie.be
www.b-fast.be
consular.diplomatie.be
*.diplomatie.be
antispam.diplomatie.be
www.b-fast.be
www.biometrie.diplomatie.be
www.b-fast.be
*.diplomatie.be
www.b-fast.be

Certificate

The complete raw certificate details for www.diplomatie.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxgUrjKP7b0yj7DEgB8Fs
Y5m5LZUulMnk8pAdOFOBg88gjtir15O/PrCjiAtbAS7HoYteK7f+UMdEzd4B6995
x8vFS1zXBopz3aZi0wFp1sN/i8s0VkCWyJT3BIKSMGV9rmTpXR3OpqsX3PVaLtQN
LMW3nTnDSIxrvfHi8P91ehDc+8j+4imUfX5/CMlcUML/MUDlVYll6kRatPzDRl/t
mdl4QRX7ldLev04FQVtlBN/TAxA25z9LzpUSDZeGwgdHUN/bku0AkfNYFPj6SMpW
8wFDp6Eip8+qu/zam1Rfaduua9kN8SAXEjB394mz0r3bQHmuhJhZ7atMZEulhUL+
SN7mtj7REo5NMSVDq/JZllk+Qi3xnHWVS1AlTYu+GjaK0skxpwvKN+OBhSI0aEuO
lM5kd8H3ixQoWSaldCvRVYdTSa8eKnL48ua/JahaidlK94CKD2PY6Kuc4HP2YZuD
WOtQJd124YCxhBuFuz/YtHPmSxkqf3lefHu/2YQZOTgMCLA0x7sQdQ/k5dWyx+ox
LqzDVqNs5BkNuuJrkXde5R6KNg1DwFjzakQkP4sM9EOJsaj/KzWNayP+rmA9gS8W
CB+ErRQMFI+K0oBvMLpY41yDYcw0xiLQrwjdF20dLqw7z43WNiP+99c0MbrC2CUY
w4oWpy1jbdli09NPS6TdsrkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244598290892059169534941673755078647937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FOD Buitenlandse Zaken, Bu. Handel en Ontwikkelingssamenwerking'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diplomatie.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807851916983568950120558217471470408244431516541995277964592349269844359148427516200073197521534098364315999372469170836608246635963366068099599763352745627892633014022540926473941926101888832537683702588820963923578628501311839172013654226738276274956157148288316767468946334784821447924278224498576137610153858139738557984886534527594414458420677044707921220089796313611482279547484661299215430014496290982897073515681113393152439220255052550379150054856860534367660079495151115392157981615986100748188789026130075649888142767650683108191764011511987740983546208522352866157917694437783888863260857220251101197681728243474059363872208230465598569248215892533190819313866442455474298889036116057521072786597674915884820264085906515177360313292217963018574136966725253956429464963843874120359362425317385333206914221383937650111989083402631793614600824375442825275358737773548922245859892177496014219306208796432856559345023321431701194518259100129481192814024960829603907540118803447714316441011282287757187523696829556195594461012882388843706068217923670479581431387804154775353044724549816393134906849416678376409753105824094376669494223759122456401525090960542336653042761239847832075727884955733658273475120524831836110508110521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c752d7cf13a79f5b11d2b8d452777892c6af8291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomatie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.abh-ace.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.diplomatie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.diplomatie.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.maisonschengen.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.diplomatie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps3.abh-ace.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps3.diplomatie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps3.diplomatie.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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