www.data.public.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 0d:12:a3:00:ef:0b:95:42:db:26:f3:33:32:8e:0c:ca was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Company registration number: Government Entity
Organization: Le Gouvernement du Grand-Duché de Luxembourg
Locality: Luxemburg
Country: LU

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:12:a3:00:ef:0b:95:42:db:26:f3:33:32:8e:0c:ca
Serial Number (int): 17376731395403848864542009452280024266
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9d:d6:a1:06:d1:b0:c2:94:17:02:1f:f7:1f:ec:f6:e7:77:f3:97:92
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): 9c:43:03:7b:37:06:02:65:41:b7:f5:ca:e9:9b:53:a8:97:b4:57:99
Fingerprint (sha256): 97:a1:d1:cf:58:c3:28:45:f4:3b:da:19:ad:e7:5b:56:cc:e5:de:d0:25:d4:83:1a:19:4e:42:89:85:14:a0:e8

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate www.data.public.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.data.public.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.public.lu
www.data.public.lu

Other certificates including the domain name public.lu

(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu

Certificate

The complete raw certificate details for www.data.public.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17376731395403848864542009452280024266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxemburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.data.public.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756157244033115747384342451805296200207653347060340893821640610207572886999943860595138173285632499706449601158929874230586439384983027610411086022379921231470458163764536330988236355923212079923478828442537843880030048925936500370745195973974443268904154566377613199789955544351684399048380536392863735896356514709445891529029139229268723145009302682637487839578936319876850180570145861403182440563421960924220742562701693473322056881677430354910790314412661677221933109506337722362041540029906988551515032979040681706344525811434867393733613179972130751210240807926915377022923925003157637399690617271061893720887310639218290424991246654959894994607087689826771930974824396104430716926749499425177975949596500361596482526616813603235948619805211900884654552280895467045529833788313086119227084445933708441964332833969599725885357506562440512280386955165536751870322155553449323063985225110656920184980942208204884893066432466069460258407946640892137612282844399516241169405170568186058931066113588016717740855450232125943039278064883880351243936627061222627398325180995236887985960605748925999748096421982548789811425496444931506376757465083454246486007185796868525408929290430884306526094573063589574956435232801592319248758738647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dd6a106d1b0c29417021ff71fecf6e777f39792
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.public.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.public.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ff146c052000004030047304502204722eeb03e1f3a1cffa0213ab01cae62fa1401cae46913dd8c25e993f822d3c6022100d47942b943083a77c170abde98e32c53e60771172538298d3d7a4ce167741b9a0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016ff146c0eb0000040300463044022100c3944891e5cc6f5eb8c9ae74c5848862ba7eb202a284dfede96f303bb6f091f9021f2c801f3d91330838d1e480baa58d38d951ddca9e1577d77b094c16cff610d6007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ff146c0570000040300483046022100a428bed539572ce76299c38bc4a8935a6099c2fb0f7d3244e5af15b3ca60f5ad022100f070ec1d695219d17a69f5eb78e320d446b3e4d3326dc079f06411176e81eeb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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