be.airliquide.com

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:7a:8d:4b:9e:d8:d0:da:36:d6:4e:e5:3f:ba:4f:2b was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
State / Province: Île-de-France
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:7a:8d:4b:9e:d8:d0:da:36:d6:4e:e5:3f:ba:4f:2b
Serial Number (int): 11270149994047625215645631297361694507
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d6:3c:0b:39:0f:54:93:0b:25:4b:91:34:9d:28:bf:6d:6b:4e:93:39
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 2b:b4:1e:37:42:05:c3:b9:62:a4:1b:d7:f0:26:0b:77:db:19:f3:57
Fingerprint (sha256): 9f:ac:1f:3b:86:81:e8:7c:5f:35:b6:82:e6:f5:d7:f3:bf:aa:d5:c5:33:eb:a4:c3:0c:c6:fa:cd:43:c2:92:41

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate be.airliquide.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for be.airliquide.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

be.airliquide.com
fi.airliquide.com
1-website.airliquide.ch
1-website.airliquide.be
1-website.airliquide.lu
1-website.airliquide.nl
www.carbagas.ch
carbagas.ch

Other certificates including the domain name airliquide.com

(limited to 100 certificates)
industria.airliquide.it
apacmi.airliquide.com
www.airliquide.com
caps-pprd.airliquide.com
am-api-proxy.apps.airliquide.com
www.airliquide.com
AirLiquide-TokenSigning.apps.airliquide.com
myetelemetry.airliquide.com
www.cryopal.com
new.airliquide.com
connect-as.airliquide.com
datachallenges.airliquide.com
awarenet-AM01-pprd.airliquide.com
ext-procurement.airliquide.com
myinstallations.airliquide.fr
crm-ee.airliquide.com
elogbook.airliquide.com
ext-procurement.airliquide.com
webmail-na.airliquide.com
industrial.airliquide.es
be.airliquide.com
www.cryopal.com
www.airliquide.com
myairliquide.com
deveniractionnaire.airliquide.com
yorc.airliquide.com
hrmds.corp.airliquide.com
mygas-pprd.airliquide.com
www.airliquide.com
ascpprod.am.corp.airliquide.com
www.cryolor.com
fsdev.apps.airliquide.com
bos.iot.airliquide.com
myairliquide.com
www.offral.airliquide.com
cn.vpn.airliquide.com
mygas.airliquide.com
api-ww-dl-dev.apps.airliquide.com
myinstallations.airliquide.fr
adc-al-xendc2.am.corp.airliquide.com
myalt-distributors.airliquide.com
www.airliquide.com
auth.apps.airliquide.com
gideonsuat.airliquide.com
www.airliquide.com
bam.apps.airliquide.com
www.cryopal.com
e-data.airliquide.com
www.airliquide.com
futurereadydatachallenge.airliquide.com
mailhhc-pp.airliquide.com
Fabnet.Airliquide.com
myportal.airliquide.com
di-api-prod.airliquide.com
altacsweb.us.airliquide.com
e-data.airliquide.com
co-lftext-prod.apps.airliquide.com
www.cryopal.com
new.airliquide.com
connect-jp.airliquide.com
1timepass.apps.airliquide.com
gazyspozywcze.airliquide.com
ext-auth-prod.airliquide.com
kite.airliquide.com
www.cryopal.com
yorc.airliquide.com
pdt-prd.apps.airliquide.com
bomgar.apps.airliquide.com
go.airliquide.com
alair.apps.airliquide.com
distributor.airliquide.com
eworkpermit-test.airliquide.com
console-workspace.apps.airliquide.com
mygas.airliquide.com
esafety-test.airliquide.com
pprd-barpluseeuat.airliquide.com
www.airliquide.com
bomgar.apps.airliquide.com
homes-prd.apps.airliquide.com
myinstallations-dev.airliquide.com
mygas.airliquide.com
servitraxca.apps.airliquide.com
svxwebint.apps.airliquide.com
dev.bos.iot.airliquide.com
www.cryopal.com
auth-pprd.apps.airliquide.com
www.airliquide.com
kiosk.airliquide.com
cube-apac.big.airliquide.com
fleet.altomobile-pprd.airliquide.com
www.cryolor.com
sio-optim-bigateway.apps.airliquide.com
1timepass-pprd.apps.airliquide.com
oracleprod.am.corp.airliquide.com
altecstore.airliquide.com
kercomconfig-apac.preprod.bos.iot.airliquide.com
svxweb.apps.airliquide.com
air-liquide-livret2014.com
*.cms-eu-pprd.airliquide.com
de.hseonair-pprd.airliquide.com

Certificate

The complete raw certificate details for be.airliquide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVatDCGTKFtl8Egh0LvK
Rd+WtqHe6P4Zs1dHQQki+n5J2fXjssiaWtwZSULfpwe5dinra1P5XneGUnOLLVvm
983XYYwhJsrdaOldNwl6gqC5gK9MWAru81XXpH6vOL88RZ41m1x/iDvrDlj12DCl
650JrChAMnERMysyjqUA4UmKv2Yq2ERcEtEVRh6xRSwO/mS+1X4xOWbLCgfng0Vz
pysXkELDfrLE7Tzx6OSHNQW7BgriuWJVbQ3tCOB9XZ5DmCzZ1/B/HwpQxv4JlNKQ
NKJ6/3EkCfiYZTjS48AVa1BiZrcT2hMfSX00af9nL/mba8//Hm+t6l1jSkzLZl/X
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11270149994047625215645631297361694507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'be.airliquide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20872061831408121961360923928766701814361614529023801547001136197998331354653195081435615519661362743780517180607631559592280127424760977790410089940829396726211532994588031438336735897026280112916567682670981627121522421553526495215206272615750608683953231684532834799323057251929118623207979297350849634334724059611401289758021530174966208656872979303270627832180535181283680329826125408972548690952558690746538896302101588086881509244447678279714543901979772877935296706653103215684685241441473628247123012011124338205424683129883631356459172558681702808052197110309462870175333880730168874342650240508696272557991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d63c0b390f54930b254b91349d28bf6d6b4e9339
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-website.airliquide.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-website.airliquide.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-website.airliquide.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-website.airliquide.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carbagas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbagas.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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