infact.factoring.societegenerale.fr

- Societe Generale SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:c1:e3:97:f3:9d:a7:0d:7c:9f:2e:95:47:51:b9:59 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c1:e3:97:f3:9d:a7:0d:7c:9f:2e:95:47:51:b9:59
Serial Number (int): 12969781401589480795798470055448131929
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 67:2b:f2:dd:da:a4:d4:3c:13:cb:28:77:41:6a:7a:75:b1:d8:8b:71
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 85:0c:f2:3c:9f:2f:63:ba:67:06:a6:aa:ea:4b:d6:05:c6:d7:9b:d9
Fingerprint (sha256): a1:db:9b:a3:08:12:38:b7:7a:19:6a:16:8f:46:b7:68:e2:dc:31:9d:c5:63:75:9f:da:59:bd:df:e7:fa:1f:d3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate infact.factoring.societegenerale.fr

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infact.factoring.societegenerale.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infact.factoring.societegenerale.fr
infact.etoile.cga.fr
infact.societegenerale.cga.fr
infact.afactorcontact.com
infact.bfcoi.cga.fr
infact-oi-factoring.societegenerale.com
infact-factoring.societegenerale.com
client.factoring.societegenerale.cm
mesremisesdailly.groupecdn.fr
infact.cgaoi.cga.fr

Other certificates including the domain name societegenerale.fr

(limited to 100 certificates)
dca.homologation.societegenerale.fr
dca.societegenerale.fr
entreprises.societegenerale.fr
particuliers.secure.societegenerale.fr
infact.factoring.societegenerale.fr
developer.retail.homologation.societegenerale.fr
statse.par.societegenerale.fr
replay.societegenerale.fr
transferts.homologation.societegenerale.fr
privatebanking.societegenerale.com
dca.societegenerale.fr
entreprises.societegenerale.fr
professionnels.homologation.societegenerale.fr
transferts.homologation.societegenerale.fr
bo-tablette-clicom.societegenerale.fr
particuliers.secure.societegenerale.fr
associations.societegenerale.fr
hscriptso.par.societegenerale.fr
hstatso.par.societegenerale.fr
www.panelclients.societegenerale.fr
www.equipmentfinance.societegenerale.com
solutionsgestionprivee.portail.homologation.societegenerale.fr
scriptso.par.societegenerale.fr
hscriptso.par.societegenerale.fr
professionnels.homologation.societegenerale.fr
hscriptsp.par.societegenerale.fr
m.societegenerale.fr
entreprises.societegenerale.fr
devenirclient.particuliers.homologation.societegenerale.fr
statso.par.societegenerale.fr
hietemi.socgen.com
lecashback.societegenerale.fr
docsp.par.societegenerale.fr
entreprises.societegenerale.fr
m.entreprises.societegenerale.fr
entreprises.certif.homologation.societegenerale.fr
s.actualite.privatebanking.societegenerale.fr
infact.factoring.societegenerale.fr
eip-voteag.societegenerale.fr
particuliers.hml.societegenerale.fr
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
bo-tablette-clicom.societegenerale.fr
pch.societegenerale.fr
entreprises.secure.homologation.societegenerale.fr
particuliers.secure.homologation.societegenerale.fr
scriptsp.par.societegenerale.fr
afrique.societegenerale.com
static.homologation.societegenerale.fr
idees.societegenerale.fr
entreprises.homologation.societegenerale.fr
hscriptse.par.societegenerale.fr
entreprises.societegenerale.fr
mobile.societegenerale.fr
static.homologation.societegenerale.fr
filetransfer.prd.tomg.societegenerale.com
sgetvous.societegenerale.fr
particuliers.secure.societegenerale.fr
www.jeuhautefidelite.societegenerale.fr
particuliers.hml.societegenerale.fr
www.equipmentfinance.societegenerale.com
entreprises.certif.homologation.societegenerale.fr
m.homologation.societegenerale.fr
www.carteespeces.societegenerale.fr
transferts.societegenerale.fr
global.societegenerale.com
afrique.societegenerale.com
infact-hom.societegenerale.cga.fr
orl105.societegenerale.fr
solutionsgestionprivee.portail.homologation.societegenerale.fr
coupdenvoi.societegenerale.fr
equipmentfinance.societegenerale.com
particuliers.sandbox.societegenerale.fr
particuliers.homologation.societegenerale.fr
hscriptse.par.societegenerale.fr
professionnels.secure.societegenerale.fr
transferts.homologation.societegenerale.fr
*.exp.gumgum.com
infact.factoring.societegenerale.fr
pch.homologation.societegenerale.fr
www.warrants.com
lecashback.societegenerale.fr
static.homologation.societegenerale.fr
entreprises.societegenerale.fr
reglement.societegenerale.com
entreprises.homologation.societegenerale.fr
votations.24heures.ch
m.particuliers.societegenerale.fr
admin-bo-tablette-clicom-dev.societegenerale.fr
www.solutions.sgcib.com
associations.hml.societegenerale.fr
www.homopar1.societegenerale.fr
m.entreprises.homologation.societegenerale.fr
infact.factoring.societegenerale.fr
mediateur.societegenerale.fr
www.equipmentfinance.societegenerale.com
www.societegenerale.fr
scriptse.par.societegenerale.fr
logitelnet.socgen.com
docsp.par.societegenerale.fr

Certificate

The complete raw certificate details for infact.factoring.societegenerale.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfbH2I4GjI4ceqiACqOM
ZebwoUdaHjHhT16mGL+Tznt36TXmJH7uQHweDX5e1y5WPZ78CsiYJDW/VupTtyrf
FHB3OIA9BYrEeB7KpzH2WBWhZpJ+5Botcw6xuZT2MdDEHXoUZNIddzppncgYOloJ
5letEv6X2ajiZiso4fKyS1JgzbB4veLxEylfWH8KlfDZBeQF0wbIXP/JD0sHARwO
Y5PGh3jm+5Lj4wZAjwdZ2RR/8cfYFu1CuXElKaeqWKNgS8euQBAOpzcuRKGypZJL
aKNAUvdxESlWlfkD4CUYOmrnaJcQ1S77P6z8CR99pMlJs13GqafL7adMYARypNQX
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12969781401589480795798470055448131929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'infact.factoring.societegenerale.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22465872052102978663061035714325088061843505101177488223809995667554833165927254854008790227190828665945259066230884083081181722446311139168514675525925025213217582507409810923451496331915455108506520650101276091518956393341533090770251932009517462944402531136769637630010512871385913743301663807228079250766867816072905444132585649639024339710619608191960337730297665040904861125243008197714732640063353650325358821709824086887498505842040445148402487517201017780683900793365654889792272147485069016064105607786304660568074627814707207845238738527164464135703789137795240745565261054504204465953859737029865159006131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							672bf2dddaa4d43c13cb2877416a7a75b1d88b71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact.factoring.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact.etoile.cga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact.societegenerale.cga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact.afactorcontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact.bfcoi.cga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-oi-factoring.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-factoring.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.factoring.societegenerale.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesremisesdailly.groupecdn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact.cgaoi.cga.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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