OV SSL/TLS Certificate for *.ikdoeict.be Issued to ODISEE vzw

Certificate is witin its validity period

Issued by GEANT Vereniging (GEANT OV RSA CA 4)

About the *.ikdoeict.be OV SSL/TLS Certificate

This certificate with serial number f4:1a:38:30:ca:36:22:89:38:0f:d3:2c:d0:1e:c0:99 for *.ikdoeict.be was issued on by GEANT Vereniging.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for *.ikdoeict.be provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): f4:1a:38:30:ca:36:22:89:38:0f:d3:2c:d0:1e:c0:99
Serial Number (int): 324467770370312400754977590253329498265
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 2e:b8:a8:1e:5f:53:5a:b0:65:37:af:f6:da:e0:c0:a4:44:0f:44:b1
Authority Key Identifier: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (SHA-1): ec:1f:e4:21:94:b3:35:ec:96:bf:ea:70:1f:ef:4b:1e:13:6b:78:74
Fingerprint (SHA-256): 78:f0:72:5c:71:ee:e3:d3:ff:30:2d:2e:3f:71:b2:b6:ee:25:ff:fb:7d:47:2c:b6:2f:30:6b:5a:5e:af:4a:2e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.ikdoeict.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.ikdoeict.be

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.ikdoeict.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHYDCCBUigAwIBAgIRAPQaODDKNiKJOA/TLNAewJkwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTI0MTExOTAwMDAwMFoXDTI1MTExOTIz
NTk1OVowYzELMAkGA1UEBhMCQkUxJzAlBgNVBAgTHkJydXNzZWxzIEhvb2Zkc3Rl
ZGVsaWprIEdld2VzdDETMBEGA1UEChMKT0RJU0VFIHZ6dzEWMBQGA1UEAwwNKi5p
a2RvZWljdC5iZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfaJOmo
DWLoyMPRe2LwLGW8bI72/RYpA8K0Ae+apXvUpNJB09gzGC8wTtMEM+M2WqLtH6Jk
96/hAlmZHmzsKRrvsioL1vcurPKmi615cy17W4IPAqCUOrvucQn2IMLhSkaJt3lQ
RRyl09eCRtvTc5vqSYG4B9Orl7wxCwa2XYntYCXucR1byVfdEfwjtwkf4ekqbvaF
DirjTCvECXdVg9tISTkE3ykP+si2f4E2r5z9TmTYmhyPdOF029HS0SGF/gby5+og
u/rhzEJWvU8cZHYvG8tDDLu51En1sisAHKrUNgKjcvQaAparCfpfllVwxZhh8bLt
tizcLwDOJtIq750CAwEAAaOCAywwggMoMB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCe
vIroH5W+cXoMMB0GA1UdDgQWBBQuuKgeX1NasGU3r/ba4MCkRA9EsTAOBgNVHQ8B
Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdo
dHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKg
MIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNy
bDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQu
c2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6
Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMCUGA1UdEQQeMByCDSouaWtkb2VpY3Qu
YmWCC2lrZG9laWN0LmJlMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDd3Mo0
ldfhFgXnlTL6x5/4PRxQ39sAOhQSdgosrLvIKgAAAZNE+AQnAAAEAwBHMEUCIEaY
ate2GvaARBTSJsXKkHZzseNwAuZkQNpQhnY0dxa+AiEA3GACuhpqBSsw/9CZaqXt
EAwSx6hOFOunSXAJi4An/zsAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA
/kwNsAAAAZNE+APhAAAEAwBHMEUCIGRDK19IWblIg6Iz0FesRefHGMg2WbezBin/
tgMQBHcbAiEA4ptUZN0RHuZpKci/6PNtEHugMuPDEcxcpdk0zNo6DAIAdQAS8U40
vVNyTIQGGcOPP3oT+Oe1YoeInG0wBYTr5YYmOgAAAZNE+APNAAAEAwBGMEQCIA3b
LH97rzOPh4ZY+2NjRsL2XusExJMp9BO6NtJq4u15AiATFGSREjjFqDSIkJQV5ahU
Xpju8/3AghXNFWmQEAbikzANBgkqhkiG9w0BAQwFAAOCAgEACrmLC8NO1gSrg8JI
XYq29bgaMXYLTxlcuZLr4OfZe4KsElCm1MgVlUyO/G8JKbu1LUcKiVCusnCcNMq+
TnNsJqsRIZD1WhXf9Q8RuOb1PFwgB4uzIQKwXrnCoXXkpjZPAuN8UORIb/e8AJjT
dlE0aHctmri57uq7WoarPWVd3Pq9oFsfRb5YYeyoMoXlw0BFQrXUojUhguiD/WZr
YCrt4w3kiHMDLe7Eipbj9yd9PBsEQIs3GD0xXGeKZ7wEsSDzb6+30Her/T00ufO3
TH2rK6EnLGfRsOKGhNBBnd0aQVDI3wJCtFu8YtwZpGy2rNjBGWUyw88Tg/B7zMWa
eMuyIOlsxaj+/YZpfkccLhcu+dHUlgLjlF9rVodvF3eiMWhHyC5qVHK6mH/Erqg5
aE4Hfb97OrEUD/KiYy5SYe/vpdTvFVgi6OBCPrQ5M0IJN9gTvB3p3DAc52UDw9sZ
vgOJ2dZMR8pchZvcU8XSiilHYREC0pwj2wPQ4TmeXmUg2UnkEswX7GUTkLBJEF11
jTKSNu53b7Fym0xYM/jP9Fbrmxu1APgLW+C/0cd2UCzf+3T9fJNq8FAIOiykyTDJ
jjPfJLteC2g7ZbtnBlzNLf4HiCApIZPmvq/AKneDbsZCYGOgZX3qVZs55KQTcLh4
l6DktpfLcgqrvSR4z0OTfahYeI4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ok6agNYujIw9F7YvAs
Zbxsjvb9FikDwrQB75qle9Sk0kHT2DMYLzBO0wQz4zZaou0fomT3r+ECWZkebOwp
Gu+yKgvW9y6s8qaLrXlzLXtbgg8CoJQ6u+5xCfYgwuFKRom3eVBFHKXT14JG29Nz
m+pJgbgH06uXvDELBrZdie1gJe5xHVvJV90R/CO3CR/h6Spu9oUOKuNMK8QJd1WD
20hJOQTfKQ/6yLZ/gTavnP1OZNiaHI904XTb0dLRIYX+BvLn6iC7+uHMQla9Txxk
di8by0MMu7nUSfWyKwAcqtQ2AqNy9BoClqsJ+l+WVXDFmGHxsu22LNwvAM4m0irv
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324467770370312400754977590253329498265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ODISEE vzw'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ikdoeict.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21189367838798594305035580700881549657456820575772855241269160915263851334113965564701355620457805563227319065008336119243396551380739203802040166147868944500253871304840599108902292044656213836565943301656720639559082972584831800235489776630404407393639211686547206939413078089758497198642670834560602620953447627840141597629956749056267631125669206965713418002673968155360632365936878050861011125641271364172707062403403763086581981227222399219780631249664268816310766660867360780277244257502905546303363503087750905447342159635124792103750538609472653535302154494728380073387315477682742405067977759621123341479837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2eb8a81e5f535ab06537aff6dae0c0a4440f44b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikdoeict.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikdoeict.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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