lig-smb4-ad-rep2.liglab.fr

- Université Grenoble Alpes -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:25:b6:c1:8a:0e:3c:cc:e2:e9:77:d4:e5:5d:81:a4 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
Organization unit: LIG
Locality: Saint-Martin D'Hères
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:25:b6:c1:8a:0e:3c:cc:e2:e9:77:d4:e5:5d:81:a4
Serial Number (int): 14817329669709236519527539167318606244
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3c:d6:54:ad:a7:f8:1e:41:71:ae:0d:21:f9:0e:12:6e:fd:e7:fe:3a
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 32:af:44:af:62:ed:d1:f3:aa:55:be:c7:e1:af:19:d6:f1:66:36:84
Fingerprint (sha256): fb:0f:50:d4:64:98:46:a7:45:48:67:75:9f:22:75:43:b3:2c:14:dd:ee:87:90:ce:78:41:04:25:91:45:78:f0

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate lig-smb4-ad-rep2.liglab.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lig-smb4-ad-rep2.liglab.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lig-smb4-ad-rep2.liglab.fr
lig-ad-rep2.liglab.fr

Other certificates including the domain name liglab.fr

(limited to 100 certificates)
dynemo.liglab.fr
copen.liglab.fr
*.liglab.fr
walt-project.liglab.fr
www.liglab.fr
lig-membres.imag.fr
lig-edba.imag.fr
sakura-hubble.liglab.fr
espondb.liglab.fr
lig-membres.imag.fr
slide-apps.liglab.fr
compmep.liglab.fr
lig-edba.imag.fr
sakura-platform.liglab.fr
lig-wwwphp.imag.fr
liglab.fr
lig-membres.imag.fr
lig-edba.imag.fr
lig-edba.imag.fr
lig-edba.imag.fr
lig-edba.imag.fr
jeuxdemots.liglab.fr
jeuxdemots.liglab.fr
lig-teleos.imag.fr
sakura-platform.liglab.fr
jeuxdemots.liglab.fr
intranet.liglab.fr
pimlig.liglab.fr
sakura-hubble.liglab.fr
intranet.liglab.fr
jeuxdemots.liglab.fr
lig-edba.imag.fr
lig-intranet.imag.fr
lig-intranet.imag.fr
lig-smb4-ad.imag.fr
sakura-platform.liglab.fr
lig-pimlig.imag.fr
lig-edba.imag.fr
lig-edba.imag.fr
lig-smb4-ad.liglab.fr
walt-project.liglab.fr
lig-cartographie.imag.fr
lig-aptikal.imag.fr
lig-publig.imag.fr
lig-publig.imag.fr
lig-edba.imag.fr
jeuxdemots.liglab.fr
liglab.fr
lig-pimlig.imag.fr
lig-wwwarchives.imag.fr
sakura-hubble.liglab.fr
jeuxdemots.liglab.fr
sakura-hubble.liglab.fr
jeuxdemots.liglab.fr
lig-edba.imag.fr
formatask.liglab.fr
lig-smb4-ad-rep2.imag.fr
lig-edba.imag.fr
sakura-hubble.liglab.fr
lig-edba.imag.fr
sakura-hubble.liglab.fr
jeuxdemots.liglab.fr
teleos.liglab.fr
lig-membres.imag.fr
jeuxdemots.liglab.fr
lig-getalp.imag.fr
lig-publig.liglab.fr
wwww.liglab.fr
lig-smb4-ad-rep3.liglab.fr
pimlig.liglab.fr
lig-cartographie.imag.fr
sakura-hubble.liglab.fr
walt-project.liglab.fr
jeuxdemots.liglab.fr
lig-wwwstatic.imag.fr
lig-wwwphp.imag.fr
lig-getalp.imag.fr
lig-wwwphp.imag.fr
sakura-hubble.liglab.fr
lig-getalp.imag.fr
lig-smb4-ad-rep.liglab.fr
cartographie.liglab.fr
lig-erods.imag.fr
lig-edba.imag.fr
lig-teleos.imag.fr
lig-edba.imag.fr
jeuxdemots.liglab.fr
lig-publig.imag.fr
lig-edba.imag.fr
sakura-hubble.liglab.fr
lig-publig.imag.fr
lig-membres.imag.fr
lig-smb4-ad-rep.imag.fr
lig-edba.imag.fr
lig-smb4-ad-rep2.liglab.fr
lig-membres.imag.fr

Certificate

The complete raw certificate details for lig-smb4-ad-rep2.liglab.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGq5bvJmKPt3qkQL7OhJ
FHp0m9+x1ItQS81XQX5zVfO4xWFsgaN8v4/q7+V1N/f4bHNLvjAWySFHrlA7VmBV
d9ZBEga1oeJzHc54nyNkt1MHQ3BptaDx55c97g3S/PAij2z3cNL0ALEo2/mqleol
45BvFuiCLKYr1L3H3WEwMWcGrfUy0qzPmDp0/i/dHAls6lAmPpE6BRRDIGXKAE31
vZ82ZwNZw+x6uLB74OuiCKEezEmmEDaJ3s+XgauOv5H8PnfJWz0xRFYoo5sHdwMa
kyleeFbtGUJ3FvsHLUIvjL0wyMp0dIqITbQKABljjVTYMAFXd9wzOFL3shD0CNvW
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14817329669709236519527539167318606244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-06 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint-Martin D'Hères'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lig-smb4-ad-rep2.liglab.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23785429071654894589146144966823714345483158411182704817926404913677179255385757978387260214943617482087667888566390683934580875455490787234311125723923249853229814815696859745961250766847761341965157070845900179916665225108502630071118300064236567185123509523587678761584457715827854518946263359158572082453444540669531684792380864008415183957312008707726635438650387275250413424821016627141913657032182776447744645013431292603558819894111670562649516889548774549911759939445595493824119715449200336350573969183948914607995966273669303800793843838595712374702767906019739937070223014420171460351354610622308250539699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3cd654ada7f81e4171ae0d21f90e126efde7fe3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lig-smb4-ad-rep2.liglab.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lig-ad-rep2.liglab.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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