lmu.lge.com
Issued by R3
About this certificate
This digital certificate with serial number 03:65:e5:74:9f:b1:c3:ed:12:5e:63:28:89:be:b0:71:03:ad was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lmu.lge.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:65:e5:74:9f:b1:c3:ed:12:5e:63:28:89:be:b0:71:03:adSerial Number (int): 296010375610753008449290947076614167528365
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:77:89:00:f4:d6:ea:7f:9d:81:ea:1e:70:6b:89:d1:c7:a7:01:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d5:32:9b:f4:97:cc:7e:f5:e3:bd:b6:97:6f:f5:4d:0a:0d:1d:7e:3d
Fingerprint (sha256): 04:52:99:60:6e:11:cf:4b:ea:33:0f:49:e1:b1:10:1e:0d:3f:0d:b7:55:fb:e2:fb:87:b0:bd:1a:8a:7f:36:a0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate lmu.lge.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lmu.lge.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lmu.lge.com
Other certificates including the domain name lge.com
(limited to 100 certificates)
cams.lgpayqa.lge.com
aicsso.lge.com
epss.lge.com
gsfsplus-eu.lge.com
invoiceportal.lge.com
cicvpn.lge.com
lge.com
aicacs.lge.com
nmpis.lge.com
gcrc.lge.com
winwin.lge.com
vmi.lge.com
dm01.gdms.lge.com
nmpis.lge.com
rone-kic.lge.com
redmine.lgcom.lge.com
drmcp.lge.com
teleaic.lge.com
msis.lge.com
dm04.gdms.lge.com
pcms.lge.com
*.lge.com
liveplus.lge.com
*.lge.com
chatbotqa.lge.com
lgsync.lge.com
*.lge.com
vpc.lge.com
dm01.gdms.lge.com
ems.lge.com
*.lge.com
glopp.lge.com
lge.com
telepresence.lge.com
qhelp.lge.com
flaskdevlgetsacs.lge.com
vpn.lge.com
pcms.lge.com
etax.lge.com
learningnet.lge.com
gscs.lge.com
thinqpet.lge.com
www.lge.com
epss.lge.com
gsfs-eu.911.lge.com
www.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
*.lge.com
*.lge.com
gscs.lge.com
tms.eu.lge.com
moffice.lge.com
kmsso.lge.com
lmu.lge.com
sso.lge.com
es.lgcom.lge.com
imc.lge.com
*.lge.com
membership.lgpaytest.lge.com
caweb.lgpaytest.lge.com
gcuv2.lge.com
almmobile.lge.com
qhelp.lge.com
dm01.gdms.lge.com
g-crm.lge.com
ineo.lge.com
*.lge.com
ehealth.lge.com
*.lge.com
epss.lge.com
*.lge.com
vpn.lge.com
gsfsplus.lge.com
lgvmi.lge.com
lgpatent.lge.com
lspmv.lge.com
www.lgcomstg.lge.com
sign.lge.com
sdss.lge.com
oil.lge.com
smile.lge.com
cicvpn.lge.com
brand.lge.com
cnmas2.lge.com
gitlab.lgcom.lge.com
*.lge.com
*.lge.com
lgpatent.lge.com
fido.lgpay.lge.com
san-3-s13.tlsprovisioning.exacttarget.com
*.lge.com
smile.lge.com
glcp.lge.com
cloud.marketing.lge.com
gscs-america.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
caweb.lgpaytest.lge.com
vecs.lge.com
dm01.ksut.lge.com
newlss.lge.com
aicsso.lge.com
epss.lge.com
gsfsplus-eu.lge.com
invoiceportal.lge.com
cicvpn.lge.com
lge.com
aicacs.lge.com
nmpis.lge.com
gcrc.lge.com
winwin.lge.com
vmi.lge.com
dm01.gdms.lge.com
nmpis.lge.com
rone-kic.lge.com
redmine.lgcom.lge.com
drmcp.lge.com
teleaic.lge.com
msis.lge.com
dm04.gdms.lge.com
pcms.lge.com
*.lge.com
liveplus.lge.com
*.lge.com
chatbotqa.lge.com
lgsync.lge.com
*.lge.com
vpc.lge.com
dm01.gdms.lge.com
ems.lge.com
*.lge.com
glopp.lge.com
lge.com
telepresence.lge.com
qhelp.lge.com
flaskdevlgetsacs.lge.com
vpn.lge.com
pcms.lge.com
etax.lge.com
learningnet.lge.com
gscs.lge.com
thinqpet.lge.com
www.lge.com
epss.lge.com
gsfs-eu.911.lge.com
www.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
*.lge.com
*.lge.com
gscs.lge.com
tms.eu.lge.com
moffice.lge.com
kmsso.lge.com
lmu.lge.com
sso.lge.com
es.lgcom.lge.com
imc.lge.com
*.lge.com
membership.lgpaytest.lge.com
caweb.lgpaytest.lge.com
gcuv2.lge.com
almmobile.lge.com
qhelp.lge.com
dm01.gdms.lge.com
g-crm.lge.com
ineo.lge.com
*.lge.com
ehealth.lge.com
*.lge.com
epss.lge.com
*.lge.com
vpn.lge.com
gsfsplus.lge.com
lgvmi.lge.com
lgpatent.lge.com
lspmv.lge.com
www.lgcomstg.lge.com
sign.lge.com
sdss.lge.com
oil.lge.com
smile.lge.com
cicvpn.lge.com
brand.lge.com
cnmas2.lge.com
gitlab.lgcom.lge.com
*.lge.com
*.lge.com
lgpatent.lge.com
fido.lgpay.lge.com
san-3-s13.tlsprovisioning.exacttarget.com
*.lge.com
smile.lge.com
glcp.lge.com
cloud.marketing.lge.com
gscs-america.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
caweb.lgpaytest.lge.com
vecs.lge.com
dm01.ksut.lge.com
newlss.lge.com
Certificate
The complete raw certificate details for lmu.lge.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgISA2XldJ+xw+0SXmMoib6wcQOtMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMDExNjQ2NDlaFw0yMzEyMzAxNjQ2NDhaMBYxFDASBgNVBAMT C2xtdS5sZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6g6 V9JjgP71JxJpWJpASk9YODhHEoIex8mjKZGmddDlYWJsE8DKHCqlY5Tq4N8KEgFH SY2Mb/bYfQZvoZ9zFb+aNwhbe6nUhjU5pfMgMxDKTfMS4oZieCegaYVIdr21RN/c 4JqmdGXoemDNXfslcmp472eW/xXKnC0wyBq2wsAnUXS/qKuk8pGu7ojMg56i750i L9qcKUN6VKQpxAPv99l/Cc5T+Y30ktqqHMnfNpnV7tfz/G2qXA2G/yxbuZ6j2ocY NANK339uxPgD7zIS8JGfE61pqx2qqRFQV6UEB8jbkqzS9zI3sEiShU6VsXEM4gUu vgRTbsjsrNwMcjPnXwIDAQABo4ICDDCCAggwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRld4kA9Nbqf52B6h5wa4nRx6cB1jAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAW BgNVHREEDzANggtsbXUubGdlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG CisGAQQB1nkCBAIEgfQEgfEA7wB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4d CYEl7bSZAAABiuxZmaQAAAQDAEcwRQIhAJFRXewqSWz2C5j5fmhEHhb5iV/5M6Wz UY6ggV+CaUqJAiAUOPSKmnDdwB/VZnt/KTrSoIVXoAauHSh7Djo485wN+AB1AOg+ 0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABiuxZmZMAAAQDAEYwRAIg S8026FQVp2eUQCtkR+ClKZXhzYCS08arg91xzBp4fJ8CIDmxbezNQyoWuGws3NMb 7NCc63GQcLYi3q+S/9lp8biQMA0GCSqGSIb3DQEBCwUAA4IBAQCqv/1A/quo3Okt DAQqwF2hLvyod4heQzzjhm1zhmvjagW6gizRC5eE2BhewhH+TF2t4Uzejo2GJnf4 9fMelQ9j7aGLncQTFVw0s6vw8JV3EIDmO30IneZMkrr/ElYy2YEpEI7qsiMPPj9h gP8jcTeTKP2j0xowgEUOyzTlvpcdbAK/B5eO7Wj/rqr2U4jpm3v3vAKlhDMsvccN 4RhKyIvSbsdBH4Qugp0n36x7Z8Fhl2us3k8rVnCQ2UKki4r3vNHNwlHluOtSzQB3 3E2C9tVlSDDKTnlxjwhAB7mXxUqxyTqrpFaxTDloowjBV9pqERHlewTBA8KrDaAd lC7aiLJt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6g6V9JjgP71JxJpWJpA Sk9YODhHEoIex8mjKZGmddDlYWJsE8DKHCqlY5Tq4N8KEgFHSY2Mb/bYfQZvoZ9z Fb+aNwhbe6nUhjU5pfMgMxDKTfMS4oZieCegaYVIdr21RN/c4JqmdGXoemDNXfsl cmp472eW/xXKnC0wyBq2wsAnUXS/qKuk8pGu7ojMg56i750iL9qcKUN6VKQpxAPv 99l/Cc5T+Y30ktqqHMnfNpnV7tfz/G2qXA2G/yxbuZ6j2ocYNANK339uxPgD7zIS 8JGfE61pqx2qqRFQV6UEB8jbkqzS9zI3sEiShU6VsXEM4gUuvgRTbsjsrNwMcjPn XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296010375610753008449290947076614167528365 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 16:46:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 16:46:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lmu.lge.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22174659639632571977320202888804332279451239600884894140197640558890424352303996577248867404439851904704376686350248033913997212189793592356154672556149983449345385000087948105468457396355387190938257544926447474612667359473188605629678430800740773810445647611499275954080400024899181000943731491791370865147149339261185113891244698508396543593031447050700155447000977948890797994808619480904995655684235542456438210953932109899015036743245110249060197126165467633639715035134184363121110619794639897088406930944117243691111641113790577647117150914780959067929113610942793547689659130642399861503387166122262886868831 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65778900f4d6ea7f9d81ea1e706b89d1c7a701d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmu.lge.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aec5999a4000004030047304502210091515dec2a496cf60b98f97e68441e16f9895ff933a5b3518ea0815f82694a8902201438f48a9a70ddc01fd5667b7f293ad2a08557a006ae1d287b0e3a38f39c0df8007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aec599993000004030046304402204bcd36e85415a76794402b6447e0a52995e1cd8092d3c6ab83dd71cc1a787c9f022039b16deccd432a16b86c2cdcd31becd09ceb719070b622deaf92ffd969f1b890 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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