layer.dns-stuff.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:01:8a:8a:98:81:cb:57:11:5d:ce:e9:43:b6:8c:76:6a:50 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=layer.dns-stuff.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:01:8a:8a:98:81:cb:57:11:5d:ce:e9:43:b6:8c:76:6a:50Serial Number (int): 261861293255796098034953266139212232944208
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:e9:33:1a:ad:b3:b0:32:64:a0:a3:c0:7a:d2:a2:a2:3b:4c:13:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 64:39:45:2d:d1:37:76:38:f1:0d:ec:7b:08:4b:9a:9d:04:19:20:68
Fingerprint (sha256): 06:73:a7:59:d9:68:ec:4b:3a:82:36:44:70:18:b8:f4:0e:dc:99:4c:b9:6d:e0:e3:9a:dd:f2:d6:40:e3:0f:08
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate layer.dns-stuff.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for layer.dns-stuff.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
layer.dns-stuff.com
Other certificates including the domain name dns-stuff.com
(limited to 100 certificates)
layer.dns-stuff.com
aloe.dns-stuff.com
awaits.dns-stuff.com
deittiseuraa.ga
neutri.dns-stuff.com
fiddle.dns-stuff.com
citasamistad.gq
pet.dns-stuff.com
patisserie.dns-stuff.com
poids.dns-stuff.com
violin.dns-stuff.com
sense.dns-stuff.com
uncle.dns-stuff.com
teelichter.dns-stuff.com
wen.dns-stuff.com
killjoys.dns-stuff.com
winery.dns-stuff.com
oaspagina.dns-stuff.com
pigeon.dns-stuff.com
shots.dns-stuff.com
dwqghtrhfd.dns-stuff.com
pparo.dns-stuff.com
beaded.dns-stuff.com
bears.dns-stuff.com
halo.dns-stuff.com
alcohol.dns-stuff.com
class-money.dns-stuff.com
pparo.dns-stuff.com
aloe.dns-stuff.com
awaits.dns-stuff.com
deittiseuraa.ga
neutri.dns-stuff.com
fiddle.dns-stuff.com
citasamistad.gq
pet.dns-stuff.com
patisserie.dns-stuff.com
poids.dns-stuff.com
violin.dns-stuff.com
sense.dns-stuff.com
uncle.dns-stuff.com
teelichter.dns-stuff.com
wen.dns-stuff.com
killjoys.dns-stuff.com
winery.dns-stuff.com
oaspagina.dns-stuff.com
pigeon.dns-stuff.com
shots.dns-stuff.com
dwqghtrhfd.dns-stuff.com
pparo.dns-stuff.com
beaded.dns-stuff.com
bears.dns-stuff.com
halo.dns-stuff.com
alcohol.dns-stuff.com
class-money.dns-stuff.com
pparo.dns-stuff.com
Certificate
The complete raw certificate details for layer.dns-stuff.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISAwGKipiBy1cRXc7pQ7aMdmpQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjMwMzU1NThaFw0x OTExMjEwMzU1NThaMB4xHDAaBgNVBAMTE2xheWVyLmRucy1zdHVmZi5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDYfJ3+ZC84OePC6m57xKOKDuTV 9nX4s8eGmlpHBVfC21gCxE75lvJo2jZuhM8iBmhutr92DPg1QJTGafE8aw4oDjS0 uxXFP1IPURS1p2HqaRX9z3WBXmytYUudR4KnwSjVks8PrM3q3GKVrYPCs5wsQbu7 ruLUVUwwduzJ0HwMZk+xFbYOLLuASZjYDMKyEToPsvrlw92fn3rNC5VufSgdNX6K 3tdDveLOJCDmZk8Rd4iwkR6/CalinuDV+OMqafEDeRqxEHYMn1mxAuMXVk/KAgVa F3nw3QZk8UYpxc9ScWmDuIx93AqPXWQlvHA5f5Gs594qeC9K/jhYvmg+rF1IFxec zhoO9JJ+xUiF3t9C6bDd7cxApEHv7hXfIa436+MGrRU3QV2KZ0e5q8hldx66PkfR E43wDSbygAuAFoS6He4dUQ4+lNVIdnGQY7NqRljj4HawWskFdOo7edlSSYnsCxFk coluPwtO7XKzMYvrtNdYOrxhYmpSJLctAW83MGJx+R1JI+s/uVmFzyiAbLNENeQv il1HwiekB8tkm81uCkFtDzwZrjIrNbZwu0DwpGBiSZ0S+1mIy559l1NCa/BV5R8f Ik6T2SSrkeqrwDFhbg0FOb28bsD3Tfvs7YNJuoRl8f4a2VrUlHcRNWtRCxoeEYqu tbx+TN/cELcr2u6DEwIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBSs6TMarbOwMmSgo8B60qKiO0wTVjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2xheWVyLmRucy1z dHVmZi5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEE AdZ5AgQCBIHzBIHwAO4AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAWy81M4lAAAEAwBGMEQCIFwrJY+mzuRbGiYeBBSpC4UIRahsE02LxWe5lpE2 QxqbAiBEccLp8PciMS5blRmjGmtSaLKs95FpgcXdZfdWVHrlRQB1ACk8UZZUyDll uqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbLzUzkYAAAQDAEYwRAIgOUcJDHZ5 LhhML7FkL0isUW3V9vWBUKoDq0ovDT00v/cCICozGnlfc8n5d0qBXSfbNEO91mZz tQy0FcVP0ZeGhJdLMA0GCSqGSIb3DQEBCwUAA4IBAQBHhWH8yreHJj8v3uGEB47x rcBLgz8/pXL7ludoTfWslFIpBSXVgn6YcSMWpYD7wzJTVWSuOgKOWyDcCpdv2lCX NZVlCn7wm9ZwkzianofYeedb5poVlwRp0LS0qqkpDJ9C7vFfUH0uE5j6laP/w0yw xoHqZyOTeleR9L8lZ8L0Te/tdbxNoIyEJAQGV16gEwkfNH5Ht2SAma5NMjALYHnm 3O74j7JZJ8UYHr0x6LV5GKtzABVxKiT/f+CYm4E5lVpEXCh/OUoO5OHmLz85jpfA LiyKmUwSNkMlwRpg5N9d2KCst2LNAXXIWm9QvOhSW/vMllGk+x6QbKmJ1ogmdL5D -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Hyd/mQvODnjwupue8Sj ig7k1fZ1+LPHhppaRwVXwttYAsRO+ZbyaNo2boTPIgZobra/dgz4NUCUxmnxPGsO KA40tLsVxT9SD1EUtadh6mkV/c91gV5srWFLnUeCp8Eo1ZLPD6zN6txila2DwrOc LEG7u67i1FVMMHbsydB8DGZPsRW2Diy7gEmY2AzCshE6D7L65cPdn596zQuVbn0o HTV+it7XQ73iziQg5mZPEXeIsJEevwmpYp7g1fjjKmnxA3kasRB2DJ9ZsQLjF1ZP ygIFWhd58N0GZPFGKcXPUnFpg7iMfdwKj11kJbxwOX+RrOfeKngvSv44WL5oPqxd SBcXnM4aDvSSfsVIhd7fQumw3e3MQKRB7+4V3yGuN+vjBq0VN0FdimdHuavIZXce uj5H0RON8A0m8oALgBaEuh3uHVEOPpTVSHZxkGOzakZY4+B2sFrJBXTqO3nZUkmJ 7AsRZHKJbj8LTu1yszGL67TXWDq8YWJqUiS3LQFvNzBicfkdSSPrP7lZhc8ogGyz RDXkL4pdR8InpAfLZJvNbgpBbQ88Ga4yKzW2cLtA8KRgYkmdEvtZiMuefZdTQmvw VeUfHyJOk9kkq5Hqq8AxYW4NBTm9vG7A90377O2DSbqEZfH+Gtla1JR3ETVrUQsa HhGKrrW8fkzf3BC3K9rugxMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261861293255796098034953266139212232944208 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 03:55:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 03:55:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'layer.dns-stuff.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883189031464293897167654985475732395411396095662864060321358201977793260787030971521016164037601783928199210157681061167333243045108046376801794459247945060063620137263471876370612156095453996202166978472776316113451546471870061249261760327809922548603236308959309775119117551056577379633461479873205177514409856340775507284214153975216045043916343510166253485955444687658044441894958982709084727959150052724702921290114349672264466116319718073632302658476336292594210926289974286644960477026604669214835770432890944442870689617441552259101003685139823819817340670984101979588944555493956560681561408204703800698941322288531254169815628375026705249102933996535798404117523891036497301103388400746810600135703463614928250504202923647894480260081749572290383784204894394904652756440484132381392562411180553579735832787299215427540727735259216251655597977531667907523771473943776107284267433830210558721421276015007329601700116852510486902509758636822781455438476255087713704668438283087413310100134658028326560965660338540537776649740537893432022842566668121312253953662975250672361668009255852982938442236436100479717995199988726360541635131002722342295662701098144637343623409963428336113432939080663874172863779622067451106692072211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ace9331aadb3b03264a0a3c07ad2a2a23b4c1356 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layer.dns-stuff.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cbcd4ce25000004030046304402205c2b258fa6cee45b1a261e0414a90b850845a86c134d8bc567b9969136431a9b02204471c2e9f0f722312e5b9519a31a6b5268b2acf7916981c5dd65f756547ae545007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cbcd4ce46000004030046304402203947090c76792e184c2fb1642f48ac516dd5f6f58150aa03ab4a2f0d3d34bff702202a331a795f73c9f9774a815d27db3443bdd66673b50cb415c54fd1978684974b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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