apps.nykaa.com
Issued by R3
About this certificate
This digital certificate with serial number 03:18:c5:b4:30:a7:d2:b6:f0:62:6a:92:10:d1:ff:e0:fd:e8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=apps.nykaa.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:18:c5:b4:30:a7:d2:b6:f0:62:6a:92:10:d1:ff:e0:fd:e8Serial Number (int): 269766428116839404885835267647453947559400
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 46:01:99:79:ab:ff:1b:97:4d:99:08:44:43:03:c7:fc:15:70:03:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ab:8c:50:9a:da:77:00:80:ca:1e:38:25:46:d4:f7:27:ea:71:7c:0a
Fingerprint (sha256): 07:9a:0c:90:f4:84:86:48:28:ca:75:e7:9d:85:e6:ce:91:15:36:c8:20:78:30:ad:a0:df:95:1d:4b:dc:64:be
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate apps.nykaa.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apps.nykaa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apps.nykaa.com
Other certificates including the domain name nykaa.com
(limited to 100 certificates)
d.d8u.com
*.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
*.nykaa.com
infosec.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
explore-feed.nykaa.com
qa-explore-feed.nykaa.com
app1.ftrans01.com
servicedesk.nykaa.com
app.krademylms.com
apps.nykaa.com
pp1.nykaa.com
d.d8u.com
incapsula.com
ithelpdesk.niairport.in
sni.cloudflaressl.com
*.nykaa.com
*.nykaa.com
smetrics.nykaa.com
apps.nykaa.com
infosec.nykaa.com
nonprod-events.nykaa.com
d.d8u.com
d.d8u.com
sni.cloudflaressl.com
qa-explore-event.nykaa.com
preprod-secure.nykaa.com
*.nykaa.com
survey.nykaa.com
*.nykaa.com
*.nykaa.com
*.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
nonprod-events.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
*.nykaa.com
app.krademylms.com
sherlock.nykaa.com
d.d8u.com
app1.ftrans01.com
apps.nykaa.com
sni.cloudflaressl.com
sni.cloudflaressl.com
preprod-ads.nykaa.com
posreports.nykaa.com
watson.nykaa.com
support.nykaa.com
admin-panel.nykaa.com
smetrics.nykaa.com
watson.nykaa.com
d.d8u.com
www.nykaa.com
preprod-fountain9.nykaa.com
sni.cloudflaressl.com
delivery.thehubpeople.com
ads.nykaa.com
www.nykaa.com
static-visual.nykaa.com
preprod-retina-api.nykaa.com
www.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
ithelpdesk.tatanexarc.com
nonprod-events.nykaa.com
tools.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
www.nykaa.com
delivery.acuralabs.ai
www.nykaa.com
*.nykaa.com
app.krademylms.com
survey.nykaa.com
sni.cloudflaressl.com
nykaa.com
delivery.acuralabs.ai
support.nykaa.com
www.nykaa.com
support.nykaa.com
servicedesk.linkintime.co.in
nykaa.com
*.nykaa.com
hrms.nykaa.com
sni.cloudflaressl.com
preprod-adtech-campaign-manager.nykaa.com
*.ingest.sentry-prod.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
sni.cloudflaressl.com
app.krademylms.com
dev-sellerportal.nykaa.com
qa-explore-feed.nykaa.com
smoke-api.nykaa.com
app.krademylms.com
*.ingest.sentry-prod.nykaa.com
*.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
*.nykaa.com
infosec.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
explore-feed.nykaa.com
qa-explore-feed.nykaa.com
app1.ftrans01.com
servicedesk.nykaa.com
app.krademylms.com
apps.nykaa.com
pp1.nykaa.com
d.d8u.com
incapsula.com
ithelpdesk.niairport.in
sni.cloudflaressl.com
*.nykaa.com
*.nykaa.com
smetrics.nykaa.com
apps.nykaa.com
infosec.nykaa.com
nonprod-events.nykaa.com
d.d8u.com
d.d8u.com
sni.cloudflaressl.com
qa-explore-event.nykaa.com
preprod-secure.nykaa.com
*.nykaa.com
survey.nykaa.com
*.nykaa.com
*.nykaa.com
*.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
nonprod-events.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
*.nykaa.com
app.krademylms.com
sherlock.nykaa.com
d.d8u.com
app1.ftrans01.com
apps.nykaa.com
sni.cloudflaressl.com
sni.cloudflaressl.com
preprod-ads.nykaa.com
posreports.nykaa.com
watson.nykaa.com
support.nykaa.com
admin-panel.nykaa.com
smetrics.nykaa.com
watson.nykaa.com
d.d8u.com
www.nykaa.com
preprod-fountain9.nykaa.com
sni.cloudflaressl.com
delivery.thehubpeople.com
ads.nykaa.com
www.nykaa.com
static-visual.nykaa.com
preprod-retina-api.nykaa.com
www.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
ithelpdesk.tatanexarc.com
nonprod-events.nykaa.com
tools.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
www.nykaa.com
delivery.acuralabs.ai
www.nykaa.com
*.nykaa.com
app.krademylms.com
survey.nykaa.com
sni.cloudflaressl.com
nykaa.com
delivery.acuralabs.ai
support.nykaa.com
www.nykaa.com
support.nykaa.com
servicedesk.linkintime.co.in
nykaa.com
*.nykaa.com
hrms.nykaa.com
sni.cloudflaressl.com
preprod-adtech-campaign-manager.nykaa.com
*.ingest.sentry-prod.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
sni.cloudflaressl.com
app.krademylms.com
dev-sellerportal.nykaa.com
qa-explore-feed.nykaa.com
smoke-api.nykaa.com
app.krademylms.com
*.ingest.sentry-prod.nykaa.com
Certificate
The complete raw certificate details for apps.nykaa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIELzCCAxegAwIBAgISAxjFtDCn0rbwYmqSENH/4P3oMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAxMzAyMDE0MThaFw0yMTA0MzAyMDE0MThaMBkxFzAVBgNVBAMT DmFwcHMubnlrYWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA q3HebuCZNjvHFN3PYNxa4mUXzGINxQ5N7KogNHWqLLr/DM5V3aDAOw5GkyP2kUi1 B4kQpaBk+WfsgaVtEMTe2kkgAbik7DvL+0e3lGRKKAXIkevEuCfGnytjvVHk4g7E PrAMDXi4oLU/qO4XYFQ0v8iXVdYZL9t2UH7ovOfl5KcIw8WUDU5vrlb5Sgj/G7Us 5eijXi+cHgJegEnAqZ5TQuD+LMugUAXl13BIcpApASaI8Sbqna430GnvnGuYbTBn Mvhd0yMgQNuxz8XC2qUWiLRYnn75WbhL408voQboKdNFBKJMgExCzq1BglfXVbGm JsryBdPa7b2VTChVSTBtMwIDAQABo4IBVjCCAVIwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRGAZl5q/8bl02ZCERDA8f8FXAD+DAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAZBgNVHREEEjAQgg5hcHBzLm55a2FhLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEANN1HTa0UVtEKxvyF+Wf/JkF1BUs+RC4gP6aO4Uon90x6PkQssHGUWg/y8WrK eTlNMQdclZyobtJXIu4jhD6WjRiZixDioAx1wqZkxUlBo4/FKeu/JQI+8YbP0Knp fMgijRfsuEwXDeVOtNtkEZNaSJhfWpaIWe+ZDEUuBD0NjFnNhaFq2nOwMmhTX9PT 3qHZIueKoAac9mtyOg2qXTJINkYbYJm3ZJg+t6n/F3gD0gzZ8dp5rCpBLt+k/Rzy 4bSja6dL1FUZg7N9myQk/8M9u0+QVDCZ3kG6io1s+42D8hupHb2sl1KnuM3BS/Tc rIX9K+7OIt+3xnaupAmQ/dASJQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3HebuCZNjvHFN3PYNxa 4mUXzGINxQ5N7KogNHWqLLr/DM5V3aDAOw5GkyP2kUi1B4kQpaBk+WfsgaVtEMTe 2kkgAbik7DvL+0e3lGRKKAXIkevEuCfGnytjvVHk4g7EPrAMDXi4oLU/qO4XYFQ0 v8iXVdYZL9t2UH7ovOfl5KcIw8WUDU5vrlb5Sgj/G7Us5eijXi+cHgJegEnAqZ5T QuD+LMugUAXl13BIcpApASaI8Sbqna430GnvnGuYbTBnMvhd0yMgQNuxz8XC2qUW iLRYnn75WbhL408voQboKdNFBKJMgExCzq1BglfXVbGmJsryBdPa7b2VTChVSTBt MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269766428116839404885835267647453947559400 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-30 20:14:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 20:14:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.nykaa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21642900986375798592701375241221412873784776389358287377360983199710649851880766907731200633023982867450066532700021655641131080822042581251811108152192793347629152345115972918688391100271841446154038297518611961653436486899867876948101256978386572243035362507084094197582021767565000085760405755282934695468711381927707286622554406793531414946577556273451038322820865663991014759536183471537330359109445035072024953771570007080279797632508999160598207719459527572873761473662902101203173735113368000043857239313892699088653082686540036486509939666074913966836285329197147604300649101067974495219981054779428707527987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 46019979abff1b974d9908444303c7fc157003f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.nykaa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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