waibopfootball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9b:e5:5f:71:3c:4f:6b:44:8b:a8:4c:85:71:bb:ea:1c:14 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=waibopfootball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:e5:5f:71:3c:4f:6b:44:8b:a8:4c:85:71:bb:ea:1c:14
Serial Number (int): 401497799375713308924868693039414814317588
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:6e:c7:98:bf:51:37:4e:c1:35:22:16:a4:25:7f:c9:0e:74:d2:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:63:65:68:0b:19:28:47:d8:68:2d:b0:1a:dd:5a:85:76:96:86:63
Fingerprint (sha256): 08:ad:fc:49:63:39:58:f3:4b:a2:c5:06:3c:6d:26:f7:1f:28:d5:49:f1:37:27:b9:3b:5d:ca:8c:f3:86:bf:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate waibopfootball.co.nz

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waibopfootball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
centralfootball.co.nz
centralfootball.org.nz
cmsport.co.nz
footballsouth.co.nz
gameoftwohalfwits.com
hbcc.org.nz
hendersonsquash.co.nz
hrc.org.nz
karakasportspark.co.nz
keirunga.org.nz
ladiessocialcycling.org.nz
linwoodrugby.co.nz
linwoodrugby.com
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
nhbmx.org.nz
nzsra.org.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
southlandbmxclub.co.nz
sportsground.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waibopfootball.co.nz
waihoraclaytarget.co.nz
waikaregolfclub.co.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name waibopfootball.co.nz

(limited to 100 certificates)
oratiaunited.co.nz
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
waibopfootball.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
sporty.co.nz
sporty.co.nz
hockeymanawatu.org.nz
sporty.co.nz
www.sportsground.com
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
sporty.co.nz
www.schoolground.nz
maristinvercargill.co.nz
maristalbion.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org

Certificate

The complete raw certificate details for waibopfootball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSVrNElMBiyp1DQwOKdJ
Tli9I4a9SkgPC8LoUMvpE1fmWLwBYtKznUOGDHU6tt44CSavJVfyFJj/vuBhPR0k
7d/A0S8vldkpOMUV/eEReXr2/rRkCjzIOej72zPKYU6bn+rUAmWyAPSj3EDL4S04
5zfudFqs0s8M3441m+gNq9gP0rYwknKUikgj6Y09lyJQmQ14m9E/p/88SJLrbjCo
pH71JTvnnBPagLLSb69GWBC4nWhIztQNraJ7wTfvTaRBtZzsugeNAknBIGMuNjIe
ggJgmEM6/VPYFe4r+JU+SxCqSZa867XJDggvcxkM5E60p4+7hTNMDg8VCpC+iXsG
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401497799375713308924868693039414814317588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 07:05:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-03 07:05:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waibopfootball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20847772200909276472812247895828965032621139063842947627525150178516725819635079017894432599807070536596351476748303636286823874206667798308977955515992616538240260887216332627748934922439451114856879190215187294990357711172668078375543145282991469506220560048365828675848552679997709122814506147563003433384909456504919724189448423030819188105295441961397476501577403088675669206247652562374992097550528427487078150539869341955248550140419280605844143208453597478670336980245400307431512346423931577597621886187094887109514309722274814255664439663551282871341808567351577486363475945670739070012571900353549730252441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef6ec798bf51374ec1352216a4257fc90e74d2ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (827 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171e3de81780000040300483046022100f7951cf1c55536a03330f1254b10740ca4e716c066f766db91c3a9dabc0af22f022100fe91782225954588260981bd8cc74f1d03be01ca431e70d3de9d35ebb5b08e8100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171e3de818f00000403004730450220569e11726a287e64b69fe60fbd4f2f9dbb8c1512f1d59792ad050b146a34da1c022100b4c9c0dd504c70c5b810cb91723c2c6f3f3c401bf8da73512a75e116b17f7cd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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