cismoodle.ufv.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:db:0c:3a:92:0a:e0:dd:84:80:8b:07:7e:04:94:14:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cismoodle.ufv.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:db:0c:3a:92:0a:e0:dd:84:80:8b:07:7e:04:94:14:6f
Serial Number (int): 295656258913964220714755145805370221663343
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:0b:6d:e4:cf:44:5b:6f:a0:a0:1f:6c:04:f4:17:6e:ed:9c:f0:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:e8:fb:22:e0:5d:b5:da:af:81:7f:63:02:01:13:b5:8a:92:9d:96
Fingerprint (sha256): 09:33:64:03:1f:46:ae:db:e1:15:0e:93:9b:bd:42:a7:ec:82:d1:3d:51:e7:8f:80:5a:e7:dd:79:4a:37:e2:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cismoodle.ufv.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cismoodle.ufv.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cismoodle.ufv.ca

Other certificates including the domain name ufv.ca

(limited to 100 certificates)
fast-web.ad.ufv.ca
*.ufv.ca
events.ufv.ca
itservicedesk.ufv.ca
graphicdesign.ufv.ca
cisgitlab.ufv.ca
webmail.ufv.ca
*.ufv.ca
nginx.ufv.ca
alert.ufv.ca
cisgitlab.ufv.ca
alert.ufv.ca
graphicdesign.ufv.ca
proxy.ufv.ca
blogs.ufv.ca
catalog.ufv.ca
*.ufv.ca
arfileroom.ufv.ca
cismoodle.ufv.ca
*.ufv.ca
cjr.ufv.ca
printing.ufv.ca
*.ufv.ca
cisopenstack.ufv.ca
campusadmin.ufv.ca
connect.ufv.ca
vpn.ufv.ca
graphicdesign.ufv.ca
cisgitlab.ufv.ca
residence.ufv.ca
*.proxy.ufv.ca
*.ufv.ca
identitypprd.ufv.ca
myportal.ufv.ca
bn9-app4-prod.ufv.ca
*.ufv.ca
share.ufv.ca
cismoodle.ufv.ca
cisgitlab.ufv.ca
webmail.ufv.ca
blogs.ufv.ca
*.ufv.ca
*.ad.ufv.ca
cisweb.ufv.ca
warden.ufv.ca
www.ufv.ca
*.ufv.ca
graphicdesign.ufv.ca
myweb.ufv.ca
bn9-app5-prod.ufv.ca
graphicdesign.ufv.ca
*.ufv.ca
cisopenstack.ufv.ca
price.ufv.ca
blogs.ufv.ca
ward.ufv.ca
wp.ufv.ca
*.ufv.ca
identity.ufv.ca
connect.ufv.ca
alert.ufv.ca
app.ufv.ca
alert.ufv.ca
bn9-app4-pprd.ufv.ca
university.ufv.ca
residence.ufv.ca
temple.ufv.ca
garibaldi.ufv.ca
fox.ufv.ca
inspired.ufv.ca
beaker.ufv.ca
ruby.ufv.ca
cismoodle.ufv.ca
fast.ufv.ca
*.ufv.ca
alert.ufv.ca
events.ufv.ca
robson.ufv.ca
ics-app01-w-prd.ad.ufv.ca
survey.ufv.ca
cisopenstack.ufv.ca
warden.ufv.ca
cisopenstack.ufv.ca
university.ufv.ca
40.ufv.ca
bannerpprd.ufv.ca
video.ufv.ca
cjr.ufv.ca
university.ufv.ca
alert.ufv.ca
libguides.ufv.ca
bn9-app1-prod.ufv.ca
arfileroom.ufv.ca
www.ufv.ca
am.ufv.ca
ward.ufv.ca
pinto.ufv.ca
www.ufv.ca
alert.ufv.ca
survey.ufv.ca

Certificate

The complete raw certificate details for cismoodle.ufv.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA2TbDDqSCuDdhICLB34ElBRvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjgxMjIzMTJaFw0x
OTA1MjkxMjIzMTJaMBsxGTAXBgNVBAMTEGNpc21vb2RsZS51ZnYuY2EwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC3p8WBjO30k/io3Kll9gNvDNm5e7pW
WyyhIKXviXiS2nVmH9Tcp0pSy32jIUPiYfR3VUUNte5lwUuIV9bM03z2j5whDf/r
EIQEpDP1zgozYCRWTZcB3CX3qPIhjLQUtu1/63StlX2l39+AUw6lfS1RV4+mtdOH
y7y8mcwpwbMYfBqB4DlXSHpHPUdKCWFlWVP8T8dw7s+RTUpvLCqce4Ms7sn9HLVS
nUh7xmbxHwzuYnuUTnJQ2lJEKWihlx4auRIWuE5Aob2ZW3GzSbvt5zzSAByVhWoB
qQ1CBbHmc1R4W1DQY734oRRoYSq37qafBapVdjSr5PJz1pRreHRY2Xs1SQ/7+OPN
qJVSkxzzHivz84vvc3iTzdwbJ9mAGOYz+xd8++Dl8I4kVS7l9YAc1Gc6GYN2BmVA
ETQ11TxdOL3IYAXUgRgrTCFQmmtU7pXUH6DPnz4i/rTxw6KMYie9Ldh3IuGJlAFQ
mbOd4AIykXIQs9lIDby49q2GZGF7MlItQJEAUKoewZkkqPM7BJj9PLoQmcgIqoHm
I0m8fMJEx3zaKass7hwhLNQmY8V2xr2hw8PjKhAmVn53XFnYOnt5MwaWnqFgFKSi
EpC8qkbFFMmmMqtObK2lH2GtagBjaXPG6XOjw49wvgfdpoGcdbRBU/8xSiY0cWi1
0smyAWDmVXRIiwIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSN
C23kz0Rbb6CgH2wE9Bdu7Zzw2zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGNpc21vb2RsZS51ZnYu
Y2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWk0
Re7GAAAEAwBIMEYCIQDWcTzULlxBAa7NiSCyJgrXLTOpQHjZP5cDFOVd/H0GfAIh
AIv4C+Svn170xG2jod2O8U4ougbYSISbInBpXnPlwc90AHUAKTxRllTIOWW6qlD8
WAfUt2+/WHopctykwwz05UVH9HgAAAFpNEXvHAAABAMARjBEAiAJ31Ji1gjOtHZN
qp+cuiDZNQ6eWkZVtv3g05pvMo9NswIgJYo+8FaPohmaWevN2h5IVqYXJLGvrUqs
s95KJjvwBOcwDQYJKoZIhvcNAQELBQADggEBACtAAppQCfUdPHMH/yLbdDayY6h4
xHY8E/HfqVkF5cOV49C4CHjRgdPJDv3O7TC2ZAWcN70zwDbrcKTX15veq9czuR2s
fc8fQelvgbweRFfbid+cwc4oswh5/LDawjUYpbNIyJHXC6dn7skVmdXh1r2FCbyQ
iq3HZ7lQGTudlHa2sp9MfGh4uk2QLuiIPhtnkI2OOVz6zOgrXP0VxpHvPvZw5b2O
C3AzcxLxUFFLYg+HrDNA1jvSfTfl+j7xuaQKayOaalc3ES+P1Ri/JlxMtLz5vjxO
EocriNoQqQ2B6YKhAc1pdYSw0/yDkWraOO69dVX7oI6iP6GAsraiFBXyYSw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295656258913964220714755145805370221663343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 12:23:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 12:23:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cismoodle.ufv.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749248489594296741841750817625286762259078360565147515373017261609186252777049444732204065615885999624111148179424257234020822645968767912260290457259326334917937195010762634155902996905073403099622769618031841872383952321127989195346454751886872823877689881688706535485410434937991223245641210158234389634984915278754849668810805013264882926888389920628877548378242681957066202972992372003519416726342835424457867862170878474457587613269946682364700898273204593560377372012448446596764974165992794393991117843093783538831761124763706378333291393123344251539176474105222670439838188092007973947156743464210633700715626578019799710289040574708447041608057745426743895512370068048365360360816924172212082483452914297787187038341225918218025739489777825963456349785540966192850172220983990662902322902344152813267192885518743314764310406362910833538229214023185816562564515282667808300093362994215209533235833957239118731008180232943215403802650551814415140272635902937355548723264163360329972231190395959844129088383924381120951391896243011125939629675430695148421723207635610488370487220597352313089698136088260853495170716713547237704361874324884226648514371528332255135708520026383269601649020900303750134129152493965626792924694667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d0b6de4cf445b6fa0a01f6c04f4176eed9cf0db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cismoodle.ufv.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001693445eec60000040300483046022100d6713cd42e5c4101aecd8920b2260ad72d33a94078d93f970314e55dfc7d067c0221008bf80be4af9f5ef4c46da3a1dd8ef14e28ba06d848849b2270695e73e5c1cf74007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001693445ef1c0000040300463044022009df5262d608ceb4764daa9f9cba20d9350e9e5a4655b6fde0d39a6f328f4db30220258a3ef0568fa2199a59ebcdda1e4856a61724b1afad4aacb3de4a263bf004e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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