ictzaak.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e9:4c:4a:0a:f0:35:0b:ff:d9:b2:34:6c:90:1f:34:da:d5 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ictzaak.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:4c:4a:0a:f0:35:0b:ff:d9:b2:34:6c:90:1f:34:da:d5Serial Number (int): 340724055067361859362287112547554341214933
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5e:d1:60:3f:76:cc:d9:88:3c:5f:4f:28:01:62:71:37:17:cb:9b:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c7:7a:68:a9:a3:3b:22:b3:df:58:b1:97:7a:56:f2:0a:be:06:fb:f3
Fingerprint (sha256): 09:5e:b9:c0:52:92:06:b9:55:7f:ac:42:55:27:80:11:4d:33:88:81:58:c6:3c:17:a1:66:b3:54:d6:7a:26:b5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ictzaak.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ictzaak.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ictzaak.nl
www.ictzaak.nl
www.ictzaak.nl
Other certificates including the domain name ictzaak.nl
(limited to 100 certificates)
ictzaak.nl
ictzaak.nl
assist.oneeightyone.com
www.ictzaak.nl
assist.oneeightyone.com
helpdesk.ictzaak.nl
ftp.ictzaak.nl
assist.oneeightyone.com
deslock.ictzaak.nl
backup.ictzaak.nl
asistencia.okadrive.com
ictzaak.nl
ictzaak.nl
ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
backup.ictzaak.nl
helpdesk.ictzaak.nl
eset.ictzaak.nl
www.ictzaak.nl
deslock.ictzaak.nl
ictzaak.nl
deslock.ictzaak.nl
helpdesk.ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
helpdesk.ictzaak.nl
ftp.ictzaak.nl
ictzaak.nl
assist.oneeightyone.com
www.ictzaak.nl
eset.ictzaak.nl
ftp.ictzaak.nl
ictzaak.nl
eset.ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
assist.oneeightyone.com
www.ictzaak.nl
assist.oneeightyone.com
helpdesk.ictzaak.nl
ftp.ictzaak.nl
assist.oneeightyone.com
deslock.ictzaak.nl
backup.ictzaak.nl
asistencia.okadrive.com
ictzaak.nl
ictzaak.nl
ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
backup.ictzaak.nl
helpdesk.ictzaak.nl
eset.ictzaak.nl
www.ictzaak.nl
deslock.ictzaak.nl
ictzaak.nl
deslock.ictzaak.nl
helpdesk.ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
assist.oneeightyone.com
ictzaak.nl
helpdesk.ictzaak.nl
ftp.ictzaak.nl
ictzaak.nl
assist.oneeightyone.com
www.ictzaak.nl
eset.ictzaak.nl
ftp.ictzaak.nl
ictzaak.nl
eset.ictzaak.nl
assist.oneeightyone.com
Certificate
The complete raw certificate details for ictzaak.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISA+lMSgrwNQv/2bI0bJAfNNrVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMjgyMTAwNTFaFw0x ODAxMjYyMTAwNTFaMBUxEzARBgNVBAMTCmljdHphYWsubmwwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDFj0eTi/T0tmKbA6MSBaHSX/Uk/lQU6B20Aj3F Wksqdcga7vYz2c8rg9jBmXZdVSRSb2tAHCP7gt0o4mJb1PrcL9fRMzvYeKrvYonh f59QvfsSvsT8nehvWMI1roBR87ELt5wbPgVxp7m7ys9Wda3wrqB2Q3yMVB+OtlkV 3+p/n7MR0CnbBwJspo4YllGtjsti1OzLFxVhXmOhLzUzsDN2O0Q+tHfjr76K+hSY C38jv6FRYdfzP2WmsVjitnYaEpYH3646uEbAAGzlPlBxbJ2WCYh2swWaIRDLlwtG J6skQmyiIwEFYkR16EcZ9p77Z8QYPp1LrFNxkblB0xRMcfOtQfuXbVoYjTW3s1fo H1OMxR2ln1CPaBQGbAQEACYKHLOujvK7oAbiGDk5h+1tyjKmLs9jX56eHBw2b1pl uvt+5wxuI+RFIY3y2NDgme3aTFS72IMaIfEVDSymk7UpjW6nd6r/qTtSJB/shJ7e NLD5BTnyoVlvKBHfa7k0SlYdE+b33PyHOaoNjjyWCdXbfYzig25U5br4FQO/bIng DoymIiAXenDVSeWYbJifc80MFWVD32QFj6x5FolbZAaSk+cydNY/gB34gPP86TJV 5mH8O4WUGbxtEkTfjlYMuguM9fqEFuVDrD0CQ3sLuKN8/tbPSt2fu9sEkS5LRS05 Z4xg9wIDAQABo4ICGjCCAhYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRe0WA/dszZ iDxfTygBYnE3F8ubNjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCmljdHphYWsubmyCDnd3dy5pY3R6 YWFrLm5sMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABCsSF8N DR7pN/GN5XXSoOQv+RtQAEXNkTkcTJcIf0y6sgb3FQv/lpksD1yYKyyYkH+VOBiF AKDmGKFV9PvSo4HFLr1G58ZYRMa1iu746YD5QHHoRPx4V5CqEtIOFoRrZDyBfF1b n8m3jbGqx7VD0HppgyTZRLeSif/4bP85QBfjXRBMOC7RYl3uswrZA6ysqRE5Yf3x fGjeMWwKC8yMw+UArRJUVRewfMVir6NrhvPDe8juMaspw/Y00GM0L5Dw/kpXnMFg cXHGxrQJAxIJoSwV/QYCuc1DLOyJzmbdABH7agrVr1T4Zao5G7WRIlJwyuWaq9C2 XYUYVrDBTHYJCgs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxY9Hk4v09LZimwOjEgWh 0l/1JP5UFOgdtAI9xVpLKnXIGu72M9nPK4PYwZl2XVUkUm9rQBwj+4LdKOJiW9T6 3C/X0TM72Hiq72KJ4X+fUL37Er7E/J3ob1jCNa6AUfOxC7ecGz4Fcae5u8rPVnWt 8K6gdkN8jFQfjrZZFd/qf5+zEdAp2wcCbKaOGJZRrY7LYtTsyxcVYV5joS81M7Az djtEPrR346++ivoUmAt/I7+hUWHX8z9lprFY4rZ2GhKWB9+uOrhGwABs5T5QcWyd lgmIdrMFmiEQy5cLRierJEJsoiMBBWJEdehHGfae+2fEGD6dS6xTcZG5QdMUTHHz rUH7l21aGI01t7NX6B9TjMUdpZ9Qj2gUBmwEBAAmChyzro7yu6AG4hg5OYftbcoy pi7PY1+enhwcNm9aZbr7fucMbiPkRSGN8tjQ4Jnt2kxUu9iDGiHxFQ0sppO1KY1u p3eq/6k7UiQf7ISe3jSw+QU58qFZbygR32u5NEpWHRPm99z8hzmqDY48lgnV232M 4oNuVOW6+BUDv2yJ4A6MpiIgF3pw1UnlmGyYn3PNDBVlQ99kBY+seRaJW2QGkpPn MnTWP4Ad+IDz/OkyVeZh/DuFlBm8bRJE345WDLoLjPX6hBblQ6w9AkN7C7ijfP7W z0rdn7vbBJEuS0UtOWeMYPcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340724055067361859362287112547554341214933 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-28 21:00:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 21:00:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ictzaak.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805973200737297196249137303966696710407166687617436291913585899089414951246989312493734322697516241433191545011390031259187116023229549570443342091584012484779480833036691320985986978836807856611746818739467595320216295220588479677027047454833804223151955457868048987583701826684947967757620175048983835520306781841054345688212988369816711024398568573242786067034794265425184795199032885886138927764096009747935026851630681034203434822854688278024589499835026218153529117620637246761065917254512940008864753733425174111450706273845458487635245721417057707319874975929199135377257006249494102312587598317084709627645875671201776718495500047353913927260505917776525455671883826020477358378531946694491870031061601107116448125168774564182491132391310073054815729201575933202535479890448432868468184139453574845823642982421607989432045513624900241776160072318019884606458856469842490121518048552277474523736928739438637600272666409661983948019488614782316099622397348256424349588300459033347383851020231810163133329466984581149545685528313661771778026871031264000808997706359303252731558210536659305441686168602112367515222080797936034619987827289992349191263917310784438265160031999493586951331725106402739841216541947303189081397944567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ed1603f76ccd9883c5f4f280162713717cb9b36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ictzaak.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ictzaak.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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