plan.kentei.cc
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:07:41:19:d2:da:59:a6:a4:81:44:4f:60:17:70:4e:20:52 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=plan.kentei.cc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:41:19:d2:da:59:a6:a4:81:44:4f:60:17:70:4e:20:52Serial Number (int): 263805368267480293905918007279523545882706
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cc:74:a9:2f:2e:69:28:12:b3:b9:88:da:b5:5b:bc:6f:d0:fa:76:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3d:af:b1:d2:a9:c2:c9:79:65:a5:a8:c5:68:3d:76:27:f9:99:81:f8
Fingerprint (sha256): 0c:b2:1d:61:32:36:39:78:8b:44:bc:63:1c:d0:22:91:0b:b6:2d:3e:e1:8c:fe:63:94:34:69:77:83:7b:52:84
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate plan.kentei.cc
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plan.kentei.cc
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
plan.kentei.cc
Other certificates including the domain name kentei.cc
(limited to 100 certificates)
*.kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
Certificate
The complete raw certificate details for plan.kentei.cc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISAwdBGdLaWaakgURPYBdwTiBSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTIyMzA0MDNaFw0y MDA2MTAyMzA0MDNaMBkxFzAVBgNVBAMTDnBsYW4ua2VudGVpLmNjMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5eq/CORCZZ9mvmlKvsix5y994WEG5SfY aCtYsq3HZhI2JIglagqNDXYJQc7ETHR1iNRuI5iQnyyYwLFUI4qn3P8M2Yoe1JEs EyZ5sFdADVAwZgO/v/CT7J/wRVmkz/7RuxW2Epjx10sBgz/lZVcHt4qRti7iFoHU 9E1wlQVq6YJ9qmHmFnB2y0Do9RPBKUncoY9B9ntEX7n9G7wTUUpWuLGU3q6G4SdL dSnRe/ICXBYaRSNbiKz+vQIiSwaV2zmIm/dx17g9yV2McNhjFs5mHXQHxivNbr5a zpRrf2dAyiOJTr8RLD7sQbVIoa2VLfOTuVdgePBEMiLPH4yp/Iov/4wZvrgpeLhm YiZfYCI/1P+S+l3ubSGarydYOFCAMNpQyglmF0U1tfeTDlWKHcrL8+c1oXqoRpix djHhdl9pzlPujBw2D9bqOS8+7k0qMMwmiOuP7NiOBtqxo8JyDgEILd3GpV2h8lIF ZYj+aycGx7Pz59Q/VMLfjRX6EDU2AySn2UFACWtYuLzpvbSxkbpxF62A9USXr+jr ABxa0hjakt7Y58xBKUFXqThDUT7bJPdFPYBf/TBNVSWzZrBGsZNyKJYKU7KW3erO 1b53Oic936TTYP25SHPUEKIEVvOs7d/1yOuvTReYuGIrEZU9S4MFhGU0Vxho+3yk chBQeXIiHqcCAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzHSp Ly5pKBKzuYjatVu8b9D6dlcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5wbGFuLmtlbnRlaS5jYzBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1AOcS8rA3fhpi+47JDGGE8ep7N8tWHREmW/Pg80vyQVRuAAABcNE0f0cA AAQDAEYwRAIgcAbchQ9yd+np5Yi6td7Q2LLPIlzvrE+ev8eLqZJrZoECIG6A3bQ6 AxLiHrKGDnGA9C0HQsB726u9Gu17r7/5cUMVAHYAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFw0TR/PQAABAMARzBFAiAocjefXDMKgpiM1dJ3B8kg oGBC4P6GbzrPqA1VW7ayRAIhALATxevP9BrAMjHnBEhL7mFa7907jdeJWmFyGEVQ WBoVMA0GCSqGSIb3DQEBCwUAA4IBAQBngonaLD5qXXtzngWah9l+KoXOE16m/MZe ubzQQeOf2sozUcI6Da7yiqA3F4dmRh05tttWvTE2+AaYPURn0j5zsPHuV9D2QkoX I3peQaIh3kjF1cLsD7aZFK1bglmCFymd8zOYH5jGdPolAjf619ijZYlK/UJGhS6e p3Z0X4LyH8qUYOHL7CtebOXYXooSEq4CgI2Qh4fVz205B+bkAEAcHE6YbJeuJtep 6JQFeAoorpFi56xFYHV6Ch5NmubYO98SbhHNFH7Cf05jV9t5jJQPoHOtz9i1lde3 3gcpMvplD+86qoyAqLOqhjpESA9hAMzvkRrm5vuyKVLpcJ/Te5U6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5eq/CORCZZ9mvmlKvsix 5y994WEG5SfYaCtYsq3HZhI2JIglagqNDXYJQc7ETHR1iNRuI5iQnyyYwLFUI4qn 3P8M2Yoe1JEsEyZ5sFdADVAwZgO/v/CT7J/wRVmkz/7RuxW2Epjx10sBgz/lZVcH t4qRti7iFoHU9E1wlQVq6YJ9qmHmFnB2y0Do9RPBKUncoY9B9ntEX7n9G7wTUUpW uLGU3q6G4SdLdSnRe/ICXBYaRSNbiKz+vQIiSwaV2zmIm/dx17g9yV2McNhjFs5m HXQHxivNbr5azpRrf2dAyiOJTr8RLD7sQbVIoa2VLfOTuVdgePBEMiLPH4yp/Iov /4wZvrgpeLhmYiZfYCI/1P+S+l3ubSGarydYOFCAMNpQyglmF0U1tfeTDlWKHcrL 8+c1oXqoRpixdjHhdl9pzlPujBw2D9bqOS8+7k0qMMwmiOuP7NiOBtqxo8JyDgEI Ld3GpV2h8lIFZYj+aycGx7Pz59Q/VMLfjRX6EDU2AySn2UFACWtYuLzpvbSxkbpx F62A9USXr+jrABxa0hjakt7Y58xBKUFXqThDUT7bJPdFPYBf/TBNVSWzZrBGsZNy KJYKU7KW3erO1b53Oic936TTYP25SHPUEKIEVvOs7d/1yOuvTReYuGIrEZU9S4MF hGU0Vxho+3ykchBQeXIiHqcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263805368267480293905918007279523545882706 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 23:04:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 23:04:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plan.kentei.cc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937979433226477696593711514798605651810548241213957460818852092413092749564968581083391169185307371222416813557097124084160521386650300977856463675008118990655343271134382888591251940234815814702117113043159553903548760975125254303840690714078836714124848394399103057761280643765772108261834547683049341145252967039240421047000593014834963895809390796592032802506141581194935366790055514447665650631012441801116060530820148079396318486528100780488085491301780007601495715541401547496363497924005532183201467234090110341772587473727399019206889740683936781893891921861417863626916361012887090698764202472251576180554109670185360986400253521952085548715770621934145879632141119564978432344611943788313854242892220094105985149379939934095471254548444948917772667348866248175656756892009906596845970128572536741656834550373887556664614253158845200701855820075575900212722411456009617416398208158576283557878420558372288754431355543046922280239777236256265226490765736276370531401491453155466969726606270030442394211164815019995497251235135736477293763535436683133297371908347316274694875835176391666325916126163439291240799665293463346368477997028238869915013581181151835267832257742619396798980513466693955873102874152595932364270608039 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc74a92f2e692812b3b988dab55bbc6fd0fa7657 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.kentei.cc' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170d1347f47000004030046304402207006dc850f7277e9e9e588bab5ded0d8b2cf225cefac4f9ebfc78ba9926b668102206e80ddb43a0312e21eb2860e7180f42d0742c07bdbabbd1aed7bafbff9714315007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d1347f3d000004030047304502202872379f5c330a82988cd5d27707c920a06042e0fe866f3acfa80d555bb6b244022100b013c5ebcff41ac03231e704484bee615aefdd3b8dd7895a6172184550581a15 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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