shopping.airfrance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:42:28:ee:46:84:cd:3d:7a:fc:68:a0:2a:8b:9d:3c:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopping.airfrance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:42:28:ee:46:84:cd:3d:7a:fc:68:a0:2a:8b:9d:3c:10
Serial Number (int): 271973552742226535334471653098101491448848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:60:6d:f1:d2:ea:1e:3e:aa:75:33:b5:35:62:11:e5:be:f8:fc:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:6d:c5:a9:4f:cf:34:ed:3c:4a:ea:6c:b3:0b:6d:9a:99:69:cf:50
Fingerprint (sha256): 11:6f:dc:57:11:f2:54:0e:58:cc:01:6d:3b:42:bc:07:ac:79:64:29:82:a5:61:63:16:75:a2:83:b4:24:06:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shopping.airfrance.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopping.airfrance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopping.airfrance.com

Other certificates including the domain name airfrance.com

(limited to 100 certificates)
frenchtech.airfrance.com
www.quantil.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
games.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
*.quantil.com
fondation.airfrance.com
www.quantil.com
projet-fondation.airfrance.com
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.klm.com
support9.cdnetworks.net
crescendo.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
connect.airfrance.com
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
www.atanar.net
staging-assets-lapremiere.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
partenariats.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
pub-ae.airfrance.com
support9.cdnetworks.net
www.quantil.com
support9.cdnetworks.net
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
www.iseatz.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
cardpayment-rct.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
klm.com
support9.cdnetworks.net
support9.cdnetworks.net
doityourself.airfrance.com
support9.cdnetworks.net
cuba.klm.com
support9.cdnetworks.net
*.connect.airfrance.com
www.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
*.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorezlemonde.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorecostarica.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
shopping.airfrance.com
objects.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
dallas.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
frenchtech.airfrance.com
support9.cdnetworks.net

Certificate

The complete raw certificate details for shopping.airfrance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISAx9CKO5GhM09evxooCqLnTwQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDQwNjI5NTFaFw0x
OTA5MDIwNjI5NTFaMCExHzAdBgNVBAMTFnNob3BwaW5nLmFpcmZyYW5jZS5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDNntc7YhAf+RZZT0N/AvJ+
pCM8GTBQivAr/md/XFAju0SNiHeHJTwY5KffH6Z66cMViCILVOhf+kCqzGFKoBbc
s8iqYKUrvQUdrZgK6JN2NXgXRnCOGN6RUxDQZ11FmWEJ2GPCRySLUg6OnqrAzpJq
O1PizWdrN4vfo+JpnJ71lRp24zp3AmOLqJJot4SlkKtyDaNywX0xNy3EN6FMEdXi
PMNlNMiobJcXbcDPR61r5vcmorGYKVQCc6QSqSl8NUEqYNTdk+jlB3ZX6a9G0mZB
JM5D6CHKtuZg4Kuqj7RfE1SceoTJTuQDiIeyteizyhIQK2sYKqlOp785tpKt5gY3
DV7Mt/seRT5GKL8FIreF1xx5hus3qpuA+UsciKKbjy1YytKAlOBLyak5ialpbRWY
ty7UyHLo5eoeKQuU6bn0kptNy85frEOilcv2du5d/7I5WEH0l0OUgZEraV83NbXH
SCI+tpC1QDm/CfiNZNa1FgbOcov1J8AQQnRDzulhMEs3U6une0g7k7D9FPGXvEC7
8sfBrox5VsC6AxhZ4M1DQBYzumXpr14iOZc7V2VoDjs4zUWp+x49i8R7Hl/NDv2V
WSVNQehZ+J7ScQ8fifdFqymp8NHWkCzFGtIbYKqz8q8Yh8Jq2DlMv4o1rmJNSmOv
onDU81MdopXoNoDCgSVW/QIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTnYG3x0uoePqp1M7U1YhHlvvj8wDAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnNob3BwaW5n
LmFpcmZyYW5jZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkG
jbIImjfZEwAAAWshZPGsAAAEAwBGMEQCIHANnfYnsMqBFj70lgh+RhbIeWsSwogp
DbZrHcqOePdDAiBXgJz1youkjihiNlvkXXy1m5YXe8sHereONeSvOTqQRAB2AGPy
283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABayFk8P8AAAQDAEcwRQIg
EvHVaDkt+13VvN53NZf3xzom6RzcF9md+HI+UUjUvN0CIQC+pmbrW/IW4vV40Mz7
lAhom0NPNPzU/LlJY1/tN0yDeTANBgkqhkiG9w0BAQsFAAOCAQEAiziUIoI/0nWW
JzRWjHWUAM+uSrTts40aCr3x6eGDqFlZsniOlZxU++0Rd7MYHNFRNuM1FC/4CJXU
YRXxB9X/B4ri6xtvQIQshJiJhib57gsgPli0FVav7Cxn1Gp+aVd/TfFQ8dEAGggT
3XuvDtPQu8pveKLJGKF8eZlYNKvWa3957T9NH2rxkhME8/ZYWIW7N8halE61ATL5
PXDAuwjJ1muSRUctKr6rlfVHeg83QqabEv4f/qelki2jBXszfEz2jKTQOhsWUFBR
DT7ZYTfq1eLwhri6iKQ7m3cYYdpl6syGLJTqfYuwtcclgZmeXwHmVjjHUFyV3L9Y
PMlDgFNApg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271973552742226535334471653098101491448848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 06:29:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 06:29:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopping.airfrance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838858337549363369288974284534111893188331168498097464186338181479741159850436719211385845512170198436253190474339538643928622263686550048191875843788411277998905937010847495028581784585136358826738603626757869089330466569495500417991064837225930029637425814925646973074315617493935080868170172469450300375412300883483075660889206246511783082435893638448010161413489143795034491738464701449654920197334013145859736493064779052781124268798557811800857960162619736899908773478079741002898377310313976957721465524762089086523885671531891972192644926170370911858433559747562323292257122993433077621995726999190113824889479026433002194370185434243235927322688584385630627311361779360908928920404444468772258261593762233910511049222929516301808010380538566526882401154938903648585235057079803826382416013371229960116865203439772846321284049718971149031849311412518148396433428306068480803649522139404189801981436379642599223726825718878766264008736711714728672098360758834231250979590439956575746409013703724519391468034987887719900623341232498314923887825196432702056332652869790421682533638797312375557014223350143659791179559218360764138435422554953065537819986874483539301752992088072697127037089929446618832996211200182647978293810941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7606df1d2ea1e3eaa7533b5356211e5bef8fcc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.airfrance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b2164f1ac00000403004630440220700d9df627b0ca81163ef496087e4616c8796b12c288290db66b1dca8e78f743022057809cf5ca8ba48e2862365be45d7cb59b96177bcb077ab78e35e4af393a904400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b2164f0ff0000040300473045022012f1d568392dfb5dd5bcde773597f7c73a26e91cdc17d99df8723e5148d4bcdd022100bea666eb5bf216e2f578d0ccfb9408689b434f34fcd4fcb949635fed374c8379
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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