livethemma.ikea.se
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d1:c0:ab:93:25:15:43:10:49:b5:0f:a9:b7:4b:05:ab:04 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=livethemma.ikea.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d1:c0:ab:93:25:15:43:10:49:b5:0f:a9:b7:4b:05:ab:04Serial Number (int): 419824261055922872763439918748166657518340
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 00:c9:40:cd:1b:06:72:87:97:41:cc:f7:03:a4:35:e5:cc:9f:47:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b7:c1:40:3c:bd:5d:36:40:18:11:44:7f:d5:5c:30:70:6c:56:de:f4
Fingerprint (sha256): 13:5f:57:83:43:89:89:37:2a:82:e1:8d:d2:cf:22:42:09:4f:1f:cc:b3:3f:33:51:71:7a:c1:5f:3f:60:2d:2e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate livethemma.ikea.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for livethemma.ikea.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
livethemma.ikea.se
Other certificates including the domain name ikea.se
(limited to 100 certificates)
akamai-san50.exacttarget.com
www.ikea.se
ikea.se
hej.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
click.news.email.ikea.se
www.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
akamai-san50.exacttarget.com
press.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
livethemma.ikea.se
view.news.email.ikea.se
ikea-se.kampanj.ikea.se
livethemma.ikea.se
ikea.se
www.ikea.se
www.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
www.ikea.se
ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
ikea.se
akamai-san50.exacttarget.com
livethemma.ikea.se
click.news.email.ikea.se
press.ikea.se
ikea.se
sommarbuffe.kampanj.ikea.se
Inter IKEA Systems B.V.
press.ikea.se
press.ikea.se
press.ikea.se
ikea.se
www.ikea.se
re-like.kampanj.ikea.se
livethemma.ikea.se
livethemma.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
cloud.news.email.ikea.se
www.ikea.se
www.ikea.se
click.news.email.ikea.se
akamai-san50.exacttarget.com
www.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
cloud.news.email.ikea.se
press.ikea.se
mta-sts.meeting.email.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
www.ikea.se
livethemma.ikea.se
click.news.email.ikea.se
sovsomettbarn.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
bedbath.kampanj.ikea.se
www.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
ikea.se
press.ikea.se
www.ikea.se
click.news.email.ikea.se
jagharaldrig.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
cloud.news.email.ikea.us
jagharaldrig.kampanj.ikea.se
livethemma.ikea.se
www.ikea.se
ikea.se
hej.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
click.news.email.ikea.se
www.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
akamai-san50.exacttarget.com
press.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
livethemma.ikea.se
view.news.email.ikea.se
ikea-se.kampanj.ikea.se
livethemma.ikea.se
ikea.se
www.ikea.se
www.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
www.ikea.se
ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
ikea.se
akamai-san50.exacttarget.com
livethemma.ikea.se
click.news.email.ikea.se
press.ikea.se
ikea.se
sommarbuffe.kampanj.ikea.se
Inter IKEA Systems B.V.
press.ikea.se
press.ikea.se
press.ikea.se
ikea.se
www.ikea.se
re-like.kampanj.ikea.se
livethemma.ikea.se
livethemma.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
cloud.news.email.ikea.se
www.ikea.se
www.ikea.se
click.news.email.ikea.se
akamai-san50.exacttarget.com
www.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
cloud.news.email.ikea.se
press.ikea.se
mta-sts.meeting.email.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
www.ikea.se
livethemma.ikea.se
click.news.email.ikea.se
sovsomettbarn.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
bedbath.kampanj.ikea.se
www.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
ikea.se
press.ikea.se
www.ikea.se
click.news.email.ikea.se
jagharaldrig.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
cloud.news.email.ikea.us
jagharaldrig.kampanj.ikea.se
livethemma.ikea.se
Certificate
The complete raw certificate details for livethemma.ikea.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEaTCCA1GgAwIBAgISBNHAq5MlFUMQSbUPqbdLBasEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA2MjQyMDI0MDRaFw0y MDA5MjIyMDI0MDRaMB0xGzAZBgNVBAMTEmxpdmV0aGVtbWEuaWtlYS5zZTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANfSMLWHLewgX5rpkD9LL8POLG+f RSSVNijKnsXzBZHzh4LVJ/WSubuJ8xIlnFS1jmLyPQUGTaxqiOiy/HYXb2r8a5wV lB90ELYjyrX+m9GpNsJhJV+t/7DGRiUvJBswDc02UJUAdL24+Ye8XOvS1NoMYYYX fXZf8dSBI0IFjxCeHgKmVco6eNXE71WHaykH+XinFCi5a/LoiIE+ATHCiD/9GRBS 24oI/9qVVZUC8/NJP6bnzwMem7yqSYLfu/vm5tPVmlYwKJyq3lAVORGzmQ+lIMP/ SQS1y0LZiR1RD8pUKPOCZIFYaeR55Gvm5npM0JsIqvrE5bDY9OGwen+pBA8CAwEA AaOCAXQwggFwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAMlAzRsGcoeXQcz3A6Q1 5cyfR5QwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAdBgNVHREEFjAUghJsaXZldGhlbW1hLmlrZWEuc2UwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAFUrDIT8eFzRqDqkayrgRV3wXxwjwKy5KqpEwxj/D6nkoHaa QHc30QiJy1lX1x1k1YBDxlFBWcx4ACFG3U/0a4pQFylQVLWH2AQnXm2q5hCuhqY3 CNqycRgNJEjBdio/3qOt8GEuHnA+9bR08zT4e2iu8Sz+47g6gTIpBp3PBgqrCiwi p5N3YrLGXvkEtw8MAhJl0oKvqIzOf/Gabjtu7put7Wplmei047lYdY+vNP7ymQBv IPG69+763Mikeje4xXMCt5E3KmyGPMjAQo9GDki/ZfGw5nGZHOadJRBT4KDYxskG SPsbjC6kCPOY7rwFIZtp5DyOT4vK66dAVw92Puw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19IwtYct7CBfmumQP0sv w84sb59FJJU2KMqexfMFkfOHgtUn9ZK5u4nzEiWcVLWOYvI9BQZNrGqI6LL8dhdv avxrnBWUH3QQtiPKtf6b0ak2wmElX63/sMZGJS8kGzANzTZQlQB0vbj5h7xc69LU 2gxhhhd9dl/x1IEjQgWPEJ4eAqZVyjp41cTvVYdrKQf5eKcUKLlr8uiIgT4BMcKI P/0ZEFLbigj/2pVVlQLz80k/pufPAx6bvKpJgt+7++bm09WaVjAonKreUBU5EbOZ D6Ugw/9JBLXLQtmJHVEPylQo84JkgVhp5Hnka+bmekzQmwiq+sTlsNj04bB6f6kE DwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 419824261055922872763439918748166657518340 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 20:24:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 20:24:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livethemma.ikea.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27244884252828773728200319002430518270486151622340457487081164596732504279594515907678463960001985133326331879069241359935885857517973479145868650294138673685480742767067081475281418143995067319491836929044759654099979143786178848225901477296110387545816856963311436396356966259466479818216064954143947222905213175494775402351657687666392316066142682346962263469989584639134222661313497000352796800479318265876893181493521809336878453326091713089141060879163002153817894913862090519046077511887986078282101473305377609317117735488250492912561467062968077345968052147537652984306281262957366850132974777086832263365647 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 00c940cd1b0672879741ccf703a435e5cc9f4794 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livethemma.ikea.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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