vea801.gov.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:ee:7c:9e:79:bf:bf:6a:0e:57:b5:2f:97:16:d4:7c:08:52 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vea801.gov.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ee:7c:9e:79:bf:bf:6a:0e:57:b5:2f:97:16:d4:7c:08:52
Serial Number (int): 429601994177968699894604553624146358831186
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:f3:23:f5:9a:7d:57:e0:be:9e:10:0c:70:9e:33:3a:b8:fe:37:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:82:2b:2e:d4:32:e1:99:a4:39:c2:84:52:32:4d:15:f5:fd:b7:4e
Fingerprint (sha256): 16:77:bf:9c:0d:dd:86:2d:9e:8b:e5:d4:41:48:0b:13:f5:b7:fa:a5:b8:6f:08:63:40:10:63:56:3e:23:63:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vea801.gov.cz

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vea801.gov.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collab-edge.mvcr.cz
collab-edge.pcr.cz
meeting.policie.cz
vea801.gov.cz
vea801.mvcr.cz
vea801.pcr.cz

Other certificates including the domain name gov.cz

(limited to 100 certificates)
copernicus.gov.cz
zony-idsjk.kraj-jihocesky.gov.cz
ctu.gov.cz
rpp-ais.egon.gov.cz
odok.cz
eru.gov.cz
ov.gov.cz
data.gov.cz
pruvodce.udh.gov.cz
cms.gov.cz
ov.gov.cz
data.mvcr.gov.cz
portal.gov.cz
smlouvy.gov.cz
rpp-aism-pub-test.egon.gov.cz
cert-externalauthapi.caais-test-int.gov.cz
irop.gov.cz
data.gov.cz
upv.gov.cz
frs.gov.cz
digitalnicesko.gov.cz
zakony.gov.cz
vzdelavani.gov.cz
data.mvcr.gov.cz
slovnik.gov.cz
voda.gov.cz
*.gov.cz
geoportal.gov.cz
xn--slovnk-7va.gov.cz
data.kraj-jihocesky.gov.cz
testrs.gov.cz
rpp-ais-test.egon.gov.cz
twist-gp.kraj-jihocesky.gov.cz
mids.gov.cz
zony.kraj-jihocesky.gov.cz
www.gov.cz
code.gov.cz
viap1p.ros-iais.egon.gov.cz
vea801.gov.cz
desu.gov.cz
viap1t.ros-iais.egon.gov.cz
biap1t.ros-iais.egon.gov.cz
opendata.gov.cz
ext-mattermost.nic.cz
ria.gov.cz
admin.gov.cz
rrtv.gov.cz
*.szpi.gov.cz
covid.gov.cz
www.gov.cz
vea801.gov.cz
zony.kraj-jihocesky.gov.cz
*.kraj-jihocesky.gov.cz
spektrum.ctu.gov.cz
vyzkum.gov.cz
razr-pub.egon.gov.cz
testrs.gov.cz
ra.gov.cz
mids.gov.cz
archi.gov.cz
zds.kraj-jihocesky.gov.cz
nap.gov.cz
rpp-opendata-test.egon.gov.cz
cms.gov.cz
opendata.gov.cz
rpp-aism.egon.gov.cz
museion.kraj-jihocesky.gov.cz
prod.frs.gov.cz
tsl.gov.cz
isnipi.gov.cz
testrs.gov.cz
vea801.gov.cz
rpp-ais.egon.gov.cz
www.snsu.cz
tsl.gov.cz
uohs.cz
registrace.udh.gov.cz
gov.cz
admin.pruvodcepripojenim.gov.cz
vyzkum.gov.cz
smlouvy.gov.cz
rpp-aism-pub.egon.gov.cz
brvpn.ros.egon.gov.cz
uzsvm.cz
scitani.gov.cz
eru.gov.cz
mids.gov.cz
obcan.portal.gov.cz
upv.gov.cz
voda.gov.cz
code.gov.cz
ares.gov.cz
chciidentitu.gov.cz
biap1t.ros-iais.egon.gov.cz
viap1p.ros-iais.egon.gov.cz
czechtourism.gov.cz
anonymizace.gov.cz
*.kraj-jihocesky.gov.cz
mk.gov.cz
isdv.upv.gov.cz

Certificate

The complete raw certificate details for vea801.gov.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgISBO58nnm/v2oOV7UvlxbUfAhSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjAyMzI3MjFaFw0yMzEwMTgyMzI3MjBaMBgxFjAUBgNVBAMT
DXZlYTgwMS5nb3YuY3owggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ
EGUW3EAU4rz2cRQueWscNmefVD1DBK976iQICmwQJfzwOde624j/wgd15w/dAuux
JThJKUfmiUXuJYdyFl0wtBMPFmqqGaEgn6ApSXattwxaeoy9sFATl/cK4HDL+Hh8
Fs8/uNICngbsgfMKMrRJpVsk5oouJ+xd5bP8a2sw17VmWw1xOtgxZ86pKMAj1mj5
FrcbYakJmIb4B2zV8lfaQBh4NabqAp8JlMsVCJe7Q3hMvOPeIi+4D4zHv5zohTBl
HDpnOhNWsZuRSRDam/iseMhYE+GDYx9uVz/uLMz6rmWq8pQ3IPUbT0EEXGpA5+Td
BQvTOf7T+JZ+wY6a0DX9D/lAMuW5gzkJhZEkkmEnKZLYvwHm3v3ZDvEhBnscPnEh
U8ZLvj9PFwBh+xmXLppOTTPpravKnPl1IGi4WUM1WeoRcfMZBmzAizWpiyh/7J7D
xI2cjCETh7/hkzRYYldE54Q2YgexNTXUH2VOkSl/h60e8Z/TcgU+/Uo96kLlOwBR
orpG+UwQ69Q7TC5kXnJeTlQc9zqp6kvs00R1IGliM9DeqhC37ZeEqCPbCFySqskP
9stGxiWh4RpAp0lhOYSMrtlQIFWkODsuqGxSmPaB1/BUmL1NeJg7bvV1v167oHfq
rGb/4IfpD2rJ5pgY7Wk3VELG2SLgwqpgzIQ6lNSegwIDAQABo4ICajCCAmYwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSj8yP1mn1X4L6eEAxwnjM6uP43VTAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzB0BgNVHREEbTBrghNjb2xsYWItZWRnZS5tdmNyLmN6
ghJjb2xsYWItZWRnZS5wY3IuY3qCEm1lZXRpbmcucG9saWNpZS5jeoINdmVhODAx
Lmdvdi5jeoIOdmVhODAxLm12Y3IuY3qCDXZlYTgwMS5wY3IuY3owEwYDVR0gBAww
CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB6MoxU2LcttiDq
OOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYl12BJbAAAEAwBGMEQCIEVLSM6xy3y6
oiAmBat37JVHhFLx0Jcdbz/0Wrm0GS6fAiASUHhkanwSvaIb7dxq1GzwLVy+kuNZ
eH/Snq1HXZx8sQB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAAB
iXXYEkkAAAQDAEcwRQIhAKCjKV5Awzt25b4pBF4xdla4Y4W7ulNQcimLzZtZkilJ
AiAU8dO7eVxL0l3jTdQvi/0QdrBnfIW6TRTIvvI+xQyDdjANBgkqhkiG9w0BAQsF
AAOCAQEAiIiLuRco/ql8nXMT6B7eC1WlZr8TVHTvNogw1ELjEhj4umo/lCfam3sE
37J2Oeb9PJhUXrYg9drLHLVG0xK2H1lt4ivZkL6Uo9p+RE34OCJ+fDa/lYaBMBL8
D11u+Rq3q5rSqfBdbiCjEG0oJDvo220hjQ4QTR5KDKeJeL9uFN8Ekd4xo1xZfg4s
rTZ2tMY1nVa7ICNEPvezDgOUGxBrqSyXR23WvWT223dKzBVMXw/aSkJz/0WGb2C0
vgyIHmkA8aUH8g9ZKnPcA8Om8lLA7rTPJNUlyiUYANH8DXkGRzs4AWJq85lSNm0k
P6dPgjN8GS+qsmJi0BNw13v8pp14Cw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429601994177968699894604553624146358831186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 23:27:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 23:27:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vea801.gov.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820269728278407968458690260289378600605071722713662282770676050434773213022814700900894484463146335283442450279832346789880111746358006168955787070715963216838169937183558669993317545406137918367409947749297159068605864442911388115285369078754241553419228620559187291283581047818395849522557985618636195075868284209279077630211524860310349705057445655617368975003828130850640995717697498383211005643185432719535851649952217886897930665678451802338812223204163584111773222144568744645393053674980514109139206420419458698615867767495957832658507637402506699752174217968282252349080997894017153662343045129582188180332807357760555719141273637755253001846057515101778892849511308641668439021936747307068065614681571743869506035154003662752321046686845270808483152941063936519008123714199988366158609168901632006626954912316340959782587303766390472665230450729372363645207624675038335425183167001232043819837004061749198976878916595573957532064121782357813576377548802041246948152838012273195407690203017755415653940581203103587737138821238234426662669925204602818203360442592513688608060087458392105712734726278469609620890562813105215135061049856465825593774869045395849693611067572586617023016155541487645321588031581712854979769048707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3f323f59a7d57e0be9e100c709e333ab8fe3755
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.mvcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.pcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeting.policie.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vea801.gov.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vea801.mvcr.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vea801.pcr.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018975d8125b00000403004630440220454b48ceb1cb7cbaa2202605ab77ec95478452f1d0971d6f3ff45ab9b4192e9f0220125078646a7c12bda21beddc6ad46cf02d5cbe92e359787fd29ead475d9c7cb1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018975d812490000040300473045022100a0a3295e40c33b76e5be29045e317656b86385bbba535072298bcd9b59922949022014f1d3bb795c4bd25de34dd42f8bfd1076b0677c85ba4d14c8bef23ec50c8376
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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