datalaft.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b6:3c:10:8b:a5:92:4b:9f:e4:68:7c:6e:de:70:90:77:ef was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=datalaft.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b6:3c:10:8b:a5:92:4b:9f:e4:68:7c:6e:de:70:90:77:efSerial Number (int): 410460374095521476404821911022753226455023
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b1:10:4e:c9:42:09:42:d0:80:3a:31:25:40:ef:9c:41:28:4b:16:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 99:ca:84:c6:4c:e2:16:1c:71:55:ab:0f:e7:4d:e0:9a:eb:f1:01:f5
Fingerprint (sha256): 17:23:69:ac:64:bf:2b:45:e1:b7:41:1a:60:c7:35:55:df:55:2d:26:99:04:78:dd:2b:e7:57:20:9f:c5:06:2a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate datalaft.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for datalaft.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
datalaft.com
www.datalaft.com
www.datalaft.com
Other certificates including the domain name datalaft.com
(limited to 100 certificates)
*.datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
*.datalaft.com
datalaft.com
mkt.sicoobcressem.com.br
datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
datalaft.com
datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
servidor1.datalaft.com
www.datalaft.com
*.datalaft.com
datalaft.com
mkt.sicoobcressem.com.br
datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
mkt.datalaft.com
firmas.datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
mail.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
firmas.datalaft.com
servidor1.datalaft.com
datalaft.com
datalaft.com
*.datalaft.com
mkt.datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
*.datalaft.com
datalaft.com
mkt.sicoobcressem.com.br
datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
datalaft.com
datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
servidor1.datalaft.com
www.datalaft.com
*.datalaft.com
datalaft.com
mkt.sicoobcressem.com.br
datalaft.com
*.datalaft.com
*.datalaft.com
*.datalaft.com
mkt.datalaft.com
firmas.datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
mail.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
datalaft.com
firmas.datalaft.com
servidor1.datalaft.com
datalaft.com
datalaft.com
*.datalaft.com
mkt.datalaft.com
*.datalaft.com
datalaft.com
*.datalaft.com
datalaft.com
Certificate
The complete raw certificate details for datalaft.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISBLY8EIulkkuf5Gh8bt5wkHfvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTUwOTEzNTFaFw0x ODEyMTQwOTEzNTFaMBcxFTATBgNVBAMTDGRhdGFsYWZ0LmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAL4tPvjz7C/XCzgufYcg/W/T2FccF3Ca1fMC tD3+CiscE1OoHBIRLnamV5zV4K47B7ewXscjSkdNYlzC1JvXDtPzdIKxH2U7L2dU OL78FQ8Q+rO1lWutZMqEBxZu9+xAHYdaUBbyOzfOvJb2YWkxxs51ZT5IeD4ffc1y uJ/wyNGOcOu7kA7Q5lNZZc+UBNf/ucnapMJO7h+oN735kxdb4wNnkYwGcENhGlNV 5dn8bqP6yA4mn3pBd4KRBH13rfqk6n6HOyXgS+a/dET0cq1XBSbxf2gFBq6gphKN tAD7E/MOWtVby0AESXNXmenimez2pQpo7Gz1o18lTpGOPbmFmLsCAwEAAaOCAyYw ggMiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUsRBOyUIJQtCAOjElQO+cQShLFgsw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzApBgNVHREEIjAgggxkYXRhbGFmdC5jb22CEHd3dy5kYXRhbGFmdC5jb20wgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ACk8UZZUyDll uqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZdy461gAAAQDAEcwRQIhAOuq+Y6w pAbVJmrjVaR8d0y6nY5VeTuL3WeVaEGdr5NeAiAHySd06DgXT0JKasiDxcvVluaP BtZUS+XyOelWjFTDPgB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT AAABZdy465IAAAQDAEcwRQIhAJWOmX0eplzMpa8pOIhvT2derLEeCgDq96Qn46uu gaTHAiB0Hc8oZWkz6ygqiBHRAGYgVcCuQ/jjhu+GNqfKEtcbSzANBgkqhkiG9w0B AQsFAAOCAQEAAG20MTPcMsCvIFwV+4jo1lzhlOsqh5BP72qJDL/gI3t7dan1uTBZ NpOvAilB7PgzUJ0mqXgvj9nggFqj4ooIwtA/bmw+jgVNXe802cFGbu7C2zcDvEkj FRFkyhrBLIy9HMkj6gu6sD8bN6g7All0VS14yNQGnwWEwNAspvY2ILuXcVAHP+NS TV7eZU4TuxTQLQNwbAAwc+k+9+tQN1/m55rE5kJnpJkPg4oJ2THaC2JHt3K5SjTw Fxc1BR3zObYpBdJHvZSEnCpkdKLmi9HaJKR9ue5wEyR/xdXLz2I0eOnULDyQpOI4 lrra2KKv0G5r/A1sBzoZLyJ9iHDNPfks+Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi0++PPsL9cLOC59hyD9 b9PYVxwXcJrV8wK0Pf4KKxwTU6gcEhEudqZXnNXgrjsHt7BexyNKR01iXMLUm9cO 0/N0grEfZTsvZ1Q4vvwVDxD6s7WVa61kyoQHFm737EAdh1pQFvI7N868lvZhaTHG znVlPkh4Ph99zXK4n/DI0Y5w67uQDtDmU1llz5QE1/+5ydqkwk7uH6g3vfmTF1vj A2eRjAZwQ2EaU1Xl2fxuo/rIDiafekF3gpEEfXet+qTqfoc7JeBL5r90RPRyrVcF JvF/aAUGrqCmEo20APsT8w5a1VvLQARJc1eZ6eKZ7PalCmjsbPWjXyVOkY49uYWY uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 410460374095521476404821911022753226455023 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-15 09:13:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 09:13:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datalaft.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24007589570921273728058302715476415431738876873918197991060162781808279486324961920539844652806874022323314334991565047448207888085065880429279132015922900252971401279450555383772649047295521589102417040131080371300273362439368702945983198036853192705586247808938907918946689325180382433191473542250534945128746197036516277502426574586380645498515467852856078540454655271381282848299471356509120344525378429600362837052791765894141829638070457673958441317368521664821797130236832331336576072357001247620973063299959943987124551863331377734868616125796712618078391225832991763142957731324043988597709603844173722917051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1104ec9420942d0803a312540ef9c41284b160b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datalaft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datalaft.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165dcb8eb580000040300473045022100ebaaf98eb0a406d5266ae355a47c774cba9d8e55793b8bdd679568419daf935e022007c92774e838174f424a6ac883c5cbd596e68f06d6544be5f239e9568c54c33e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165dcb8eb920000040300473045022100958e997d1ea65ccca5af2938886f4f675eacb11e0a00eaf7a427e3abae81a4c70220741dcf28656933eb282a8811d100662055c0ae43f8e386ef8636a7ca12d71b4b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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