bsakoaks.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:bd:fd:c6:f2:85:43:d3:62:eb:1c:d7:5c:ab:cd:ff:82 was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bsakoaks.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:bd:fd:c6:f2:85:43:d3:62:eb:1c:d7:5c:ab:cd:ff:82
Serial Number (int): 343597450000667028399976733819516851453826
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:6f:1c:f6:28:19:c5:b8:c3:9b:27:93:ed:8c:48:11:a4:26:17:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:12:79:de:a7:a0:57:b8:7c:40:84:fb:9e:0b:ac:60:9e:23:b9:0e
Fingerprint (sha256): 17:4a:3f:b4:91:45:ae:74:b8:da:d5:08:7b:d2:b5:4d:a2:fb:50:fd:5d:a1:37:bf:fb:45:e1:1f:82:81:c6:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bsakoaks.org

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsakoaks.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bancroftsconnect.org
bau.network
bbisalumni.de
beckettconnect.co.uk
benendenconnects.com
beyond-kings.com
beyondbradford.com
beyondbryanston.co.uk
bezalelalumni.com
bgs-alumni.com
bhms-alumni.com
bimm-connect.co.uk
bimmconnect.co.uk
bizcommunique.online
bmcalumniconnect.com
bneiakiva.network
bocconialumniconnect.com
bocconialumniconnecttest.manual.graduway.com
bogazici.network
boltonalumninetwork.com
brightoncollegeconnect.com
brunelalumni.com
bsakoaks.org
www.bancroftsconnect.org
www.bau.network
www.bbisalumni.de
www.beckettconnect.co.uk
www.benendenconnects.com
www.beyond-kings.com
www.beyondbradford.com
www.beyondbryanston.co.uk
www.bezalelalumni.com
www.bgs-alumni.com
www.bhms-alumni.com
www.bimm-connect.co.uk
www.bimmconnect.co.uk
www.bizcommunique.online
www.bmcalumniconnect.com
www.bneiakiva.network
www.bocconialumniconnect.com
www.bogazici.network
www.boltonalumninetwork.com
www.brightoncollegeconnect.com
www.brunelalumni.com
www.bsakoaks.org

Other certificates including the domain name bsakoaks.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for bsakoaks.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi2mbFkJitPJI4TxFCNh
p8T5gOTc5NVo6wQspRTIoaeKyLjaZNzchOEeR8e1ZlkqXDgZOH3KYeitBaXltk5c
MqUb4lzebIdjc89Ts0CqaenCf1hhV+HZ4fBABfUVZmUZkOYLembReEkcah8ZPJ30
GPBsW2/1t+gpmOAqHhPEZhY3isg7Q2INBImuIXH/orIvKMI9UoDszFCEsBPp87aD
NRrCws7ek4nYZcvbMoFmmlvo6mIi2o2ud7N42tqeXNGzNaagaqXKtG2oBV94QQyY
q4CnqfCavtL6tj5nvoTKHW8TTxFns6QBi5tvcX1+r1RDD7HVbxuKnLzJJkaWY4C6
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343597450000667028399976733819516851453826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 06:43:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 06:43:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsakoaks.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22492929182703029412858967499265011577567633867995827366273691152025185719587047434653849984672939956177871296703040054595533723372956558063876345743305031629895447688594829253533703929134881390343983468462129805814859320153650976996372116151167229488294861609303872167782261148063627136764504935177779806378505135592642704230180315747130900705554470553876230061034573013546987040860244343482719633469547747451079066020979567023881875406880788535265904088697216087036254737578111047272730043085878455084856111413570752525956334759521359069105455773954533785874803359698435866588643780536427621249935571980053284698793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c6f1cf62819c5b8c39b2793ed8c4811a4261715
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancroftsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bau.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbisalumni.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckettconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benendenconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyond-kings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbryanston.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezalelalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgs-alumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhms-alumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimm-connect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimmconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcommunique.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmcalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bneiakiva.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocconialumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocconialumniconnecttest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogazici.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltonalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightoncollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunelalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsakoaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bancroftsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bau.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbisalumni.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckettconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benendenconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyond-kings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondbradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondbryanston.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bezalelalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgs-alumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhms-alumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bimm-connect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bimmconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizcommunique.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmcalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bneiakiva.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bocconialumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogazici.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boltonalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightoncollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunelalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsakoaks.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d623944c90000040300473045022100a2d831ddbdfa4771b983e3098fa9846b2ba062a34a66faeef5e244301706e65302200a4456446fbddd265c85be7f5cb453849bcbb971da7198fa370c7578309adefa007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d623944f60000040300473045022100c6bac52cd84114279e8bc2722de3c3663217ff9d12225fd201aa5b2ca4956a3a0220080ba8272f9291c4830d5fc826d0536d71900c038bc372dad016944099ca2d67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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