mail.ckvt.cz
Issued by RapidSSL SHA256 CA - G2
About this certificate
This digital certificate with serial number 20:7c:d2:3f:9c:f9:4a:9a:14:8e:57:0b:ac:ed:f6:af was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=mail.ckvt.cz
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 20:7c:d2:3f:9c:f9:4a:9a:14:8e:57:0b:ac:ed:f6:afSerial Number (int): 43183405021547668166915314915526702767
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12
Fingerprint (sha1): f8:88:5f:00:60:e6:7e:67:ac:26:a4:92:da:13:83:f2:7f:26:06:2f
Fingerprint (sha256): 20:85:d3:2d:4b:2a:b0:58:66:a1:95:4a:54:c8:a2:c3:56:db:83:e2:5d:77:ee:5a:85:65:cd:3a:17:43:05:5c
Issuing Certificate URL: http://gs.symcb.com/gs.crt
Revocation information
OCSP Server: http://gs.symcd.comCRL Distribution Point: http://gs.symcb.com/gs.crl
Check the revocation status for certificate mail.ckvt.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ckvt.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.ckvt.cz
Other certificates including the domain name ckvt.cz
(limited to 100 certificates)
exclusive.ckvt.cz
synology.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
mail.ckvt.cz
exclusive.ckvt.cz
istour.ckvt.cz
mail.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
istour.ckvt.cz
istour.ckvt.cz
sni.cloudflaressl.com
istour.ckvt.cz
istour.ckvt.cz
mail.ckvt.cz
mail.ckvt.cz
www.ckvt.cz
synology.ckvt.cz
control.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
mail.ckvt.cz
istour.ckvt.cz
control.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckvt.cz
control.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
file.synology.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
ckvt.cz
ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
mail.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
control.ckvt.cz
synology.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
mail.ckvt.cz
exclusive.ckvt.cz
istour.ckvt.cz
mail.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
istour.ckvt.cz
istour.ckvt.cz
sni.cloudflaressl.com
istour.ckvt.cz
istour.ckvt.cz
mail.ckvt.cz
mail.ckvt.cz
www.ckvt.cz
synology.ckvt.cz
control.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
mail.ckvt.cz
istour.ckvt.cz
control.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckvt.cz
control.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
file.synology.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
ckvt.cz
ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
mail.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
control.ckvt.cz
Certificate
The complete raw certificate details for mail.ckvt.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIQIHzSP5z5SpoUjlcLrO32rzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTYwOTI3MDAwMDAwWhcNMTcxMDI3 MjM1OTU5WjAXMRUwEwYDVQQDDAxtYWlsLmNrdnQuY3owggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC8HRXFdrY9ZRIASzoc1x2zLH+VXz2kWVIG/2rybL93 dtJPk2fLwcaVcwJJvenAGmX2jnGdI649F59xKXCEeGnHnvinj6wCbLXu2r9G6n5H ULBp45SyqJgQLLDeQhMeo/dYml1sGm0r+fG11utS67/jiRDHzfaao7+Q7TfDX6Sa ZKUHskNrFqRvpGC8JctDcjGtD2zlqCJ5h55aHTJ5b9O6utBzwCO42c995K+aAabj zGhKlO0+C+DEzu5Ux9oW05qRNeGD6oMuBK+ESz5SIxAgNJhyQtdAhJZiQgcOjo38 dgaOzmFahQH789wnEA2wqSd4fHvA1EvUFPTP6pI5dS5nAgMBAAGjggJ5MIICdTAX BgNVHREEEDAOggxtYWlsLmNrdnQuY3owCQYDVR0TBAIwADArBgNVHR8EJDAiMCCg HqAchhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNybDBvBgNVHSAEaDBmMGQGBmeB DAECATBaMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVn YWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2Fs MB8GA1UdIwQYMBaAFEz0v+g7vsIk8xtHO7VuSI4Wq68SMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJ MB8GCCsGAQUFBzABhhNodHRwOi8vZ3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo dHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNydDCCAQYGCisGAQQB1nkCBAIEgfcEgfQA 8gB3AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABV2t3+1EAAAQD AEgwRgIhANdVz8D7PiMgR1DIuwJkzf1EmKdZgYjmiY3Cm9EtzWXhAiEAuUApda3S CWN4cNCMjJ8peh32j95eaMz6Cz0dIgGtrf8AdwBo9pj4H2SCvjqM7rkoHUz8cVFd Z5PURNEKZ6y7T0/7xAAAAVdrd/vVAAAEAwBIMEYCIQC2kulIan4XSrLln/FO/+uU FGBZl1+3wc6s83beYivA4wIhAOOSQIj6cvBZPDahuDTvkH+MWUrH9OmeXFwjOeXJ VCWRMA0GCSqGSIb3DQEBCwUAA4IBAQAgC9C721BdII86yJd6916UCo/eiL/hbCNC 0pzN8WGqlD/cGwocLUe10iHj4KtkGbBpDz29KX/w3uyiqDfSruM6d8LPdzS6Gsbz IlVnbxkUk4FVpsLLZqhBnkbuCGicjxg/wx8QGERNsNQMfBp5yYI42z7Qm/a0qqpR DXVQLjZO4kLFRfjvGLOuZ/r5nvTP3KHoz7YjKr6LZ1Eo7HLOb4JkW/dVm09P+XYQ aglVj7Fymb6vir7fJN6DqAVp72WWOj45/JlfAkzT7pDr79WF1aupqh6mO+Ac71T9 hhGBCvy913a+9A8haH92n9zO7z/6gTYZoexWg9LrdvZWEqBzk9gb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB0VxXa2PWUSAEs6HNcd syx/lV89pFlSBv9q8my/d3bST5Nny8HGlXMCSb3pwBpl9o5xnSOuPRefcSlwhHhp x574p4+sAmy17tq/Rup+R1CwaeOUsqiYECyw3kITHqP3WJpdbBptK/nxtdbrUuu/ 44kQx832mqO/kO03w1+kmmSlB7JDaxakb6RgvCXLQ3IxrQ9s5agieYeeWh0yeW/T urrQc8AjuNnPfeSvmgGm48xoSpTtPgvgxM7uVMfaFtOakTXhg+qDLgSvhEs+UiMQ IDSYckLXQISWYkIHDo6N/HYGjs5hWoUB+/PcJxANsKkneHx7wNRL1BT0z+qSOXUu ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 43183405021547668166915314915526702767 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.ckvt.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23747143703514359746124802764852791698791943652193403724030665722933089050899621495930525009110821345680747535324568117436492943576569985890080662604989998847748027913348480278810519381117374068640967830039478074505701320786777301198976156110310242534592585371968150181267067363930302787243595527383576108608346773621277962089969607574731492027613765159883080322056577040890737563237576464341604007831471643787183715588610900073918661067966191416592095095471637324475730820111028968086266779908708795301312872788923202339049103181198340029541881029205448698577038911478655027034270513476102068154969776538511689985639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ckvt.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001576b77fb510000040300483046022100d755cfc0fb3e23204750c8bb0264cdfd4498a7598188e6898dc29bd12dcd65e1022100b9402975add209637870d08c8c9f297a1df68fde5e68ccfa0b3d1d2201adadff00770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001576b77fbd50000040300483046022100b692e9486a7e174ab2e59ff14effeb94146059975fb7c1ceacf376de622bc0e3022100e3924088fa72f0593c36a1b834ef907f8c594ac7f4e99e5c5c2339e5c9542591 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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