*.erxinfo.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:02:aa:cc:14:ed:61:2c:5d:7e:b1:d1:c1:04:f9:22:16:55 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.erxinfo.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:02:aa:cc:14:ed:61:2c:5d:7e:b1:d1:c1:04:f9:22:16:55Serial Number (int): 262244450941420533939148291042731633022549
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 66:ec:24:5f:08:7e:02:37:d3:a7:43:5c:10:95:a0:ec:90:b1:58:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d9:96:e5:41:e3:4c:87:9e:5b:ac:20:9d:08:59:fe:87:b0:df:5a:6c
Fingerprint (sha256): 22:f8:76:6c:21:a9:82:18:a7:d4:0d:2e:87:61:9d:79:d6:89:b0:b2:c3:5a:5d:66:0a:3c:3d:be:d8:14:e3:1f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate *.erxinfo.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.erxinfo.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.creationslimaongles.ca
*.erxinfo.ca
*.erxinfo.ca
Other certificates including the domain name erxinfo.ca
(limited to 100 certificates)
*.erxinfo.ca
home-genie-cloud.erxinfo.ca
artisedastextiles.com
hg.erxinfo.ca
*.erxinfo.ca
www.piiq.app
www.erxinfo.ca
home-genie-cloud.erxinfo.ca
erxinfo.ca
home-genie-cloud.erxinfo.ca
www.vassmarinediveservice.com
chufsd.backpackfordrive.app
www.erxinfo.ca
www.erxinfo.ca
*.erxinfo.ca
erxinfo.ca
dav.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
www.findbond.in
erxinfo.ca
www.erxinfo.ca
flesoj.com
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
erxinfo.ca
*.erxinfo.ca
owncloud.erxinfo.ca
hg.erxinfo.ca
erxinfo.ca
flesoj.com
www.demoiterable.com
www.demoiterable.com
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
ampache.erxinfo.ca
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
procyonforest.com
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
chufsd.backpackfordrive.app
erxinfo.ca
express.kiba-fashion.nl
www.erxinfo.ca
erxinfo.ca
erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
dav.erxinfo.ca
home-genie-cloud.erxinfo.ca
artisedastextiles.com
hg.erxinfo.ca
*.erxinfo.ca
www.piiq.app
www.erxinfo.ca
home-genie-cloud.erxinfo.ca
erxinfo.ca
home-genie-cloud.erxinfo.ca
www.vassmarinediveservice.com
chufsd.backpackfordrive.app
www.erxinfo.ca
www.erxinfo.ca
*.erxinfo.ca
erxinfo.ca
dav.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
www.findbond.in
erxinfo.ca
www.erxinfo.ca
flesoj.com
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
erxinfo.ca
*.erxinfo.ca
owncloud.erxinfo.ca
hg.erxinfo.ca
erxinfo.ca
flesoj.com
www.demoiterable.com
www.demoiterable.com
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
ampache.erxinfo.ca
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
procyonforest.com
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
chufsd.backpackfordrive.app
erxinfo.ca
express.kiba-fashion.nl
www.erxinfo.ca
erxinfo.ca
erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
dav.erxinfo.ca
Certificate
The complete raw certificate details for *.erxinfo.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAwKqzBTtYSxdfrHRwQT5IhZVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMxMzEzNThaFw0y MDA2MDExMzEzNThaMBcxFTATBgNVBAMMDCouZXJ4aW5mby5jYTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOQsK9dUZZ18Q3oGaO3X4ub5ho2b1xHbuSSv +5uW7AM1PU+FJ8xvJe3B82M/gdYfEjaAuKFnatNukL17jW94C45Zdyf3QiSrw5ji Oj7cS2X6nsoJ23zlthDQbF99j+e3hd18ywyw4fMT/cUcPJU5VA1LO+NHgeeF4uvr AO6sS7hY3y0IFznRpdlw3O89vRYuTMZaNs2+jk+6JxNeef8AJKLKL+O6Mrxrsrpq xp2vfx2DbFBRiwKgWuwGsdVGzztxMfYoIncFQJ5/hkOoxhsPud6K6d7G/VD64S4h 9qnZjpqP8wJKg2/QEVPtzaGtUerAVMbMrCnfWqaxbnCskEyIq6cCAwEAAaOCAnsw ggJ3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZuwkXwh+AjfTp0NcEJWg7JCxWMIw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzAxBgNVHREEKjAoghgqLmNyZWF0aW9uc2xpbWFvbmdsZXMuY2GCDCouZXJ4aW5m by5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAAB cKC/B5IAAAQDAEcwRQIgR1oUhGpmKfi+X6JhMXfjpee7sFy5skOHM8c350TVIG0C IQD4MDcy73g0fcopcOl5XBcnGBXzk5iLSiS6dESFjSQuNgB2AG9Tdqwx8DEZ2JkA pFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcKC/B+UAAAQDAEcwRQIgXUnzY6Geo1kp ExqIFz9GC2Al7EyDOWlCxPCBf2hP6y0CIQCrW3ftbIv5eSzTRZpWI6d0gN9vnmQI 79w6OXnA4W2GbzANBgkqhkiG9w0BAQsFAAOCAQEAB7r/o7lFsuX6vpnYp/u1FkHi FpR/tSchWQC5U7cwWIao9zE87ngn0AnRXB27uPE7vdI09Vf5k6UyqZvuYEn1aN4c 2ztm4Al0zRwhJkKl0AVWLqoK6bIHYta8CNiokkEUCnVQhTV0iJGg6fXgbTdK7qEQ HDGtZbWpf2oWag/tYiNp27jkifxCx0q8PTQt59zrfr4owdg6GctyiX4mCdd4OsO1 0EMjbXvaUs0yzGNBhEDFD0zyBT3hwhNKVFfW3qTmDNyQSYjgo4IExXr06MswzhYv S9lYbzvDW5bSKfQy0GYKVbY5XrxC368v6Y8EjHEAt2ZJsKKFJq65zyVFO6iRyA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Cwr11RlnXxDegZo7dfi 5vmGjZvXEdu5JK/7m5bsAzU9T4UnzG8l7cHzYz+B1h8SNoC4oWdq026QvXuNb3gL jll3J/dCJKvDmOI6PtxLZfqeygnbfOW2ENBsX32P57eF3XzLDLDh8xP9xRw8lTlU DUs740eB54Xi6+sA7qxLuFjfLQgXOdGl2XDc7z29Fi5Mxlo2zb6OT7onE155/wAk osov47oyvGuyumrGna9/HYNsUFGLAqBa7Aax1UbPO3Ex9igidwVAnn+GQ6jGGw+5 3orp3sb9UPrhLiH2qdmOmo/zAkqDb9ARU+3Noa1R6sBUxsysKd9aprFucKyQTIir pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262244450941420533939148291042731633022549 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 13:13:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 13:13:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.erxinfo.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28804115189629403617847798845527639405235822020560519693316193308666373624219937062080818213326145791783948963129069139283190173787716838901405617699415858806205867079332185221888659466299647540654239371964161495502693682523943283400482506493321911092917303709161290153160127942578219307064534204188829355759133484859483880590604352405341958266827027998581463125028230947819204018281494473485225394767240033775558460029727620668061891517910854454271071325583691992442401609525228824262913216179787598849853255799507152897122420241848655482124245771156504405266201922847340010649411835555151268120666429792594115996583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66ec245f087e0237d3a7435c1095a0ec90b158c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creationslimaongles.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erxinfo.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a0bf079200000403004730450220475a14846a6629f8be5fa2613177e3a5e7bbb05cb9b2438733c737e744d5206d022100f8303732ef78347dca2970e9795c17271815f393988b4a24ba7444858d242e360076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a0bf07e5000004030047304502205d49f363a19ea35929131a88173f460b6025ec4c83396942c4f0817f684feb2d022100ab5b77ed6c8bf9792cd3459a5623a77480df6f9e6408efdc3a3979c0e16d866f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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