sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:2f:10:94:6d:72:72:fb:33:2a:90:a2:f7:e5:b3:79:a5:ac was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:10:94:6d:72:72:fb:33:2a:90:a2:f7:e5:b3:79:a5:ac
Serial Number (int): 277352167368282711828890231831485505709484
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:56:0a:a7:15:06:7e:e8:31:d3:2f:59:5c:65:55:49:2c:d5:35:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:f9:0c:aa:79:bc:01:d3:27:af:f4:13:b0:84:49:4b:36:dc:03:91
Fingerprint (sha256): 23:a6:a7:1a:87:85:f3:09:0c:68:4b:a6:be:b1:bc:45:65:e0:e0:88:8e:89:f7:d0:59:c3:30:5d:b8:e5:7c:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
actc.org.nz
aucklandmarist.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
bushmultisport.org.nz
canamju.org
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
hastings-central.school.nz
heet.net.nz
lucknow.school.nz
maristfc.co.nz
mchockey.co.nz
melrosetargetshooting.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northharbourtag.co.nz
nzpca.org
nztua.com
parkvale.school.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sporty.co.nz
stheliersbowlingclub.co.nz
suburbsrugby.co.nz
tabletennis.org.nz
taierirugby.co.nz
technicalharriers.co.nz
terracechb.school.nz
timarusquashclub.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
volleyballbop.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
wmsc.org.nz
wops.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHqoB+qV+HxgSYQ25LEW
5B6BgZ9wryq8hbH4TijoJX7+d+oUoMkfQfG7fuju2wMvbIf3mCN3g80tbSZjLD+j
dd7PghN6xR3lBkYdOEc5a06l1ZM0AG7BkXcX3mb7v16DVIM/gLSmM8iUapV0cN7m
83l/orsjKSQnWMcXKU0ohpZM1XXNrFccYRKb09D+5s5ADpxtEYiF0DWlxDXP00Df
vG+v7c36QEcmDOpbB6Zdxg/x0lsacpndiVQGgExzeHsBkfWRfcaffH3YYb3CiATs
rZ+PdIuXcF0yhXcZFf5uCFMUbLb3kVBTcybQta5bHAxDYFwvbzxtY6Y8Kg9pqbiq
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277352167368282711828890231831485505709484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 00:44:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:44:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22278425784738481029285096777144310391438378324896291868704424263858055947171388515408512751236615245804278551447771510603024689433513933060963209299981775593506727412708467728902304490094074076902293267814997545141776680836834574834549590948897154250273444696168694122562220220612859365870450487248144554230645952033274816968816684540552409407372797345510536767207291018589662500755937139778935390131634476555986942943305423102317270159223037922485290793440958984544676844130649286506076671824118787146619446914133434053026635288527095311596685875927796496174488956682543625921309819481177229505638941105797832682021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73560aa715067ee831d32f595c6555492cd535ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018947c5d12300000403004630440220312ce0a46ee5903d4aa29fe231bd7a85fa04f2b494a389bb841c9d37cac0f8b2022002cac4c3ef5a3b534d6a788ca49ac52ef7a529565f6e9b9fa0d51c3f979b71a7007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018947c5d162000004030046304402202d915d45eb424df6a5f14d8f3e70276767992bfad230308de961ede6efd3d59302205e648e2ea3c5a22ea669d424a17b429f1633a57324f7a72a79a06d0855e6b369
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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