canibuild.ai
Issued by R3
About this certificate
This digital certificate with serial number 03:74:b4:4b:52:7b:dd:e0:e0:35:dd:7e:62:b9:7a:2b:ff:70 was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=canibuild.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:74:b4:4b:52:7b:dd:e0:e0:35:dd:7e:62:b9:7a:2b:ff:70Serial Number (int): 301049264492586596204867307153947414495088
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ec:37:5a:1e:19:07:5d:b2:6a:1d:3c:91:de:2b:25:1f:b3:f6:b5:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3c:03:3f:0c:bb:92:3d:ad:5b:aa:9c:a4:cb:2b:72:13:14:31:fe:5f
Fingerprint (sha256): 25:c3:c5:cc:95:38:cd:cc:7b:22:fb:09:a9:00:cd:c6:3a:67:90:f8:a8:c8:6f:74:f6:c0:ab:41:99:2c:4e:1c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate canibuild.ai
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canibuild.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
50statesgroup.com
andrea.in
canibuild.ai
caocredit.com
coloradowomanmag.com
curritucknc.com
flyovercarpet.com
grandsolarminimumliving.com
homeschoolweb3.com
iup.apartments
rocketclutch.net
schnauz.com
smartforex.in
www.iamzara.com
www.sweeney-aerospace.net
andrea.in
canibuild.ai
caocredit.com
coloradowomanmag.com
curritucknc.com
flyovercarpet.com
grandsolarminimumliving.com
homeschoolweb3.com
iup.apartments
rocketclutch.net
schnauz.com
smartforex.in
www.iamzara.com
www.sweeney-aerospace.net
Other certificates including the domain name canibuild.ai
(limited to 100 certificates)
kiesza.ca
daddy.vc
kiesza.ca
www.working.dog
canibuild.ai
couples4christ.world
maxler.world
canibuild.ai
kiesza.ca
katalyst.me
usc.mba
zinnia.ltd
usc.mba
registry.bible
grocer.cc
usc.mba
www.canibuild.ai
canibuild.ai
sculpit.moda
equa.life
sculpit.moda
sculpit.moda
sculpit.media
cars101.life
sculpit.moda
playgolf.club
playgolf.club
goldenoldies.ca
goldenoldies.ca
jenksamericatoastmasters.club
or.cosfacts.org
usc.mba
ranchogabriela.org
privateschoolfortworth.org
kiesza.ca
sa-rugby.co.za
usc.mba
zinnia.engineering
usc.mba
usc.mba
kiesza.ca
mfe.me
sculpit.moda
playgolf.club
playgolf.club
sculpit.moda
musicbingo.ca
tri-cap.org
daddy.vc
kiesza.ca
www.working.dog
canibuild.ai
couples4christ.world
maxler.world
canibuild.ai
kiesza.ca
katalyst.me
usc.mba
zinnia.ltd
usc.mba
registry.bible
grocer.cc
usc.mba
www.canibuild.ai
canibuild.ai
sculpit.moda
equa.life
sculpit.moda
sculpit.moda
sculpit.media
cars101.life
sculpit.moda
playgolf.club
playgolf.club
goldenoldies.ca
goldenoldies.ca
jenksamericatoastmasters.club
or.cosfacts.org
usc.mba
ranchogabriela.org
privateschoolfortworth.org
kiesza.ca
sa-rugby.co.za
usc.mba
zinnia.engineering
usc.mba
usc.mba
kiesza.ca
mfe.me
sculpit.moda
playgolf.club
playgolf.club
sculpit.moda
musicbingo.ca
tri-cap.org
Certificate
The complete raw certificate details for canibuild.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISA3S0S1J73eDgNd1+Yrl6K/9wMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDEyMDIzNTVaFw0yNDA1MzAyMDIzNTRaMBcxFTATBgNVBAMT DGNhbmlidWlsZC5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSR HAmwb3VkKreJBd9hZmhuMrF7huZj+xdIAkny16zyBXqi3iOqcukjiYSIjhKyUS4G c5GcukKfQ4pIlZcYbW49asjbU1tKCa6AzpGQ8ScFq6mYAakTPK0X1WctOAlVR53c 39X4de3+oa/E/hVNkMUC8ObZfGHTZ5xOyqLWBf235tCTMrzqqJdt7XCQT/2GEChd on4pREXWLssGVWw5O3Kc97alDgQ25RexniziDzh96FG/e7XC6b8NCiDCOpvg1KZC O7cOwPHGgu4G+chy44jO4ENggZjuDjWURdIiiA+YK5apk6yzhQgUKDVFApA+xO1Q +xEBnN3PynCiITZn5iECAwEAAaOCAxUwggMRMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU7DdaHhkHXbJqHTyR3islH7P2tbMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggEdBgNVHREEggEUMIIBEIIRNTBzdGF0ZXNncm91cC5jb22CCWFuZHJlYS5pboIM Y2FuaWJ1aWxkLmFpgg1jYW9jcmVkaXQuY29tghRjb2xvcmFkb3dvbWFubWFnLmNv bYIPY3Vycml0dWNrbmMuY29tghFmbHlvdmVyY2FycGV0LmNvbYIbZ3JhbmRzb2xh cm1pbmltdW1saXZpbmcuY29tghJob21lc2Nob29sd2ViMy5jb22CDml1cC5hcGFy dG1lbnRzghByb2NrZXRjbHV0Y2gubmV0ggtzY2huYXV6LmNvbYINc21hcnRmb3Jl eC5pboIPd3d3LmlhbXphcmEuY29tghl3d3cuc3dlZW5leS1hZXJvc3BhY2UubmV0 MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGN++b8kAAABAMARjBE AiB+HShJbqo7i51YZFVuL3GMFaUts6zKqSlZ/5JNZ3nOBgIgJDMxrD9DMzaEZdPR 67Pwe9WjLrldDv5STAVb5Ol1TzkAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQAN LXJv4frUFwAAAY375vyZAAAEAwBHMEUCIQCwtHlECXlLRsegoxkEROubqRksrPMU 1ORr6dXi7eczjQIgdLnWFzVI6y00fWpBeQDLx11cB7QLgPrDa5qyUPguVKcwDQYJ KoZIhvcNAQELBQADggEBAEVrQpvrfpISsKiy7FhX+WtZRIWJQvVaszJxe+97xOdj yjjnrk/anTp+CIqY4VUhr65iSLW3/GtAk5/wvZjUawOiesDgCjoRAZ4ot9Yn3nUF CYeahCLu+6zSz/jg8C29aSdBmiPiot9TGfNT5Ht93O+mCbo7DeDapBmdci0rcMIi uc8iKBHtFLzbeXqvo6rd8yMXoJZmatGpcu7RTWT71Xfl/qns0c5aZYf2772PpGK0 d8NJPmjULYnUujB/K0JYL9KQgvZfiE4kmeo81rJwQPBO74E1A814rSfPjZzxSjGQ qZ58bJpCaceEcIiVx750XrsadOUyMPNLMnEUL/EKhsc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJEcCbBvdWQqt4kF32Fm aG4ysXuG5mP7F0gCSfLXrPIFeqLeI6py6SOJhIiOErJRLgZzkZy6Qp9DikiVlxht bj1qyNtTW0oJroDOkZDxJwWrqZgBqRM8rRfVZy04CVVHndzf1fh17f6hr8T+FU2Q xQLw5tl8YdNnnE7KotYF/bfm0JMyvOqol23tcJBP/YYQKF2ifilERdYuywZVbDk7 cpz3tqUOBDblF7GeLOIPOH3oUb97tcLpvw0KIMI6m+DUpkI7tw7A8caC7gb5yHLj iM7gQ2CBmO4ONZRF0iKID5grlqmTrLOFCBQoNUUCkD7E7VD7EQGc3c/KcKIhNmfm IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301049264492586596204867307153947414495088 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 20:23:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 20:23:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canibuild.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22794451066540730500540333809522542609585297443120282307821068344823840359163195677627035142194846228047927233621990107835831668273107031842427639163048439550469282769823293397820337389765631564909386753108409359861069963339106988641553553436290198394032763923249278601283027285682277456955488992832338538518378914435368493736284755426115219043544821194848645925069219993851367075770398724010184050069748561659209955815717135371654896054178884563491651055082331103812601571630746788599944870873564740921056140510844901869677647771588946731438709912814074799568597154388167137462605857969506749492985435702379369981473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec375a1e19075db26a1d3c91de2b251fb3f6b5b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statesgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrea.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caocredit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradowomanmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curritucknc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyovercarpet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandsolarminimumliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolweb3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iup.apartments' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketclutch.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnauz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartforex.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamzara.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweeney-aerospace.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dfbe6fc90000004030046304402207e1d28496eaa3b8b9d5864556e2f718c15a52db3accaa92959ff924d6779ce060220243331ac3f4333368465d3d1ebb3f07bd5a32eb95d0efe524c055be4e9754f390076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dfbe6fc990000040300473045022100b0b4794409794b46c7a0a3190444eb9ba9192cacf314d4e46be9d5e2ede7338d022074b9d6173548eb2d347d6a417900cbc75d5c07b40b80fac36b9ab250f82e54a7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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