skr.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:a8:89:b5:cd:47:f9:a8:3a:3f:36:5d:bd:87:32:04:64 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skr.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:a8:89:b5:cd:47:f9:a8:3a:3f:36:5d:bd:87:32:04:64
Serial Number (int): 302054484794214089059081195749292838618212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:ee:00:40:55:1d:57:81:0a:64:0c:84:2e:5d:da:1f:ed:94:36:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:d1:01:d4:47:19:e4:1b:47:b5:e3:96:45:c1:26:2d:34:62:62:34
Fingerprint (sha256): 29:88:f8:fe:f4:11:75:1c:12:d9:76:ca:2b:de:f6:3a:48:ba:24:65:ba:f8:fe:5b:e5:b6:d4:64:a0:41:a0:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skr.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skr.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skr.de
wiki.skr.de
www.skr.de

Other certificates including the domain name skr.de

(limited to 100 certificates)
survey.mobinergy.com
survey.artyplan.com
feedback.zweihorn.org
vragenlijst.teambuildr.nl
survey.thesocialelement.agency
smkynb.skr.de
feedback.zweihorn.org
questionnaire.isabelle-mathieu.com
survey.slttours.co.uk
skr.de
service.skr.de
encuestas.heel.es
vragen.sp.nl
skr.de
survey.epsight.fr
survey.artyplan.com
www.skr.de
ankieta.quantumplanet.pl
skr.de
survey.skr.de
umfrage.samtoa.de
survey.ncauk.org
service.skr.de
rdp.skr.de
smkynb.skr.de
feedback.zweihorn.org
skr.de
umfrage.samtoa.de
service.skr.de
feedback.zweihorn.org
skr.de
survey.skr.de
feedback.zweihorn.org
umfragen.drholldorf.de
owa.skr.de
mail.skr.de
survey.hhm.nl
skr.de
skr.de
surveys.breakthroughcomms.co.uk
ankieta.quantumplanet.pl
survey.skr.de
skr.de
survey.contis.de
survey.accelapps.cz
skr.de
skr.de
survey.gotbit.io
survey.gravestonestories.co.uk
skr.de
encuestas.impargrupo.com
umfragen.advectum.de
survey.slttours.co.uk
feedback.cetas-healthcare.com
clientes.prosinergias.com
info.colegiomontessori.com
feedback.zweihorn.org
umfragen.advectum.de
skr.de
encuestas.mengual.com
mail.skr.de
meet.bastioncraft.com
umfrage.samtoa.de
ankieta.quantumplanet.pl
survey.generation-y.net
survey.diamondpigs.com
survey.avondata.co.uk
ankieta.quantumplanet.pl
survey.gotbit.io
owa.skr.de
survey.swiss-as.com
skr.de
feedback.topinsure.ie
survey.micheledicosmo.com
feedback.cetas-healthcare.com
feedback.zweihorn.org
survey.gravestonestories.co.uk
www.skr.de
survey.koffre.io
skr.de
skr.de
ankieta.quantumplanet.pl
ankieta.quantumplanet.pl
feedback.zweihorn.org
questionnaire.isabelle-mathieu.com
questionnaire.isabelle-mathieu.com
vragen.sp.nl
feedback.zweihorn.org
questionnaire.isabelle-mathieu.com
skr.de
ankieta.quantumplanet.pl
forms.bizzymaid.co.uk
skr.de
skr.de
survey.matrixbooking.com
survey.hrsmartsolutions.co.uk
feedback.cetas-healthcare.com
owa.skr.de
service.skr.de
mail.skr.de

Certificate

The complete raw certificate details for skr.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA3eoibXNR/moOj82Xb2HMgRkMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDgyMTMwMzlaFw0x
OTExMDYyMTMwMzlaMBExDzANBgNVBAMTBnNrci5kZTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBALFs7d+4oeNAHLtiB9A9XtQbNGyxlyen9WhVdIw/AI0T
tw2EUr2krYQ7xAhWMxcQr6RxTfoWDA6UwV3uw6B5Wd5guGTt5TvmS3Nrdz6dng1E
+BW8khwru6HpFg7BN4DuDXZBA/MRQQs4YqFPwWNsR4E7l9hoGRZExUTWK5K0AV/9
99p43dmcog53k6mnWsYgPJNwSMJexDEeG/BqgjC/0IFwS0BEmdYwO8fDvgDxD4UR
XfjRZVtxK02UjaRF5hNOqwtdYpzBCxJpwayk9uBqbI3fL3iDkNSryBZFy7HMSBt3
r0IDiZAlUZibTD/s77WiZVpnuSgd60MH+RRRyJYiN9MjZRA2XgyDd9UjIr0v6bUE
8Wyj7oybXTgWBWQYlH3lay6Xpqope2aPCW7iZxjTAE6AeckRZCY3pFl+/vwSUTDH
MaVZCkJLSybcsumbkLBmB2qLhn3NAlv1Y2WmK1BtYJlisqutyScayb2SX50haLpM
Tl2XEOVdhc+S+mDFInND3HvAJQccdOdzyDxiCb/wPywXtLWpqLnQLSA1XEoJsxZm
vPNfdz0W2BcXJNRr0v8lgGWjZLcLa8w89+uyZwdawr2DLnUHgCNsDP8QKkTzi8i0
gzcG7cY8xzURiC77Ga8oL2HmQ54z5G0Z4/Hdr34DVLq558d/95CXzT60hOKcVzD1
AgMBAAGjggJzMIICbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFB7uAEBVHVeBCmQM
hC5d2h/tlDYzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wKgYDVR0RBCMwIYIGc2tyLmRlggt3aWtpLnNrci5kZYIKd3d3
LnNrci5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB
1nkCBAIEgfQEgfEA7wB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+
AAABbHNbATMAAAQDAEcwRQIhAJeGKfO3YlVQaizO5HTyc+eJ8oj0LHAlFWR3MCLP
DO86AiBVTSV1BUAi+5jb0pGeITjmDZCzQDLfKBcp4cLXfjHE/AB1AGPy283oO8ws
zwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbHNbAVEAAAQDAEYwRAIgbdeOP80F
s1ci8tPKKWweuwMIIzqBp+vv6oefPyiB2MsCICrDtisdw1t/fW6+9wbE1KBcqt/i
dy0aRAzRj5MVwiqiMA0GCSqGSIb3DQEBCwUAA4IBAQAvGX9A4PYjE0FQ/WyT+eYY
HLTaK6xyrYI9bVsxCQNv8xTqoUwGJhv0NwlB+ayL2dwL1hzezPhA1x6B2NlwEEhC
7XnEivHVLqaftKPL/UY7p1UxzQbm0rDvlZLzhma3DF4T3OMAnCEV+dWplSXWfYnz
CJJsmhL4CisXYsswrWHyTy7GuKCmCh0D3agDd665qq8m200r//clRwHDZUc9hTkw
ibAKtf0KQR9CvwOeT4YqpzEnDWWNSV6t3BVeA40yrxtPSh4K5ig1UShTIsbZJNcl
KOURfaef4ZbwxNkGSBIKeQ+4SC6Y845IT1pe5dQ1GBl0GObm9mu3kaY1M7HKD3Od
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302054484794214089059081195749292838618212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 21:30:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 21:30:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skr.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723832907633596829927210638162329248884859224867992264379368087739492449534614798109640739281327974449791633757954708917715892711031843584569029593038527645757081947730959008642947505620237571960837694740689207077899350896572337999391993863291682604012315564892098575985469737128042712852819874458386490090538012634735958857825465275188279211017299033710731157169138066360993315059480200791824396260293474656602269714773750192271567032405765726741552803010401573274232221009940098708248845222113581086508925280869155801621250274823598490333188031826771812768750064293621858015205853260523098170056307550549469888094947324119152831343758169812537494824049064811717440928226817454119389016026476766103846124195118330662125579815379095106585099171358754664610087141364189045860259203716234684460119317938189302662274781145282081204915198029550986439352920376699660815748193921429714438062505230137162745074446964525201845564267701031162933616970586815039586128864907024879914413664264510170033321153563994673657672156394355620490092569305385863347569143905539218645054154889730031207379010787587018642869022705835427242567439000630982801717677690731011175242246778673189542476904143761857882154333333667069390969293700443844720700371189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1eee0040551d57810a640c842e5dda1fed943633
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.skr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skr.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c735b01330000040300473045022100978629f3b76255506a2ccee474f273e789f288f42c70251564773022cf0cef3a0220554d2575054022fb98dbd2919e2138e60d90b34032df281729e1c2d77e31c4fc00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c735b0151000004030046304402206dd78e3fcd05b35722f2d3ca296c1ebb0308233a81a7ebefea879f3f2881d8cb02202ac3b62b1dc35b7f7d6ebef706c4d4a05caadfe2772d1a440cd18f9315c22aa2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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