sli.esquire.com

Issued by R3

About this certificate

This digital certificate with serial number 03:57:21:f8:57:33:0b:e4:24:d8:01:26:e6:6f:46:2d:23:47 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sli.esquire.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:21:f8:57:33:0b:e4:24:d8:01:26:e6:6f:46:2d:23:47
Serial Number (int): 290986577699498157072350478692367364596551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:fb:4b:2d:0c:2d:38:c6:62:5b:17:3e:7c:0e:44:c2:d6:38:85:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:0b:29:16:c2:49:1d:4a:54:60:57:19:0a:09:9c:76:db:8c:9a:3a
Fingerprint (sha256): 2a:9f:d6:28:62:ba:7c:6c:4a:f5:5d:06:5c:9a:78:39:2c:23:16:1c:bd:6e:8b:ee:ac:20:64:9a:49:54:c3:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sli.esquire.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sli.esquire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sli.bestproducts.com
sli.bicycling.com
sli.caranddriver.com
sli.cosmopolitan.com
sli.countryliving.com
sli.delish.com
sli.elle.com
sli.elledecor.com
sli.esquire.com
sli.goodhousekeeping.com
sli.harpersbazaar.com
sli.housebeautiful.com
sli.marieclaire.com
sli.menshealth.com
sli.oprahmag.com
sli.popularmechanics.com
sli.prevention.com
sli.redbookmag.com
sli.roadandtrack.com
sli.runnersworld.com
sli.seventeen.com
sli.townandcountrymag.com
sli.veranda.com
sli.womansday.com
sli.womenshealthmag.com

Other certificates including the domain name esquire.com

(limited to 100 certificates)
*.25ans.jp
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
mentoring.esquire.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-shop.elle.com
mentoring.esquire.com
hearst-prod.actioniq.mr-in.com
mcstaging-shop.elle.com
iscriviti.it.esquire.com
shop.elle.com
*.hearstapps.com
dns-vetting1-mims-pawel.map.fastly.net
link.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
secure.hdmtools.com
mentoring.esquire.com
*.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
*.esquire.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
stage-archive.esquire.com
hearst-hdm.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
sli.esquire.com
cosmopolitan.com
subscribe.hearstmags.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud55.map.fastly.net
subscribe.hearstmags.com
archive.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
link.esquire.com
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
mcstaging-shop.elle.com
actieabonnement.live.hearst.aubergine-it.nl
iscriviti.it.esquire.com
iscriviti.it.esquire.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
link.esquire.com
sli.esquire.com
actieabonnement.live.hearst.aubergine-it.nl
shop.elle.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
abonnement.bicycling.nl
actieabonnement.live.hearst.aubergine-it.nl
dns-vetting1-mims-pawel.map.fastly.net
actieabonnement.live.hearst.aubergine-it.nl
cosmopolitan.com
store.caranddriver.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
iscriviti.it.esquire.com
shop.elle.com
mentoring.esquire.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
dns-vetting1-mims-pawel.map.fastly.net
mcstaging-shop.elle.com
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
*.esquire.com

Certificate

The complete raw certificate details for sli.esquire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPKn/WSlqse4TPoFxMoS
vF6DWQp7LUncpmIHnNZkqw9Yl7ZfgbNPTctpUjz8D1dea7v/VoQD1hhGEm9sof6J
iPj54mPmL9C1xLEa6v4dIVvJJO+AsIttJpzVXA9mBUIbKtEi3Jw1+v+Q3ANi3BV6
G6F4Z1Qb44ioie+4XaMwCPQCzZKHVEcSC2Puda2r49ZrkYgwndcPcRZoUWXiWUzc
ZbA+rzYM5KZrwDsZpD6mxGwl6Du4oTjzWQihhL1EQPnUsRIa3kBH5ZlWVTsJjZh8
/v5cS4wJxC1YiTZwcSQ7qGXOSuTIOhPEt9NqHlXH6dTwLsbQO6Q+7IrngUWwyEnY
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290986577699498157072350478692367364596551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-08 12:54:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-06 12:54:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sli.esquire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21832646691146447895838159204500296477239678787714960468282077245283205554300446972672794376212866893788642778940195024830710126295576664485105716796535597018321191196516638788507939330798324287168083756099419426003579613012140594234875450275716316191746453244972149635224904983558636450170933209902394374177990181052087871550944133057843310600889257050958487891085124194850875830188508561719803789265932338602600918393006581054340937103164508265773449974317251855219044006590105183102100317597459591348676396897376072088911468715498161145687256004194463915552886035818949767003154591774077726624454326659524778907877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58fb4b2d0c2d38c6625b173e7c0e44c2d6388539
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (527 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.marieclaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.oprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.womenshealthmag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000179ebe6eecb0000040300473045022009499670d2dcaf241c172d0bc920439286b6179de3c95137745893b4e9c2c3190221008ee0179e5ac984f9e55e8187ece8eb0464f290e02c5a44b0b1687cb31c77a1ca007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179ebe6eec30000040300473045022100bcc06f4c91429a0edd93d1f732b1fe7151fc3b9971483885037ff41dae1b90a20220662ec1e791553ee6b41884f37d849bca2bcd1704220c798fed251a690654d36d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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