ajaxlibrary.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a6:96:5d:fb:45:fd:ae:10:9e:dd:2d:69:8c:80:d6:84:59 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ajaxlibrary.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a6:96:5d:fb:45:fd:ae:10:9e:dd:2d:69:8c:80:d6:84:59Serial Number (int): 318023602883562169863816223489319497008217
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 96:cf:f5:7c:c0:6a:eb:1c:9a:9d:b3:d0:d4:81:9e:82:bd:b5:09:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 30:3f:e1:5b:f7:a0:6c:2f:dc:e4:20:7d:ce:ab:9d:fb:00:5d:c6:45
Fingerprint (sha256): 36:c2:6e:5a:51:2d:20:47:a2:c7:8b:f9:b2:33:87:84:80:fe:ae:67:23:4b:cd:15:0f:ea:1b:63:55:1c:9c:9a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ajaxlibrary.ca
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ajaxlibrary.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ajaxlibrary.ca
autodiscover.ajaxlibrary.ca
cpanel.ajaxlibrary.ca
mail.ajaxlibrary.ca
webdisk.ajaxlibrary.ca
webmail.ajaxlibrary.ca
www.ajaxlibrary.ca
autodiscover.ajaxlibrary.ca
cpanel.ajaxlibrary.ca
mail.ajaxlibrary.ca
webdisk.ajaxlibrary.ca
webmail.ajaxlibrary.ca
www.ajaxlibrary.ca
Other certificates including the domain name ajaxlibrary.ca
(limited to 100 certificates)
ajaxlibrary.ca
staff.ajaxlibrary.ca
www.catalogue.ajaxlibrary.ca
www.catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxon.bywatersolutions.com
ajaxlibrary.ca
ajaxlibrary.ca
catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
www.catalogue.ajaxlibrary.ca
catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
cpcontacts.ajaxlibrary.ca
cpcontacts.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
staff.ajaxlibrary.ca
www.catalogue.ajaxlibrary.ca
www.catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxon.bywatersolutions.com
ajaxlibrary.ca
ajaxlibrary.ca
catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
www.catalogue.ajaxlibrary.ca
catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
catalogue.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
cpcontacts.ajaxlibrary.ca
cpcontacts.ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
ajaxlibrary.ca
Certificate
The complete raw certificate details for ajaxlibrary.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISA6aWXftF/a4Qnt0taYyA1oRZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTkwNTI5MDdaFw0y MDA1MTkwNTI5MDdaMBkxFzAVBgNVBAMTDmFqYXhsaWJyYXJ5LmNhMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8lk9prWBrahAiAmLAPTPedDFhlrkwqb ABLITLjNWHR2+xiqaHQFyGdCB/qKHkwzlCBpwGLAim6CDwMsku0Bx1enb3JqBnBN vlxXYGXmE5qBegKBLlVsjx3SLJJa9W6m7rlz5c1PAdiGq4h7SSqmAv4Fkql2O6uQ 2VPmYVOy6NIV3iCcL1JZgr5GeaP3/IDqbH3dqxIZTXBSHEjHbr344D1vVc0aOsK0 fZ4nr0FIeySURRkvJMbHELsPkF0+5NYL8nw8WGkH2gst2GWoklbLykb8wuGET0FW whfaA6mkyY3XIvpo59oxmebAiD8h7olZ0QWh1/IGcbmom3C0Ai1+jwIDAQABo4IC 8zCCAu8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSWz/V8wGrrHJqds9DUgZ6CvbUJ yTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIGoBgNVHREEgaAwgZ2CDmFqYXhsaWJyYXJ5LmNhghthdXRvZGlzY292ZXIu YWpheGxpYnJhcnkuY2GCFWNwYW5lbC5hamF4bGlicmFyeS5jYYITbWFpbC5hamF4 bGlicmFyeS5jYYIWd2ViZGlzay5hamF4bGlicmFyeS5jYYIWd2VibWFpbC5hamF4 bGlicmFyeS5jYYISd3d3LmFqYXhsaWJyYXJ5LmNhMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAXqdz+d9WwOe1 Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwXCLENQAABAMARjBEAiB1l8Ffku/o OBAZFIzMd59W9l/YwasXdduDYBKFprOB6AIgZkLyEhWvsEiqKiC4Gyw8q9jO8fKw UbQNC0u7oEPwVGsAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAA AXBcIsQgAAAEAwBIMEYCIQDQFNDVB1LkspBSuVrgtpnI9yuj991/wffrBGY4N4W4 eQIhAMPq9pLdPnls65iks+M75Xageaf8G8RpZLhTC6q10iuvMA0GCSqGSIb3DQEB CwUAA4IBAQAyc1cGa2ga7Q+8s4we2FlAVBhvi8HkYzJlT7lU0mULCWua+vcrNRNZ O3k5suzUi5HNgcq/0yyEzY1mbrzX7v6D7mdkHIKTfYuK+i4pplb2x2ubZUtBFP9J kpEGYmPl6Y6JkhLJS+ibZvV6QBjSpz0cbTbWhVFANz7moMoabtBrDzrXm4tLs+BI wgP7fua7TZqgPy1MHRlW7ePWIE2paIs9qs/Y1/y8Q1qLToQtHfDzQCYm1VUkIPYE Pf5vLlR7970Jl5MVxQDKQM+U9KpDUHRgOScm5vbnLCejXhnToUGsnSAd3VuKTi7u 2IFkaeHyK8oIeQfwyE/x//G+MXqndD5Z -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8lk9prWBrahAiAmLAPT PedDFhlrkwqbABLITLjNWHR2+xiqaHQFyGdCB/qKHkwzlCBpwGLAim6CDwMsku0B x1enb3JqBnBNvlxXYGXmE5qBegKBLlVsjx3SLJJa9W6m7rlz5c1PAdiGq4h7SSqm Av4Fkql2O6uQ2VPmYVOy6NIV3iCcL1JZgr5GeaP3/IDqbH3dqxIZTXBSHEjHbr34 4D1vVc0aOsK0fZ4nr0FIeySURRkvJMbHELsPkF0+5NYL8nw8WGkH2gst2GWoklbL ykb8wuGET0FWwhfaA6mkyY3XIvpo59oxmebAiD8h7olZ0QWh1/IGcbmom3C0Ai1+ jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318023602883562169863816223489319497008217 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 05:29:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 05:29:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ajaxlibrary.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23200921082839680603684532955492363481343319368176990316127152260822929550328086116113931097620576673897908693176126185356341165198245959125219477305476114892896860786579008964643080464814811610447331757319189012936098270170026176612100516071806940514598344539010160683388801323919892684807437258557383629604644435191040774328494694404761651169192012484068515712587997463840235189781965230829318500109022273908208416396651324632662524412857941549585766346846207253931339942645765114938316328003829548309497801823906936913197751783436176266529086410697152551843277941167787307031288039517808475308371028018894954397327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 96cff57cc06aeb1c9a9db3d0d4819e82bdb509c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajaxlibrary.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ajaxlibrary.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ajaxlibrary.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ajaxlibrary.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ajaxlibrary.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ajaxlibrary.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajaxlibrary.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001705c22c435000004030046304402207597c15f92efe8381019148ccc779f56f65fd8c1ab1775db83601285a6b381e802206642f21215afb048aa2a20b81b2c3cabd8cef1f2b051b40d0b4bbba043f0546b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705c22c4200000040300483046022100d014d0d50752e4b29052b95ae0b699c8f72ba3f7dd7fc1f7eb0466383785b879022100c3eaf692dd3e796ceb98a4b3e33be576a079a7fc1bc46964b8530baab5d22baf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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