webmailer.sikla.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0f:72:b2:a0:18:0a:d7:34:8d:9e:cb:a0:f3:af:7b:e6:9b was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmailer.sikla.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:72:b2:a0:18:0a:d7:34:8d:9e:cb:a0:f3:af:7b:e6:9b
Serial Number (int): 266593552766545484002585763021919484634779
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:6d:c3:d3:26:75:d0:31:ef:8d:d9:d7:b4:14:09:d8:6f:e9:4d:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:df:eb:43:54:aa:db:bf:03:a0:dc:db:bb:00:f4:78:a3:cc:19:e8
Fingerprint (sha256): 3f:1a:0c:ef:5e:75:b5:13:70:84:21:54:bf:c8:da:f7:59:70:d7:9f:78:a6:27:12:8b:86:2d:c5:76:5d:72:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webmailer.sikla.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmailer.sikla.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.pkt-systeme.de
autodiscover.sikla.com
autodiscover.sikla.de
autodiscover.sikladrain.com
autodiscover.siklasprinkler.de
autodiscover.value-tec.de
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com

Other certificates including the domain name sikla.com

(limited to 100 certificates)
webmail.sikla.com
www.sikla.com
landingpage.sikla.com
webmailer.sikla.com
blog.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
www.sikla.com
webmail.sikla.com
landingpage.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com

Certificate

The complete raw certificate details for webmailer.sikla.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISAw9ysqAYCtc0jZ7LoPOve+abMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MDcyMjQ1NTFaFw0yMzA4MDUyMjQ1NTBaMB4xHDAaBgNVBAMT
E3dlYm1haWxlci5zaWtsYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDyxXZ1LVAkNThe+pPIxvSC/4VShEXqhKfSCW+hxGI4jngmDaHCPxT3jY9c
qOdQGzqvzCWVwg/0Q1UeyvIzTI2nnidMsgogteY72gadHWCwDG7pp1bmLbou/f3h
lgmBtCrTk1wffmhpQ93FCVRIx6f2/Eq9gcWjM1wPnmmyYEfFANpOi6BbbR+TCCjk
oBCF/SJym0AuCEm32AYYmxZTARWNkTQg6OARJ0cKwZ3Ck9ZZDoH1PwxF8mGihORg
kfRlifmumAmW5KR8FKnudkzKDdj+v+yLaHbxmJhAHE/zY3G228/8n653PWcjU7jC
DSSU6i+jNSVLBymWKetVDlH1+uWJAgMBAAGjggMbMIIDFzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFIttw9MmddAx743Z17QUCdhv6U25MB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIHpBgNVHREEgeEwgd6CG2F1dG9kaXNjb3Zlci5wa3Qtc3lzdGVtZS5k
ZYIWYXV0b2Rpc2NvdmVyLnNpa2xhLmNvbYIVYXV0b2Rpc2NvdmVyLnNpa2xhLmRl
ghthdXRvZGlzY292ZXIuc2lrbGFkcmFpbi5jb22CHmF1dG9kaXNjb3Zlci5zaWts
YXNwcmlua2xlci5kZYIZYXV0b2Rpc2NvdmVyLnZhbHVlLXRlYy5kZYIRd2VibWFp
bC5zaWtsYS5jb22CEHdlYm1haWwuc2lrbGEuZGWCE3dlYm1haWxlci5zaWtsYS5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYf4
m3nHAAAEAwBHMEUCIQCkaHaULqC/+sNsuABsj4zctQ3MjG+NnfCGzsR3N8w54gIg
fMu+7Jlkv1+COEyQjb4ez05SRZbir3khuXpYI29FjlsAdwDoPtDaPvUGNTLnVyi8
iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYf4m3nKAAAEAwBIMEYCIQDCbIJQsmA4SQKE
mJXZecgHETli9juZ7Z6zOS2gJ1hKBwIhAJn5gXehddcVx48cxM3yRf7bLwVRJ+2+
1SNLav6LNIGtMA0GCSqGSIb3DQEBCwUAA4IBAQCiWjQgxB1YIKOUoSQUbSmGhLxo
NR0rjzYIPFxxZ+2e1x7ddFR2vnhqjRLaswG3XpR/Ydbf4vg3MT5oKbCy4MVs53OP
qWHj5myyqZox7PslwxqairoNlsIBPXlCLYKsQj7DXWU/vlitbIY6mtoHrg6VKkGR
L+3j0rTbuM+WFVStVJZUdBJVmGFvDmT1+lm2BaIStl1W9TKJUkDbg0wTJl2pst1l
sqOP2P/w0oTBaLa+O/KSProIm4io1Eve0uoxGmv/JpkcjLIfMRUBdSWB39NSE1Aa
VvK3OLsxLPXWmnu5lpzN/WdQzo7JKJ+fLqw/maFBdmOXv4WXR8Kt6/EkgBYF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sV2dS1QJDU4XvqTyMb0
gv+FUoRF6oSn0glvocRiOI54Jg2hwj8U942PXKjnUBs6r8wllcIP9ENVHsryM0yN
p54nTLIKILXmO9oGnR1gsAxu6adW5i26Lv394ZYJgbQq05NcH35oaUPdxQlUSMen
9vxKvYHFozNcD55psmBHxQDaTougW20fkwgo5KAQhf0icptALghJt9gGGJsWUwEV
jZE0IOjgESdHCsGdwpPWWQ6B9T8MRfJhooTkYJH0ZYn5rpgJluSkfBSp7nZMyg3Y
/r/si2h28ZiYQBxP82NxttvP/J+udz1nI1O4wg0klOovozUlSwcplinrVQ5R9frl
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266593552766545484002585763021919484634779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-07 22:45:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 22:45:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmailer.sikla.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30647042300842713692641173823169097280865757871295507810251408392248409729116999694874591588640810108746961125555076375584541332574836578877706801824467423463124622582407699990175747180273690365064896300883852419695514444763075987709676937049947603118931601493849945795299968851458254619938820345277634854847219358984205683556386908617633521414382358995667791020401678886706505877079467135248002417896097226980414661114264247611145673739412388371170857993985735489382302741224930942023626570097166515276054062770988063796010110373206472386527896775337488390018070715098778266639259068546091777566172827233286966928777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b6dc3d32675d031ef8dd9d7b41409d86fe94db9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pkt-systeme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikladrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.siklasprinkler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.value-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sikla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailer.sikla.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187f89b79c70000040300473045022100a46876942ea0bffac36cb8006c8f8cdcb50dcc8c6f8d9df086cec47737cc39e202207ccbbeec9964bf5f82384c908dbe1ecf4e524596e2af7921b97a58236f458e5b007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187f89b79ca0000040300483046022100c26c8250b260384902849895d979c807113962f63b99ed9eb3392da027584a0702210099f98177a175d715c78f1cc4cdf245fedb2f055127edbed5234b6afe8b3481ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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