ce-mandskab.dk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e7:66:e4:cf:d0:c8:6f:38:87:47:db:c8:44:c5:c4:14:38 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ce-mandskab.dk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e7:66:e4:cf:d0:c8:6f:38:87:47:db:c8:44:c5:c4:14:38Serial Number (int): 340078853868271609578187743754814822290488
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8a:dd:cd:c7:89:d3:f6:11:46:d3:c9:52:f3:6c:b3:18:05:e1:19:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7f:26:ee:d4:84:eb:3e:cb:98:9f:29:1f:ec:f3:d1:b9:45:56:29:85
Fingerprint (sha256): 41:e6:44:54:3f:23:84:c6:b1:0a:9e:55:2f:4a:b1:51:f3:c1:92:c6:b3:ab:38:8e:a8:83:33:08:29:52:90:13
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ce-mandskab.dk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ce-mandskab.dk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ce-mandskab.dk
www.ce-mandskab.dk
www.ce-mandskab.dk
Other certificates including the domain name ce-mandskab.dk
(limited to 100 certificates)
Certificate
The complete raw certificate details for ce-mandskab.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgISA+dm5M/QyG84h0fbyETFxBQ4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MjEwOTMxNDNaFw0x ODA5MTkwOTMxNDNaMBkxFzAVBgNVBAMTDmNlLW1hbmRza2FiLmRrMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzyiAhKcU0LutyZcn6bVT7Ir2TL8NTovc GYrvG4isrfGODtbmnl/rQona4AjSQWTZgejM03aPNFNF1qe1edtQy4m0Miv9ZW4u 6vOEXYGjEQnbUWXfQCW/joL3y8ra+6CX4EwSyKlrUz0kUly0Ik/UcGJIFWHaboUh cWVXMusFouUfmMbMmRW1M1vHBFLE3SQkT6Njyl6zs+m3SgEr39d4WJiefv0YQfKh AaRRurjGKqbIdx6DMnmWsaNamxhKmdr3f9IQMonGgdfqAsXyUh0KzH2+aNBoM5fb oa+fxm/wCHa4TMp2/jm8wHOLILWcJ/rHn+knx4SZlJl1/bn0u7DrsaDEScQGgN3/ I1tuplwSfp3+xSKLI56Jrr9Ll+gTOtOtJL0QHAgtLoOsSVCLOKPHz2i4kOzxgUx+ ygbocMdk5vDHlP5XTRgfs5c4EifRF8u550x8F/DY7eeLvQaIw6J2TKm1D9ypHHjQ vZ01y2BBb+qRtSbalOpDC0K8unYAUogb4IvRNJzepiswUXs68qflm1aSMuzRC5M5 xYvQRXx/tgf1q0to5XhQx1VkQkXI+cn6UltzDZ3hIj3QjuBe+KzF0i+SahSIvNgt R2+cICJAp/d9us1OG9QZtrhhMUfUr0gxxVZDdOHIVkH1NTFDsTxU2QmicNKqYTvH RBO364FNEgcCAwEAAaOCAyowggMmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUit3N x4nT9hFG08lS82yzGAXhGf0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5jZS1tYW5kc2thYi5ka4IS d3d3LmNlLW1hbmRza2FiLmRrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAA AWQh5l8CAAAEAwBHMEUCIB7GPLJ5wnj1rVyIu4WJSqmXvHWHp4PgGkg3xhmz1sUx AiEA38Kuwzxp2fjao0hLLVNfnYI3hsWwuRUptgUsf3Lt/Q8AdgApPFGWVMg5Zbqq UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWQh5l7lAAAEAwBHMEUCIQC1CVSwN1mj 7DP6/Zrf6q7TK9wp3QX+xn//HOqSHI31JQIgCkG5qeZ5YqOt+QEm81L9bkdtjQTd 2tvQoH2amkzy3nswDQYJKoZIhvcNAQELBQADggEBAHfdzqoKUOcwb5rNmCkTAcu9 nJlaQEMgVhLupUxxoRnI2B+9lVHkZIzYchuiqBOC0tyWbl2cdDc1cZ65u9oNZM24 t/RyUOXSea/CFjs6BwFcQUCFSJFmAJoABU49FbVqkiTFPlmDk1lHGEJfGnOh7DCl sBFvCzTb3SxbSIXUJDEh0a4h+BQdh9AqvJ3MGW2wYDv6l9N53TdCeXq/D3kfMXPX EEk9dCPOjXE+KTJ2wnweQp80Dq7qvrIAzOD4EWqPoYG4lX3Rm2j3kBYDLwjou68K ZhoffAI3vYpRau2gDg7osA7T3+JFK2CkKwOBPhe4Bb7BlIHSiiF7SjO8y6u/n+I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzyiAhKcU0LutyZcn6bVT 7Ir2TL8NTovcGYrvG4isrfGODtbmnl/rQona4AjSQWTZgejM03aPNFNF1qe1edtQ y4m0Miv9ZW4u6vOEXYGjEQnbUWXfQCW/joL3y8ra+6CX4EwSyKlrUz0kUly0Ik/U cGJIFWHaboUhcWVXMusFouUfmMbMmRW1M1vHBFLE3SQkT6Njyl6zs+m3SgEr39d4 WJiefv0YQfKhAaRRurjGKqbIdx6DMnmWsaNamxhKmdr3f9IQMonGgdfqAsXyUh0K zH2+aNBoM5fboa+fxm/wCHa4TMp2/jm8wHOLILWcJ/rHn+knx4SZlJl1/bn0u7Dr saDEScQGgN3/I1tuplwSfp3+xSKLI56Jrr9Ll+gTOtOtJL0QHAgtLoOsSVCLOKPH z2i4kOzxgUx+ygbocMdk5vDHlP5XTRgfs5c4EifRF8u550x8F/DY7eeLvQaIw6J2 TKm1D9ypHHjQvZ01y2BBb+qRtSbalOpDC0K8unYAUogb4IvRNJzepiswUXs68qfl m1aSMuzRC5M5xYvQRXx/tgf1q0to5XhQx1VkQkXI+cn6UltzDZ3hIj3QjuBe+KzF 0i+SahSIvNgtR2+cICJAp/d9us1OG9QZtrhhMUfUr0gxxVZDdOHIVkH1NTFDsTxU 2QmicNKqYTvHRBO364FNEgcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340078853868271609578187743754814822290488 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 09:31:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 09:31:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ce-mandskab.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845131766777196746683841779537366553056918143455926654087375511941072261686099238883916441842019578954179935332533460772021089609736740971296612139826867444484360385048579715030218871898482144032427600924038833295474451170523604038435475509318610709656306892680834092051050223862852137820103509953807671976247844545355940500175890342742002717420832254562535418702454497013185352323350066391506130223392030152565103874070000869490859893940988726988452122573998175196593815987743828108923481563624848330046526765898197511744742137531057031749195247964881138287508934631941249696912888150187199988231112655909399721866116316636906901351448664956662242665885919506717615506000032667374216902894666857322820467020501156342913951979788077229900894364902981357520624349124344714565951907992789891777711439649918481069944930853123690110612266506595292496947100439089167005398176528769459907915514626052437829391790427093242415560152869972724975693807749390434001882464656128159685326388268309924609629471503153778611147830844984248576155801193402366392163329204333298907577765405746738055771151523363888458016177440051643723520251499136001166366588475649114092874638033799734431347789733797000983972085295678363462814758342605601054581920263 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8addcdc789d3f61146d3c952f36cb31805e119fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ce-mandskab.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ce-mandskab.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016421e65f02000004030047304502201ec63cb279c278f5ad5c88bb85894aa997bc7587a783e01a4837c619b3d6c531022100dfc2aec33c69d9f8daa3484b2d535f9d823786c5b0b91529b6052c7f72edfd0f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016421e65ee50000040300473045022100b50954b03759a3ec33fafd9adfeaaed32bdc29dd05fec67fff1cea921c8df52502200a41b9a9e67962a3adf90126f352fd6e476d8d04dddadbd0a07d9a9a4cf2de7b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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