wb.tnm.koumbit.org

Issued by R3

About this certificate

This digital certificate with serial number 04:27:29:bc:fd:eb:54:4d:30:b4:f7:05:c8:39:23:c1:a7:24 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wb.tnm.koumbit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:27:29:bc:fd:eb:54:4d:30:b4:f7:05:c8:39:23:c1:a7:24
Serial Number (int): 361775635686688510732800072392368413845284
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 10:00:fb:81:fa:52:49:40:29:d9:24:d2:0f:55:f8:98:56:ae:6c:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:b2:9f:e3:27:0b:bd:23:32:44:83:d5:67:53:64:8f:80:2f:72:32
Fingerprint (sha256): 42:04:dc:9c:de:fc:cb:ab:1e:8b:ff:98:24:01:91:22:67:51:77:c7:fc:27:b1:3e:0b:22:c5:2c:7f:82:4e:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wb.tnm.koumbit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wb.tnm.koumbit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wb.tnm.koumbit.org

Other certificates including the domain name koumbit.org

(limited to 100 certificates)
nextcloud.cumulus.koumbit.org
gabrielle.koumbit.org
www.vikinge.koumbit.org
www.koumbit.org
www.apbm.koumbit.org
www.shadowrun.koumbit.org
www.assep.koumbit.org
cmac.gwradio.koumbit.org
lmssop.koumbit.org
www.narchive.koumbit.org
www.johnb.koumbit.org
www.gfilion.koumbit.org
www.adte2254.koumbit.org
pplif.koumbit.org
www.assep.koumbit.org
www.koumbit.org
tnm.koumbit.org
nextcloud.cumulus.koumbit.org
www.assep.koumbit.org
mystic.koumbit.org
www.joasia.koumbit.org
wiki.praec.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
gabrielle.koumbit.org
*.koumbit.org
www.koumbit.org
www.gfilion.koumbit.org
www.koumbit.org
gidget.koumbit.org
www.kepo.koumbit.org
confluetest.kwekwe.koumbit.org
www.joasia.koumbit.org
nextcloud.sdcmp.koumbit.org
www.joasia.koumbit.org
www.narchive.koumbit.org
vikinge.koumbit.org
www.assep.koumbit.org
wb.tnm.koumbit.org
rcentres.koumbit.org
www.assep.koumbit.org
www.shadowrun.koumbit.org
www.koumbit.org
www.koumbit.org
wb.tnm.koumbit.org
www.tnm.koumbit.org
www.narchive.koumbit.org
cmac.gwradio.koumbit.org
www.ktrh.koumbit.org
nuage.ecrinum.koumbit.org
nextcloud.sdcmp.koumbit.org
nuage.ecrinum.koumbit.org
www.philou.koumbit.org
70s.haproxy.koumbit.org
narchive.koumbit.org
www.koumbit.org
www.assep.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
www.koumbit.org
https56.nina.koumbit.org
etcgroup.koumbit.org
www.koumbit.org
www.praec.koumbit.org
www.kepo.koumbit.org
rcentres.koumbit.org
ktrh.koumbit.org
www.joasia.koumbit.org
www.assep.koumbit.org
gretchenk.gwradio.koumbit.org
www.koumbit.org
www.enkerli.koumbit.org
*.koumbit.org
shadowrun.koumbit.org
www.koumbit.org
www.mystic.koumbit.org
www.assep.koumbit.org
www.koumbit.org
www.koumbit.org
www.joasia.koumbit.org
enkerli.koumbit.org
cache.haproxy.koumbit.org
www.largot.koumbit.org
ktrh.koumbit.org
www.enkerli.koumbit.org
www.koumbit.org
vikinge.koumbit.org
gidget.koumbit.org
www.joasia.koumbit.org
www.praec.koumbit.org
tnm.koumbit.org
www.sdcmp.koumbit.org
www.koumbit.org
www.koumbit.org
www.koumbit.org
wp.nina.koumbit.org
www.assep.koumbit.org
81s.haproxy.koumbit.org
www.koumbit.org
www.tnm.koumbit.org

Certificate

The complete raw certificate details for wb.tnm.koumbit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgISBCcpvP3rVE0wtPcFyDkjwackMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MDMyMzE2MDJaFw0yMzA4MDEyMzE2MDFaMB0xGzAZBgNVBAMT
EndiLnRubS5rb3VtYml0Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAMEyjA4lcPip6SZIEzzLptPK5Gb92i7MpUGs9pHngZsKAfECiuM2QdNVFhFY
ijwx2PJQXAs7D70B5J9KHRS2rT9AxT2pTqs5plTlYLo67cfVZMwtU3GX214OARW+
N3ALjFkkYWADfj04K/FWTNkqVfDBiwER7NqG0738amvl3kj+mIb8QCJWBZDxUs00
FFVFRQJwJVpaCTnf5tiRauVfRtB1gNr4r+a9HKIzfSSvOIf3vpDQRIIz1RCYceyv
D1afN7MhhFsj6XP41YKPAialA1vLpHC4uXPDxeNiJ1KJ+6qhWb7+7YuKo+oyeRKF
cuJJwKvs7s5fVZMcZYsDCgsfWESrbRpTfnbBVzgFfjjGcsUMQPv+H0SvYePiIZRW
lGBZXnqsu0AXDwoW4FOEHaOPehgNdSeBESmIGSji2BkkB4kLsPrn9ijwAPMI4DyI
1vai3iD4+iZJNR+cfLtEUvIlWQGTGPxRtyIG+O62XSB79HVdR7GBDD/r3r2P7eU/
nYwvNqNee8BNMHUfdrxVJmlujhV0AH28y2jwMr/rOqnZkEoiMpbQQHAv+0vteygz
/4au2IIXVyqbfRdow7AeoVjUszizmEa9FYsm7cHu+H97EEa4VBMOYP4WItiaSDtj
L3V35FyJ71oecyNYVrp1boZru7GGHqzWAM0oM/PFF4IIK4SBAgMBAAGjggJMMIIC
SDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBAA+4H6UklAKdkk0g9V+JhWrmw8MB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEndiLnRubS5rb3VtYml0
Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB
h+QdrmoAAAQDAEYwRAIgJBTq1QrhJZ3JD1qtE3SyXKjJb6MpCvXmaD1A8XQCT9UC
IBx4sbLLNHDA+dcda2H5xi5rqS/iMPf2ZVjpAH/7s76vAHYAtz77JN+cTbp18jnF
ulj0bF38Qs96nzXEnh0JgSXttJkAAAGH5B2uiQAABAMARzBFAiBwwBO/0bedenUf
Jy7eoXmfJDh7KkvelGtDLpPhG0ohrwIhAMNWGtPSjw0TNc0HOjLosMrE/xrSVS07
ms8iWjKZnHPiMA0GCSqGSIb3DQEBCwUAA4IBAQBTw22K4F3cyiwJeqlJrhfbubmq
HKkEoq8Wbn/tRdpsADmESNDYl1VvjpKOWdfT40PAC/PScMWxVZm3LfyC6unHHhgz
gkyAx2AoTd6wWIj9uPVeXo6vIv2n+nHWv8UA4SaERV16ZfncqHzF8DOgAttdZPI7
4N6K+pKVYgNx+G4JTVYJk/ju1PBBzvnwTL8E1rgWpxPpnUiiwSPP75l00FPSQZBf
8UZBlOOLscls74mjZCkvnnmgu/qOVzf8R/EhVPEFYb6r2lrXOCPULX+k0QijZHfb
hwbTsZBNwokpogz5wh4lRdw69exP1U1OggRjc6h5lqsgFPjtsnLt4h+1WLAF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361775635686688510732800072392368413845284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 23:16:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 23:16:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wb.tnm.koumbit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788176829109763962855777659623616815295650035391909218331437619900571051875573301710613052993222408115631829534981471867016161058688786117122402689487423204646492205548465005772181205583162152271894953914055859875165667537931758444904033421439830109098371563434081353620201823702531114109485009568624982751049546743082423890038455440746582168919780123601423692062553122676910569523511826803817504488298469550573410639293785520867547113405558766410592120602428658835575574558751371185223332769009575384540412111907934981954446079829907359735470057920661843970982448719942411283667496179691109076019086406319444604925711835876112201061769162952843939108352525204091701016262672590325647333202511278603197301139842281602435071389938637299583383804938339336022228438493121406716844663153044010595090854113241109887841674791101876036868841155503976096855885325904321659217373999445975449054849199262979069714224587271416229307356112849462393961920246748521804394119781289732639135238188103262439300910875668402389115375841050259287077687815901599075239168046613800737544799835596707354238033054032512360119378569168953678784685298437810201060282887323984107944137825401047540030146910751267358809270470626664796496360735814911014638158977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1000fb81fa52494029d924d20f55f89856ae6c3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb.tnm.koumbit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e41dae6a000004030046304402202414ead50ae1259dc90f5aad1374b25ca8c96fa3290af5e6683d40f174024fd502201c78b1b2cb3470c0f9d71d6b61f9c62e6ba92fe230f7f66558e9007ffbb3beaf007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e41dae890000040300473045022070c013bfd1b79d7a751f272edea1799f24387b2a4bde946b432e93e11b4a21af022100c3561ad3d28f0d1335cd073a32e8b0cac4ff1ad2552d3b9acf225a32999c73e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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