www.oaklandfl.gov
Issued by R11
About this certificate
This digital certificate with serial number 04:cf:4d:d9:cb:af:89:03:75:ec:83:15:b3:97:c1:6b:de:dd was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.oaklandfl.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:cf:4d:d9:cb:af:89:03:75:ec:83:15:b3:97:c1:6b:de:ddSerial Number (int): 418991075095005470714511220018718507261661
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 83:a9:07:d6:03:ce:59:82:bc:c9:e5:03:c4:37:bd:36:e5:de:86:78
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): 1b:2f:6e:09:9a:d7:51:44:1d:6d:eb:76:dc:01:23:73:db:fb:86:f5
Fingerprint (sha256): 44:32:9a:8b:61:ac:f1:a9:e7:ea:ef:bb:9c:7e:2d:86:e1:59:14:fc:62:32:5e:cb:55:71:04:2a:5c:14:d2:b6
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate www.oaklandfl.gov
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.oaklandfl.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oaklandfl.gov
oaklandpd.com
www.oaklandfl.gov
oaklandpd.com
www.oaklandfl.gov
Other certificates including the domain name oaklandfl.gov
(limited to 100 certificates)
www.oaklandfl.gov
techstop.ats-inc.com
helpdesk.edmontonstatebank.com
*.oaklandfl.gov
www.oaklandfl.gov
helpdesk.grandronde.org
www.oaklandfl.gov
helpdesk.edmontonstatebank.com
*.oaklandfl.gov
help.yonkerscontractingco.com
*.oaklandfl.gov
www.oaklandfl.gov
*.oaklandfl.gov
techstop.ats-inc.com
service.upperlinehealth.com
help.oaklandfl.gov
www.oaklandfl.gov
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
www.oaklandfl.gov
www.oaklandfl.gov
help.yonkerscontractingco.com
www.oaklandfl.gov
service.upperlinehealth.com
helpdesk.edmontonstatebank.com
www.oaklandfl.gov
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
www.oaklandfl.gov
service.upperlinehealth.com
helpdesk.grandronde.org
www.oaklandfl.gov
www.oaklandfl.gov
www.oaklandfl.gov
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
www.oaklandfl.gov
service.upperlinehealth.com
techstop.ats-inc.com
www.oaklandfl.gov
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
help.oaklandfl.gov
www.oaklandfl.gov
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
www.oaklandfl.gov
*.oaklandfl.gov
helpdesk.edmontonstatebank.com
help.oaklandfl.gov
www.oaklandfl.gov
help.oaklandfl.gov
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
www.oaklandfl.gov
www.oaklandfl.gov
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
service.upperlinehealth.com
techstop.ats-inc.com
helpdesk.edmontonstatebank.com
*.oaklandfl.gov
www.oaklandfl.gov
helpdesk.grandronde.org
www.oaklandfl.gov
helpdesk.edmontonstatebank.com
*.oaklandfl.gov
help.yonkerscontractingco.com
*.oaklandfl.gov
www.oaklandfl.gov
*.oaklandfl.gov
techstop.ats-inc.com
service.upperlinehealth.com
help.oaklandfl.gov
www.oaklandfl.gov
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
www.oaklandfl.gov
www.oaklandfl.gov
help.yonkerscontractingco.com
www.oaklandfl.gov
service.upperlinehealth.com
helpdesk.edmontonstatebank.com
www.oaklandfl.gov
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
www.oaklandfl.gov
service.upperlinehealth.com
helpdesk.grandronde.org
www.oaklandfl.gov
www.oaklandfl.gov
www.oaklandfl.gov
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
www.oaklandfl.gov
service.upperlinehealth.com
techstop.ats-inc.com
www.oaklandfl.gov
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
help.oaklandfl.gov
www.oaklandfl.gov
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
www.oaklandfl.gov
*.oaklandfl.gov
helpdesk.edmontonstatebank.com
help.oaklandfl.gov
www.oaklandfl.gov
help.oaklandfl.gov
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
www.oaklandfl.gov
www.oaklandfl.gov
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
service.upperlinehealth.com
Certificate
The complete raw certificate details for www.oaklandfl.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISBM9N2cuviQN17IMVs5fBa97dMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjA5MTk1MjM2WhcNMjQwOTA3MTk1MjM1WjAcMRowGAYDVQQD ExF3d3cub2FrbGFuZGZsLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAID5B2iVWD9jkMBrfosGbpmXe8aJb2/pOBR9sD0HTVeJJv6eU47f2eocfjpg vErS1WsS+9v4NIMNiL/t7vz+sd9C53t57YiYKs7/JjijZJQbiLzquebaM5Gj5Nw8 lEK2dXd4HeTeZ8/3psaq2EIB+eRW4e43mdI0pHPQBM5RnzXl6k9a5g87gB76Xr8e u+Xqd7Lh+OA3y7m/kcoU9YSWN67xkVfhANOwgfiru+ffIVkulBnV1+U6KPAMTvoI nXoNGgqSvkgJobP2oofkOMf4PfEzRtny/Okp6LF+y5GqPIT5HgyXQHPoBgmr2MOK ACBgd3iIwgBHKpMq3eN8tiUCflkCAwEAAaOCAjQwggIwMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUg6kH1gPOWYK8yeUDxDe9NuXehngwHwYDVR0jBBgwFoAUxc9GpOr0 w8B6bJXELbBeki8m47kwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRw Oi8vcjExLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjExLmkubGVu Y3Iub3JnLzA6BgNVHREEMzAxgg1vYWtsYW5kZmwuZ292gg1vYWtsYW5kcGQuY29t ghF3d3cub2FrbGFuZGZsLmdvdjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisG AQQB1nkCBAIEgfYEgfMA8QB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs +GRuAAABj/7GQNcAAAQDAEgwRgIhAK5VW9zR3feBJNASE3YPRvHXJNbVX57gaImb 8yJ4kz1JAiEAj0E2vYn7Vr71/OKa0cdD2YhuYwPNbeVpZ3JayRLizDsAdgAZmBBx CfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY/+xkETAAAEAwBHMEUCIQDy cA6osry+3GI3XSl1foSq7NAiAD3G4gEWGAlDqL7GqgIgQgqkQQqCPp5xoznKW9B1 xw9VJVDwsVy9cOZ2SW47eLIwDQYJKoZIhvcNAQELBQADggEBAKE1h6GcQSck8e/j yMbFGxWSm2RF7pp1TymeeJNHaQhuA8Ow0m4eDt9lHkjOWYfIVRbxGps8lpXfuaL6 iguaFRu65Yxwdp7oOiQbWEmKv7rx39T/8HEjk3tk/ox+zYmPfC/we9mMuf0bXskP CA0Ofxyou9YYU6cu+bM2kJC89ZUlFili/hXGs8oJfwdUN1yhCHFJdA4EzDorGsS7 5pmSybldWRIzjXXmlOzae/f5WgEzOEJkqD+DrcXrQ+5yH6KNkEnK1ZlQF8d7xzqz Pfsc6f4KDMDh/7fnpPSauZ9pYw5C6aIeW7IkU9tdaWN98e1QZLyXnXcom1UtTHAu W/eqpJg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPkHaJVYP2OQwGt+iwZu mZd7xolvb+k4FH2wPQdNV4km/p5Tjt/Z6hx+OmC8StLVaxL72/g0gw2Iv+3u/P6x 30Lne3ntiJgqzv8mOKNklBuIvOq55tozkaPk3DyUQrZ1d3gd5N5nz/emxqrYQgH5 5Fbh7jeZ0jSkc9AEzlGfNeXqT1rmDzuAHvpevx675ep3suH44DfLub+RyhT1hJY3 rvGRV+EA07CB+Ku7598hWS6UGdXX5Too8AxO+gideg0aCpK+SAmhs/aih+Q4x/g9 8TNG2fL86SnosX7Lkao8hPkeDJdAc+gGCavYw4oAIGB3eIjCAEcqkyrd43y2JQJ+ WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418991075095005470714511220018718507261661 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 19:52:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 19:52:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oaklandfl.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16281303782601867656130124719422017071085192267550687256301460422204523999049118139072106375624296430629684143020458095146251052333408076312840731348976112788100100353755796086727142976120121929470628470141819532611823035403010679853358897457465369605921448350661944356935371914904650841591963774140272689869189183758946308970742565329181042887230662219620983611068529920377519776076151787961455388451244111998979998653724439349006980057988141848422254832049551500279519295735528714589457418748980213740791823083979806932629873900785656467954396658098938427707339370077205152698925480627719108649924756715832372002393 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83a907d603ce5982bcc9e503c437bd36e5de8678 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandfl.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandpd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaklandfl.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ffec640d70000040300483046022100ae555bdcd1ddf78124d01213760f46f1d724d6d55f9ee068899bf32278933d490221008f4136bd89fb56bef5fce29ad1c743d9886e6303cd6de56967725ac912e2cc3b0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ffec641130000040300473045022100f2700ea8b2bcbedc62375d29757e84aaecd022003dc6e20116180943a8bec6aa0220420aa4410a823e9e71a339ca5bd075c70f552550f0b15cbd70e676496e3b78b2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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