www.glow.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:0b:3b:ed:39:fe:a2:05:04:65:e7:df:a0:f7:70:47:76 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.glow.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:0b:3b:ed:39:fe:a2:05:04:65:e7:df:a0:f7:70:47:76
Serial Number (int): 261692072827195852423696417701932173379446
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:43:14:b6:0a:a2:96:52:4c:6d:29:99:bc:21:4e:18:c5:41:4e:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:c0:a8:2e:07:07:28:b5:43:79:a2:a6:34:29:02:27:f2:f9:fe:d3
Fingerprint (sha256): 4e:d4:c6:22:09:9d:30:72:86:26:2d:5a:53:ff:fb:06:52:b9:5d:3c:31:5d:61:61:d7:0c:f3:3f:64:13:19:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.glow.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.glow.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glow.cz
www.glow.cz

Other certificates including the domain name glow.cz

(limited to 100 certificates)
hamu.prob-amu.glow.cz
*.glow.cz
ranec.glow.cz
majak.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
t.glow.cz
webmail.glow.cz
oko2.glow.cz
www.glow.cz
www.glow.cz
reader.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
famu.prob-amu.glow.cz
doosancms.online.rev-doosan.glow.cz
webmail.glow.cz
reader.glow.cz
www.glow.cz
altmail.glow.cz
2itwiki.glow.cz
git.glow.cz
adastracorp.com
git.glow.cz
mail.glow.cz
altmail.glow.cz
adastra-web-sk.prob-prod.glow.cz
amu.prob-amu.glow.cz
mail.glow.cz
ranec.glow.cz
ranec.glow.cz
webmail.glow.cz
reader.glow.cz
jabber.glow.cz
adastra-web-sk.prob-prod.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
mail.glow.cz
mail.glow.cz
ranec.glow.cz
www.glow.cz
altmail.glow.cz
sekac.glow.cz
altmail.glow.cz
www.glow.cz
www.glow.cz
t.glow.cz
www.glow.cz
adastra-web-sk.prob-prod.glow.cz
tmobile-spolecenska-odpovednost.prob-prod.glow.cz
sekac.glow.cz
webmail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
ranec.glow.cz
amu.prob-amu.glow.cz
webmail.glow.cz
2itwiki.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
sekac.glow.cz
doosancms.online.rev-doosan.glow.cz
altmail.glow.cz
www.glow.cz
mail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
*.glow.cz
obrik.glow.cz
majak.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
obrik.glow.cz
webmail.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
webmail.glow.cz
adastracorp.com
reader.glow.cz
sekac.glow.cz
mail.glow.cz
www.glow.cz
t.glow.cz
reader.glow.cz
www.glow.cz
majak.glow.cz
obrik.glow.cz
ranec.glow.cz
dev.glow.cz
adastra-web-sk.prob-prod.glow.cz

Certificate

The complete raw certificate details for www.glow.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISAwELO+05/qIFBGXn36D3cEd2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTAwMzEwMjNaFw0y
MDAyMDgwMzEwMjNaMBYxFDASBgNVBAMTC3d3dy5nbG93LmN6MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAwPyaGVAOFbKdnNndprjUcmTT8zbCwpD32ltH
EJbuSapmqeBQA1k4ihmhXwW7QS4b1wMN+6plek7R0qIEr1aNOfEeWexvNRuQA6Vn
GgOcrnGqRTmGUeTs0dkAht8NhYb+nVqsyQGizGcsisYiY3O7tRen1+FUWEpeB169
AJ8Ck62/ye8WM2AQbjJhHrR4FPp8ymSqLtj3BFL5sHuzKAZGDTwuQU/zTNlLtE6T
qLoFQD3vDcwsewrH2KYOwV6Gp36qlBNooyW/vLWxk+hwEsqAMADrNvwkjWHIPiQI
MGZUrpWSdhl3vSGqQJeE6H1TOYpLsgFDuVirXzLYW/MU3U7YNxJbJqHs+F/c0ITk
HW3yOdD9TdsuTaL43XiCfFJ6VzDldIvaIFgRPtI60HCUttg8zE3b79klPIpDKM9O
fc46LKSJZnGZtS3J/6uWtUJQ2IHPAM5gR8gaIyxP/YSIdfB+xAsawU+DvMdqYO3I
e+b4mSSVBMV8QkVHqoz4iAcejDAhpebq5MqvOsSUZf4nhJq6nxoYcSbisBF2KMR0
2ZzZAee4wggGRBtnNKmmlPDrzm4RHgydzNQHzvghtUBrAGqPTHLO0x8mdM6y1gyl
vki9qyZ7EiWnPOUHg2ISWvKVgbVBP1mRrMhDD/HG0o2x0pC+dy6j2Z+E2L3F2cOu
zYDdWTsCAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUx0MUtgqi
llJMbSmZvCFOGMVBTl4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWggdnbG93LmN6ggt3d3cuZ2xvdy5j
ejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABblOB
dKgAAAQDAEcwRQIhANNP7zVfbVcCNd8Z7la3/3apQeNczTGOlZfTZosHYFxRAiBf
Vj5luvPyR4BEXSm7LvK50o1g/YirgrCCGvWQxtckWgB1APCVpFnyANGCQBAtL5OI
jq1L/h1H45nh0DSmsKiqjrJzAAABblOBdroAAAQDAEYwRAIgNnsYvAL7QBi+QcTC
4/YUkRuViXxfS9yNqxbr6LiRO7QCIE9v4W5aT46Qpldu9yGU39v808jHMdjNez6L
26sVUdKtMA0GCSqGSIb3DQEBCwUAA4IBAQAo+ykfhrV3KtJWGIzR6UNyER9O36Gm
b4Px+7B6d5xIRZymCSnbOPRS4MW+bM+T0mqNzo/vdsEuwAfcBcBiNUOGMUyPd9IT
R7/9uBhhGM/iGL2rN+hfgfudaogicxgAeI5lD79x/z3D5o2d1bOIn840Ba1GLqCw
WAZ6uPM3hsX4cbeU+3rZbnsJBw+fpPVerhmbVtkutJtAeqI9i7F7+V5qjGDGQ8wQ
GTca5hP33CzOtaCVAikqUVtsfpZXCd4bTG3cmW8ckWqhb/W0vpouW3c4OEBz694w
SCdR628TY4dvoBZ24S5I8XJUB9KK+bRDlF2ASmCNEoZL/LarsQvRtiYS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261692072827195852423696417701932173379446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 03:10:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 03:10:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.glow.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787317153410462368021984911219177724365946158488285269639150135144252774510414528425268801815173056460082219759051284066790027547696731971944976441795749326187601623118686846246935495339408553580657236585005469810310414041528474692126218958666348295494239528691728161251966041565452819324927626979799637999410373085841858447321235885931672336077867641478287634401523910387840407572686412584204800392233379660012839497617665677537974712686288339023992118183000324870108987489958791296881832860909117096376388940831344844583222655560853398165202477992201645320235907424303186254724141696563120999411132078052916600686648267047187956726916885589198757861548373817391808006422061800466745175656013201615750960572391479423028450624526545576754196706453167626735378131458239306516870729116569677339662152459807576086492916402599810011399956614054805953141099446612400568046686653104250419187564713459210491777393261556464882820931469110751055299207708872057546342207977672217754196426413007590852586630972237212402666336891465333915460443845802833858362781103998159000582309924858637130791145543884822369474826221286935422698608325053918821938088252152635116441885818548327008963580583413129267979453533795765409276581829755797243632113979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c74314b60aa296524c6d2999bc214e18c5414e5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glow.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e538174a80000040300473045022100d34fef355f6d570235df19ee56b7ff76a941e35ccd318e9597d3668b07605c5102205f563e65baf3f24780445d29bb2ef2b9d28d60fd88ab82b0821af590c6d7245a007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e538176ba00000403004630440220367b18bc02fb4018be41c4c2e3f614911b95897c5f4bdc8dab16ebe8b8913bb402204f6fe16e5a4f8e90a6576ef72194dfdbfcd3c8c731d8cd7b3e8bdbab1551d2ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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