oqo.cl
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 06:9d:7a:d6:bd:8f:21:00:0e:9d:f6:0c:98:1c:f0:6a was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=oqo.cl
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:9d:7a:d6:bd:8f:21:00:0e:9d:f6:0c:98:1c:f0:6aSerial Number (int): 8793050048963585819048409949517181034
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 64:ad:1a:be:32:4b:7b:63:43:39:69:5f:b8:4b:28:c4:e4:e6:4f:22
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 0b:94:0f:5c:52:dc:47:0e:47:8f:b6:78:2f:af:62:9c:84:c0:27:87
Fingerprint (sha256): 64:17:f0:5c:15:6f:3b:69:b5:89:18:9a:e9:07:e5:a4:d2:0f:5c:6d:0b:08:93:b9:c3:c3:c8:5d:0c:02:be:84
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/wz0X7jx8hZYCRL Distribution Point: http://crls.pki.goog/gts1p5/kPtajCim2Js.crl
Check the revocation status for certificate oqo.cl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oqo.cl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oqo.cl
*.oqo.cl
*.oqo.cl
Other certificates including the domain name oqo.cl
(limited to 100 certificates)
gestion.oqo.cl
fw.oqo.cl
oqo.cl
digital.oqo.cl
ft.oqo.cl
soporte.oqo.cl
be.oqo.cl
oqo.cl
ft.oqo.cl
fw.oqo.cl
ft.oqo.cl
oqo.cl
oqo.cl
blog.oqo.cl
soporte.oqo.cl
cpech.oqo.cl
gm.oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
cowork.oqo.cl
cpech.oqo.cl
digital.oqo.cl
ft.oqo.cl
oqo.cl
soporte.oqo.cl
oqo.cl
fw.oqo.cl
be.oqo.cl
blog.oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
oqo.cl
cpech.oqo.cl
fw.oqo.cl
fw.oqo.cl
cpech.oqo.cl
oqo.cl
fw.oqo.cl
soporte.oqo.cl
sni.cloudflaressl.com
oqo.cl
oqo.cl
cowork.oqo.cl
digital.oqo.cl
gestion.oqo.cl
oqo.cl
oqo.cl
blog.oqo.cl
digital.oqo.cl
be.oqo.cl
blog.oqo.cl
oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
ft.oqo.cl
oqo.cl
ft.oqo.cl
be.oqo.cl
digital.oqo.cl
oqo.cl
oqo.cl
oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
fw.oqo.cl
oqo.cl
digital.oqo.cl
ft.oqo.cl
soporte.oqo.cl
be.oqo.cl
oqo.cl
ft.oqo.cl
fw.oqo.cl
ft.oqo.cl
oqo.cl
oqo.cl
blog.oqo.cl
soporte.oqo.cl
cpech.oqo.cl
gm.oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
cowork.oqo.cl
cpech.oqo.cl
digital.oqo.cl
ft.oqo.cl
oqo.cl
soporte.oqo.cl
oqo.cl
fw.oqo.cl
be.oqo.cl
blog.oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
oqo.cl
cpech.oqo.cl
fw.oqo.cl
fw.oqo.cl
cpech.oqo.cl
oqo.cl
fw.oqo.cl
soporte.oqo.cl
sni.cloudflaressl.com
oqo.cl
oqo.cl
cowork.oqo.cl
digital.oqo.cl
gestion.oqo.cl
oqo.cl
oqo.cl
blog.oqo.cl
digital.oqo.cl
be.oqo.cl
blog.oqo.cl
oqo.cl
oqo.cl
oqo.cl
gestion.oqo.cl
ft.oqo.cl
oqo.cl
ft.oqo.cl
be.oqo.cl
digital.oqo.cl
oqo.cl
oqo.cl
oqo.cl
fw.oqo.cl
oqo.cl
oqo.cl
Certificate
The complete raw certificate details for oqo.cl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIQBp161r2PIQAOnfYMmBzwajANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA5MjAxNDIxMDhaFw0yMzEyMTkx NDIxMDdaMBExDzANBgNVBAMTBm9xby5jbDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu50gOAQua43kX0+IqzfkLJkaSvt5R1cBy+NcFfPxiRmg6AxMR4 qxRcT6YWAHYU10i0vNC8pgJKNw+H7WlvWNKjyCYFn3A6JN7vgM8+LThBkxH2kD9B erHpL53oq/ikRO0Zn2j7R02YBk1WqUCJtohVqufDwlSnKYovaYzeHSHRyN32ow/x QEZ+AOz5+qa+ofSCY/gc8zFEPmiWqwoQMFoo2Up0V4K28Nk19+iThDF3KTMNkQJb S6LzmThkFCrCAaqaZ3YpfeC3cmVwUiQlZbA1dmoZUIkIE5i2jlyQMbJ+8niYg1dV CX17PMSmSkDnsWqm2yB3Ob6lU+4ApNJ7P/MCAwEAAaOCAnYwggJyMA4GA1UdDwEB /wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRkrRq+Mkt7Y0M5aV+4SyjE5OZPIjAfBgNVHSMEGDAWgBTV/J4N3x7K3QiX l24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6Ly9v Y3NwLnBraS5nb29nL3MvZ3RzMXA1L3d6MFg3ang4aFpZMDEGCCsGAQUFBzAChiVo dHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMBsGA1UdEQQUMBKC Bm9xby5jbIIIKi5vcW8uY2wwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHW eQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMx cDUva1B0YWpDaW0ySnMuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAejKM VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKsy5FOAAABAMARzBFAiBD 6P9V1arQr590KsFbGPTQ15PwKwFto/VeErYfzhNwcAIhAM0R+OKH7/Yw/LzNW4WN DFHdrsVy6Y1pH/5WaFm1zLLIAHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG NOvcgooAAAGKsy5FIgAABAMARjBEAiBCQ2Ow+/vjvw9WRjm42tkeqe8S+phTfcay fZjdotYkugIgazCnumsU8jATnX5LJF0wppRh+q5TfA8g6pX4zV3O94gwDQYJKoZI hvcNAQELBQADggEBAJTEJYxek77iZ8WbFFCAy8jZz3v7m8eMouewr3mAY0Xz/Eol eSIPzXNuUEcMl4eVQx1wvw7vHRJKV8ptgHICB0TV6MMZeyH6AJoLa41RNyVmGVuC OIR1qR9zI76uhfdxVwhMK6XqOE8Er6bVsSxnrKdpyIJSls+iyN89LtDincLn5+/v 10UeFGP9WI/+Uj+BCEKAKOtj0hMB2EIR+buowSEY1spYP8U8/jw0Zt8AqanN7lkW zNab+vQoPhunVXhznWrbYpo2SSPvWR+3fSZhI2hkr0E5QWKK9uXDYZhdBF960ZBr 3BK9ehSrvUlkmbp9WfmgsVsayEpILySBolfSWTc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7nSA4BC5rjeRfT4irN+ QsmRpK+3lHVwHL41wV8/GJGaDoDExHirFFxPphYAdhTXSLS80LymAko3D4ftaW9Y 0qPIJgWfcDok3u+Azz4tOEGTEfaQP0F6sekvneir+KRE7RmfaPtHTZgGTVapQIm2 iFWq58PCVKcpii9pjN4dIdHI3fajD/FARn4A7Pn6pr6h9IJj+BzzMUQ+aJarChAw WijZSnRXgrbw2TX36JOEMXcpMw2RAltLovOZOGQUKsIBqppndil94LdyZXBSJCVl sDV2ahlQiQgTmLaOXJAxsn7yeJiDV1UJfXs8xKZKQOexaqbbIHc5vqVT7gCk0ns/ 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8793050048963585819048409949517181034 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 14:21:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 14:21:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oqo.cl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23698194466239222213488918535143027355449675644695321579792738189365888366201746050757041249837246324354921166703902016148631645095069335945878335249927910047222755527413528370134869547986813550008289219459732696879607607374793881692347060154994585714484327492691284145181433340308935513695649165614151171398371362887705540554194242480531990396803419571339750985296983119305122273720774762189792499598852971210947004913645132363809132472135764494952270001116467892595263464194761655984240592735825347201209634859672431507366081046147297075670954383650603186333569734294282369224954383178436725811288222709952791920627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 64ad1abe324b7b634339695fb84b28c4e4e64f22 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/wz0X7jx8hZY' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqo.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oqo.cl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kPtajCim2Js.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab32e45380000040300473045022043e8ff55d5aad0af9f742ac15b18f4d0d793f02b016da3f55e12b61fce137070022100cd11f8e287eff630fcbccd5b858d0c51ddaec572e98d691ffe566859b5ccb2c8007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab32e452200000403004630440220424363b0fbfbe3bf0f564639b8dad91ea9ef12fa98537dc6b27d98dda2d624ba02206b30a7ba6b14f230139d7e4b245d30a69461faae537c0f20ea95f8cd5dcef788 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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