ga.stleam.com
Issued by GTS CA 1D2
About this certificate
This digital certificate with serial number 8d:f5:f8:f3:dc:0d:90:aa:0a:00:00:00:00:1d:b1:76 was issued on by Google Trust Services.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ga.stleam.com
Google Trust Services
Organization:
Google Trust Services
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 8d:f5:f8:f3:dc:0d:90:aa:0a:00:00:00:00:1d:b1:76Serial Number (int): 188698309494142468782717448248325157238
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 47:0e:c1:5b:da:27:6a:ee:bb:33:91:37:fa:0f:ec:30:b6:37:ad:87
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9
Fingerprint (sha1): 86:39:59:1b:11:20:2b:cd:ba:ef:aa:34:1a:a6:a7:3d:2f:87:ce:81
Fingerprint (sha256): 66:d7:5e:96:d7:44:c4:ba:48:7d:29:eb:82:88:3c:44:a1:90:8d:d9:a2:f7:b3:f7:68:84:c0:81:be:66:a1:28
Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d2CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl
Check the revocation status for certificate ga.stleam.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ga.stleam.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ga.stleam.com
Other certificates including the domain name stleam.com
(limited to 100 certificates)
www.reziro.com
ga.stleam.com
stleam.com
ga.stleam.com
siteform.net
stleam.com
mykori.ca
www.homepointr.com
ds.stleam.com
www.ourway.pl
rehman-tech.com
dpcnation.org
ga.stleam.com
shortlink.stleam.com
ga.stleam.com
stleam.com
www.casinotidings.com
mensafutura.com
*.stleam.com
stleam.com
ga.stleam.com
comwatch.firehawk.co.za
www.callmeforcode.com
stleam.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ds.stleam.com
stleam.com
localbuddy.co.uk
stleam.com
remedee.biz
analysisidx.com
ga.stleam.com
stleam.com
stleam.com
sangsundatalogics.com
ga.stleam.com
analysisidx.com
freshjooz.com
www.muratkaymaz.com
www.computerguardian.co.za
www.amritjeet.com
stleam.com
www.stleam.com
fb.stleam.com
stleam.com
shortlink.stleam.com
www.clubhubltd.com
enterprise-ops.ridezum.com
www.some1.xyz
walaa.co
www.stleam.com
stleam.com
sswhc.medeintegra.app
jabberjog.com
plain.stleam.com
mensafutura.com
stleam.com
www.marceloneppel.dev
ga.stleam.com
inceptive.life
stleam.com
stleam.com
rehman-tech.com
test.kapputo.com
www.some1.xyz
admin.cheapcityparking.com
yagmichestate.com.au
pensioenbijpelsrijcken.nl
stleam.com
taas.dulal.org
ds.stleam.com
ga.stleam.com
www.computerguardian.co.za
stleam.com
monoe.co
ga.stleam.com
www.coixinet.cat
ds.stleam.com
www.stleam.com
stleam.com
shortlink.stleam.com
stleam.com
stleam.com
ds.stleam.com
firebase.stleam.com
www.getzinch.com
ga.stleam.com
for.your.vet
ga.stleam.com
stleam.com
ga.stleam.com
siteform.net
stleam.com
mykori.ca
www.homepointr.com
ds.stleam.com
www.ourway.pl
rehman-tech.com
dpcnation.org
ga.stleam.com
shortlink.stleam.com
ga.stleam.com
stleam.com
www.casinotidings.com
mensafutura.com
*.stleam.com
stleam.com
ga.stleam.com
comwatch.firehawk.co.za
www.callmeforcode.com
stleam.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ds.stleam.com
stleam.com
localbuddy.co.uk
stleam.com
remedee.biz
analysisidx.com
ga.stleam.com
stleam.com
stleam.com
sangsundatalogics.com
ga.stleam.com
analysisidx.com
freshjooz.com
www.muratkaymaz.com
www.computerguardian.co.za
www.amritjeet.com
stleam.com
www.stleam.com
fb.stleam.com
stleam.com
shortlink.stleam.com
www.clubhubltd.com
enterprise-ops.ridezum.com
www.some1.xyz
walaa.co
www.stleam.com
stleam.com
sswhc.medeintegra.app
jabberjog.com
plain.stleam.com
mensafutura.com
stleam.com
www.marceloneppel.dev
ga.stleam.com
inceptive.life
stleam.com
stleam.com
rehman-tech.com
test.kapputo.com
www.some1.xyz
admin.cheapcityparking.com
yagmichestate.com.au
pensioenbijpelsrijcken.nl
stleam.com
taas.dulal.org
ds.stleam.com
ga.stleam.com
www.computerguardian.co.za
stleam.com
monoe.co
ga.stleam.com
www.coixinet.cat
ds.stleam.com
www.stleam.com
stleam.com
shortlink.stleam.com
stleam.com
stleam.com
ds.stleam.com
firebase.stleam.com
www.getzinch.com
ga.stleam.com
for.your.vet
Certificate
The complete raw certificate details for ga.stleam.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIRAI31+PPcDZCqCgAAAAAdsXYwDQYJKoZIhvcNAQELBQAw QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET MBEGA1UEAxMKR1RTIENBIDFEMjAeFw0yMDAzMTQxNTExMTZaFw0yMDA2MTIxNTEx MTZaMBgxFjAUBgNVBAMTDWdhLnN0bGVhbS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzq7BL7xkPiXQiDI26eoD9tVBmJeh8hDv7TuFIRD8BjoKp Wa+0PfC4h3T8GSJKjIZ/MRT85THpkw/akuAYgpBqYH1F4T+/SYwBCMLzrEt9NMzx bf58qPdImd88uh2dEe6cRm5n0XwrckzSW6klFx0mvaGjCDlfzr4aJeiGxdUlrMFv mz7ygwRSfuHpGHO0ooy9W0dFkMRrFzvSrt0NF84XN7Dt3pRv6iDNDpqEiV20A0RJ 6dnGUIOwHI2jScwrDDUp2yEYC2JaZEQlNFG300/8WWPw5oy/lTqVEMX72Ba7pI1q 1jfIoubroYFuZ3ruV3nVo9mtTpWiyRSN++zH1GD/AgMBAAGjggJUMIICUDAOBgNV HQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQURw7BW9onau67M5E3+g/sMLY3rYcwHwYDVR0jBBgwFoAUsd0yXei3 N3LSzlzOJv5HeeIBCOkwZAYIKwYBBQUHAQEEWDBWMCcGCCsGAQUFBzABhhtodHRw Oi8vb2NzcC5wa2kuZ29vZy9ndHMxZDIwKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2ku Z29vZy9nc3IyL0dUUzFEMi5jcnQwGAYDVR0RBBEwD4INZ2Euc3RsZWFtLmNvbTAh BgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMC8GA1UdHwQoMCYwJKAi oCCGHmh0dHA6Ly9jcmwucGtpLmdvb2cvR1RTMUQyLmNybDCCAQUGCisGAQQB1nkC BAIEgfYEgfMA8QB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB cNnQYWUAAAQDAEcwRQIhAJoEQ1A9aU4TmbH/G0RmoOW3DAKy9yf+QWIbaH4Pk48a AiBs5wAZ2W0pOIu+e2DSNKSQhZwSNBtMg6F82E3twsqX0QB3AF6nc/nfVsDntTZI fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcNnQYVMAAAQDAEgwRgIhAKKfqgRKN2iu MSbuAu7b8N9jUx2LLjetAt4Ytj0V89R8AiEAuDsSF6DD2POc8eVy8RYiCg+HKYpL IUgq1hTISaOfclQwDQYJKoZIhvcNAQELBQADggEBABwotcIb1yqQb7Yf4nWBvJSo eVl1Tgp8ppK88ed2GwUmTPTMqwsHm+rIJH+DbZtWiT07bGpVWer9TxQ/ob1CsNJC BA7CyuKvgjtfA9+3IPbFwatLaxaaz/Cc602pG/BOJDDDhAHl3EKrg7B2aHnKnqOw R2KQ4kPMWFFrnnbJgdhzrXiY3zmXloZlk8+nGX+nAeQBYwDlz94mj8etfDEPAoVr LG8i6th8WkrOLzpBvHMGjGjCSD7HioH5XFigx196jYs7ok4/GNdUFSnTgqHk5aLQ Bnqn4VfwoF7f85O9rz1pSKxSPzr9747o0iJQmJrk7aE7T6i4OO13JBEG+YnUY1w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6uwS+8ZD4l0IgyNunqA /bVQZiXofIQ7+07hSEQ/AY6CqVmvtD3wuId0/BkiSoyGfzEU/OUx6ZMP2pLgGIKQ amB9ReE/v0mMAQjC86xLfTTM8W3+fKj3SJnfPLodnRHunEZuZ9F8K3JM0lupJRcd Jr2howg5X86+GiXohsXVJazBb5s+8oMEUn7h6RhztKKMvVtHRZDEaxc70q7dDRfO Fzew7d6Ub+ogzQ6ahIldtANESenZxlCDsByNo0nMKww1KdshGAtiWmREJTRRt9NP /Flj8OaMv5U6lRDF+9gWu6SNatY3yKLm66GBbmd67ld51aPZrU6VoskUjfvsx9Rg /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 188698309494142468782717448248325157238 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 15:11:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 15:11:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ga.stleam.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22681319421936996734144443626408243368947630292425594748349418563913863058474998911901322476031182646616790704612018455136723905808745694987466763543078301944560765600768774259729766504785960203273641370916829001847348122940836376221261669042704592742913543544886038146441926079157300432542670467724029806484282682090599678967633153403443526384580768702835035370823608022366109766829681483393517781454873448681075634990284272266459895935132567580835065330473357604507225969164002485048951741830261050557460956355973188038750600420766127096284574320062381939257541401040725316361390293850448634905337451264569546924287 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 470ec15bda276aeebb339137fa0fec30b637ad87 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.stleam.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d9d0616500000403004730450221009a0443503d694e1399b1ff1b4466a0e5b70c02b2f727fe41621b687e0f938f1a02206ce70019d96d29388bbe7b60d234a490859c12341b4c83a17cd84dedc2ca97d10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170d9d061530000040300483046022100a29faa044a3768ae3126ee02eedbf0df63531d8b2e37ad02de18b63d15f3d47c022100b83b1217a0c3d8f39cf1e572f116220a0f87298a4b21482ad614c849a39f7254 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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