mytrip.tripagent.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:97:e5:19:46:88:b0:17:90:87:aa:65:c9:8a:9c:6f:4e was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mytrip.tripagent.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:97:e5:19:46:88:b0:17:90:87:aa:65:c9:8a:9c:6f:4e
Serial Number (int): 292504456161078781198224951458434759028558
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:8d:c4:78:1a:56:e6:ce:97:e9:f2:fa:d8:10:18:4f:27:3e:ec:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:33:31:e6:7a:0c:ca:f5:f2:8f:8b:06:4f:d0:af:15:8f:67:86:b6
Fingerprint (sha256): 69:1d:72:bb:bc:99:f4:06:b3:87:af:8d:aa:76:75:7e:5b:6b:0b:6e:a8:ff:b0:fa:c5:1d:42:b1:48:8f:94:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mytrip.tripagent.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mytrip.tripagent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.mtrip.com
app.avalonwaterways.com
app.cosmos.com
app.globusjourneys.com
app.travellerslounge.com.au
app.travelshoppe.co.ke
app.tripntouch.com
app.voyagesdumoulin.com
assets.mtrip.me
b-shedule.jtb-cwt.com
connectplus.travelleaders.com
cue-go.connectcue.com
gtview.globaltravel.com.sg
ikohnow.com
journal.acis.com
journal.selfguide.me
journals.collette.com
mtrip.tripmasters.com
mytrip.tripagent.com
mytrips.dwidayatour.co.id
online.luxecityguides.com
ontour.gerbertours.com
traveltracer.travelguard.com
trip.meritbiz.ca
trippal.corporate.com.sg
trips.aaacorporatetravel.com
trips.adtrav.com
trips.alexanderroberts.com
trips.alleesvenues.com
trips.altour.com
trips.atlastravel.com
trips.continentaltravel.com.pe
trips.copastur.com.br
trips.crystal-travel.ch
trips.foxworldtravel.com
trips.geostar.pt
trips.jtbcorporate.com.au
trips.national-travel.com.au
trips.nzft.co.nz
trips.omegatravel.com
trips.peerlesstraveluniglobe.com
trips.pleasant.net
trips.tenontours.com
trips.thetravelteam.com
trips.travelstore.com
trips.ttwgroup.com
trips.viajesalkasa.com
trips.worldtravelinc.com
trips.xltravel.co.za
viagens.meuagente.com
voyages.laurentides.com
voyagescaa.caaquebec.com

Other certificates including the domain name tripagent.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mytrip.tripagent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVn2Ql4NqZHtj4ElO3d7
gjuQytSIpXqrFSwD/2+5XUj53Sj4dw7O7dwmLhOQ7L3m7238/rDnvLniod2wfDrU
2Tk0+aHY7vHU/JwfMLU6imP/5iY2AdqyecWAtUVsyB0TuNO1GsNaG8ZiqrEIa4DV
nk69svApHq4I34jrGfNzNu1bEDRtnFKgVCpe2KCzBrHQb9MgZgB3I8BZcYYi1oin
yJN6eh/mQxU3tHWU5aAl3o8lIAvrurXmMGdB58QPZ23m5/Q8TY2zXFgOg5ChXWPn
60IvtyxxI0Tg23gY6qzbyVTCLoWXyUfOKS9q8xOkrrA0EovZ4Z73OiU4LC73vKtM
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292504456161078781198224951458434759028558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 02:39:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 02:39:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mytrip.tripagent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20368728990562523068746149943954702168080045000466838014549564459224410064821737051271994675026867153160907877579800011588366490400180048209057012221084949533432677189971067319648944040114865859349089172165196173894580728371304806273939918525575308273106982653525231656892627263475048522939557028524248131893900246977918583467987079725617011054461635645928232003768330935905908330110999748524326273311293764972811941780931551247557572209707786204777105757739339919956455519433987066734179665465291780060036942090185322351831169428927618562637114604981010557035535166850453643212380895826930318227958511018084871654603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e88dc4781a56e6ce97e9f2fad810184f273eec19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.avalonwaterways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.globusjourneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.travellerslounge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.travelshoppe.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tripntouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.voyagesdumoulin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.mtrip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-shedule.jtb-cwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectplus.travelleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue-go.connectcue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtview.globaltravel.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikohnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.acis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.selfguide.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journals.collette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrip.tripmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytrip.tripagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytrips.dwidayatour.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.luxecityguides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontour.gerbertours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveltracer.travelguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip.meritbiz.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trippal.corporate.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.aaacorporatetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.adtrav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.alexanderroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.alleesvenues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.altour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.atlastravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.continentaltravel.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.copastur.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.crystal-travel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.foxworldtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.geostar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.jtbcorporate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.national-travel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.nzft.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.omegatravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.peerlesstraveluniglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.pleasant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.tenontours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.thetravelteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.travelstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.ttwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.viajesalkasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.worldtravelinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trips.xltravel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viagens.meuagente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.laurentides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyagescaa.caaquebec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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