kepler.geo-real.it
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1b:5d:92:26:cf:13:74:35:ce:ef:f2:a8:3d:42:de:9b:2c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kepler.geo-real.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:5d:92:26:cf:13:74:35:ce:ef:f2:a8:3d:42:de:9b:2cSerial Number (int): 270648858768233236998297250200650910702380
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 77:c3:41:11:82:88:85:f4:13:3d:22:1e:59:ec:0c:8c:93:7f:28:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6e:9f:8f:6e:48:f5:5d:9e:18:ab:a7:ba:21:e8:25:7b:4c:0f:32:92
Fingerprint (sha256): 69:40:e7:94:d9:36:44:76:b1:83:3f:b9:35:3a:12:4e:95:32:48:28:f9:be:ad:77:98:c7:0b:53:99:c7:91:94
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kepler.geo-real.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kepler.geo-real.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kepler.geo-real.it
map.iib-institut.de
map.iib-institut.de
Other certificates including the domain name geo-real.it
(limited to 100 certificates)
gkdev.geo-real.it
api2.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api.geo-real.it
gauss.geo-real.it
api.geo-real.it
api2.geo-real.it
gkdev.geo-real.it
wldev.geo-real.it
api.geo-real.it
api2.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
kepler.geo-real.it
api.geo-real.it
api.geo-real.it
gkdev.geo-real.it
api.geo-real.it
api2.geo-real.it
api.geo-real.it
api2.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api2.geo-real.it
gauss.geo-real.it
api.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api.geo-real.it
api.geo-real.it
hdop.geo-real.it
api.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
api2.geo-real.it
gk.geo-real.it
api2.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
hdop.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api.geo-real.it
gauss.geo-real.it
api.geo-real.it
api2.geo-real.it
gkdev.geo-real.it
wldev.geo-real.it
api.geo-real.it
api2.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
kepler.geo-real.it
api.geo-real.it
api.geo-real.it
gkdev.geo-real.it
api.geo-real.it
api2.geo-real.it
api.geo-real.it
api2.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api2.geo-real.it
gauss.geo-real.it
api.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
kepler.geo-real.it
api2.geo-real.it
kepler.geo-real.it
api2.geo-real.it
api.geo-real.it
api.geo-real.it
hdop.geo-real.it
api.geo-real.it
hdop.geo-real.it
gkdev.geo-real.it
api2.geo-real.it
gk.geo-real.it
Certificate
The complete raw certificate details for kepler.geo-real.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgISAxtdkibPE3Q1zu/yqD1C3pssMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjEyMTAwMDZaFw0x ODA4MTkyMTAwMDZaMB0xGzAZBgNVBAMTEmtlcGxlci5nZW8tcmVhbC5pdDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMWGE1mkM261qkb53vl2rQuhpqOn iLD7sYGd4flM1LOBb970oLVV2gfCzE8eaKhj0qoAO5V21i6CseiRo/uF5VTZvVco gI9LAEWbpB0exK744W4hmql5t/uT0aonAaAYXztvZ0RigMTekGk6iTPBh7nGm3tf ROM6nKUbwH/WN7uG4bgN2AatPPThusTAD1flx5Lm/dsqz4Kze4k/snIlfJ6VAzHM NH4nQ15g5f1ABeZwoUIyLQU4SPsPCcrap/U8kb9TgfjwGD7O71Ems17C1LbopYWI hcRB1HMhyikEdMZMqEzdeOXqEurHUAtJHtvvKA9CLSpXtwk38VgoNqGN06cCAwEA AaOCAzAwggMsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUd8NBEYKIhfQTPSIeWewM jJN/KJYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAyBgNVHREEKzApghJrZXBsZXIuZ2VvLXJlYWwuaXSCE21hcC5paWIt aW5zdGl0dXQuZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8T AQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCB qwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJl bGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRh bmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczov L2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB2ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABY4S3ef4A AAQDAEcwRQIgH1KIKtPTkLPRpunHQnvM6pqM1o62RHIttvOrl6LcxFYCIQDquyUy k0T1lZkASLtVEFgveoKHQ+5k6czcze0bOZrOLAB3ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABY4S3ehcAAAQDAEgwRgIhAK/bXB6GoCd6JJlM/6Tn +1Jlg5PIVzesU/+pO9sl5KbaAiEAwv2EzZVE8crHD4f0lG4OSYBtt2YPLleEFf6T TGbItYIwDQYJKoZIhvcNAQELBQADggEBADogOELJSTuwndu6eYQYxbVO+bXodJdi zKStf5YerjG0taCkDaGlEwQKI6UCyTELVFRIPtGYB/wbN3X0J4GP2CmMW8x0DQF5 L0TcgBIQS8N7gMwrqG4x3sm4TTKGR+QfFgrLsNvu3K/dmxLBFFJZF00NmVsIm8VD Vwk6BYelym/rT9sa4nL950IbwrQm4P1WVwKsyvilxgd7uG+EhhKT23BHfw4tBsd4 CS/rsqEcmE+Vda5U5JCzzM/mIpqtiguvn5CsYOMih5Ug/GV8cGmA6WRqyGUol/Qc m8LQLNMwrMDBgbHDUY4zsJ5X+PvZDlkmhdq63/9sQVGjtEUp50XA6eU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYYTWaQzbrWqRvne+Xat C6Gmo6eIsPuxgZ3h+UzUs4Fv3vSgtVXaB8LMTx5oqGPSqgA7lXbWLoKx6JGj+4Xl VNm9VyiAj0sARZukHR7ErvjhbiGaqXm3+5PRqicBoBhfO29nRGKAxN6QaTqJM8GH ucabe19E4zqcpRvAf9Y3u4bhuA3YBq089OG6xMAPV+XHkub92yrPgrN7iT+yciV8 npUDMcw0fidDXmDl/UAF5nChQjItBThI+w8Jytqn9TyRv1OB+PAYPs7vUSazXsLU tuilhYiFxEHUcyHKKQR0xkyoTN145eoS6sdQC0ke2+8oD0ItKle3CTfxWCg2oY3T pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270648858768233236998297250200650910702380 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-21 21:00:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 21:00:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kepler.geo-real.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24935061214195761419511298235840014191510068165067742168888527816544319328252648075351214246016522617246452730574561657216576151877239878071670497374966232011002997516168957809292213445670461396153277264353641056066858804761247362554191506573426590043696072678209404197737571439422574642164516284893259300807822896178814836257110378390484743547864978311558622952596866359236795633458633958484593654652424955687397517614266062720834145368368776035795340822011865055700643739376643779937256368242019920765844318426689840566834455430888168775755020593337670992334419440628814103615581046490041239383492499944998938989479 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 77c34111828885f4133d221e59ec0c8c937f2896 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kepler.geo-real.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.iib-institut.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016384b779fe000004030047304502201f52882ad3d390b3d1a6e9c7427bccea9a8cd68eb644722db6f3ab97a2dcc456022100eabb25329344f595990048bb5510582f7a828743ee64e9ccdccded1b399ace2c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016384b77a170000040300483046022100afdb5c1e86a0277a24994cffa4e7fb52658393c85737ac53ffa93bdb25e4a6da022100c2fd84cd9544f1cac70f87f4946e0e49806db7660f2e578415fe934c66c8b582 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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