sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:da:5d:45:35:fa:ed:97:21:0d:09:4f:87:f5:97:d1:74:b9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:5d:45:35:fa:ed:97:21:0d:09:4f:87:f5:97:d1:74:b9
Serial Number (int): 335642391350984841327483395558474605753529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:fc:4f:8b:bf:48:ef:9d:66:0f:c1:d4:09:4b:5c:dd:58:5e:a8:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:8f:88:55:0d:77:53:2b:58:85:31:b0:aa:fc:d6:7e:23:3c:d7:23
Fingerprint (sha256): 77:3a:36:6b:bf:cf:35:66:f5:fb:bb:2f:93:1a:96:2d:d8:95:25:01:fc:a2:fe:fb:36:69:0b:f3:47:24:b1:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
actc.org.nz
aucklandmarist.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
bullernetball.co.nz
bushmultisport.org.nz
canamju.org
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
hastings-central.school.nz
heet.net.nz
lucknow.school.nz
maristfc.co.nz
mchockey.co.nz
melrosetargetshooting.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northharbourtag.co.nz
nzpca.org
nztua.com
parkvale.school.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sporty.co.nz
stheliersbowlingclub.co.nz
suburbsrugby.co.nz
tabletennis.org.nz
taierirugby.co.nz
technicalharriers.co.nz
terracechb.school.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
volleyballbop.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
wmsc.org.nz
wops.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0V7zWNpOkyG2+4UbbHq
LKWP4VmWmRzdKYr2gRYUVTNTLUliqDwGO8R27kELBawJYKkPHUUcxhv36aXmrnOv
8Zpb5vVZ0XFw1lXVKtBzIblgT+bGlnnfjSEA/yqUzZ3M9n7YS6cXrHCkS349NxtN
FpNkduTZijpmeTPwobmATFzfenvGyNm84wy7cw417zCpjjqJFt60ACahGqu3NYbr
H7X7BdG8YEHYEFMtXBC1c6OSDZ7bvO67/DOCAx78fGvrxwH1M4bCNasw2jZHgE5h
gMlncyUrNG3828MFFtubcTlluY1PXRa8m0VxtuCp0K2D1TWoTL/dk9whtOo5J1Hx
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335642391350984841327483395558474605753529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 22:59:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 22:59:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25155686329773815714946396564375754045239840960854887067806294961354830037476117702690725269195590584174338305785187177838902507450376701301626819135050509120040805081655749684532651329508761033012149578503261217996249431408383512522133390931883624732212006968555574293594108911398727374015616263848607460013609461951474660242969783648995831299553121573732424589255982320936016841817677817504920442739633847178420081417439430632791033833240288375057470817581192645548677558990277504589400799653310599245725699029866219417182989014629627816841005082256620740726194634554062130482094576464580418618949465314006750327133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edfc4f8bbf48ef9d660fc1d4094b5cdd585ea809
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a818931b90000040300483046022100aeca23c2c6a6029e07340884e6b8457030ebd56dcf3eac23312164a84bbd5e9a022100ff2421434c970a8c45fe5216fbdafb942cba783fb8a04651e3da2bf2b89cb5690076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a818932240000040300473045022100d838cb55e512404c952d7abbc40598a61935b57ee68a682f127810f65b08cd470220324904696870ed1014131f27a4b1eca47c7456e318c237e44373fa8bcef9dfc0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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