itservicedesk.intactpublicentities.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:04:25:d4:37:4c:f1:f6:46:ec:4a:e4:c5:1a:75:0c:ac:33 was issued on by Let's Encrypt.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=itservicedesk.intactpublicentities.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:04:25:d4:37:4c:f1:f6:46:ec:4a:e4:c5:1a:75:0c:ac:33Serial Number (int): 349860556519131543881072800158099239119923
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e5:2e:0d:6b:66:da:dc:df:46:e6:5c:46:0b:d2:98:d1:e6:25:64:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b3:ff:ff:fe:e4:fd:40:c3:8d:5b:93:3f:eb:f4:52:20:17:b8:b1:03
Fingerprint (sha256): 7e:85:66:33:6d:9e:55:87:d2:de:a4:0e:d1:8c:78:2c:c9:b8:61:9e:85:30:98:86:c8:ee:70:a8:0b:46:0d:7d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate itservicedesk.intactpublicentities.ca
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itservicedesk.intactpublicentities.ca
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
help.abilenemachine.com
helpdesk.9rooftops.com
helpdesk.alfarisgrp.com
helpdesk.epostglobalshipping.com
helpdesk.gs-activities.com
helpdesk.ilt.co.nz
helpdesk.lighthouseautismcenter.com
helpdesk.posnackschool.org
helpdesk.renin.com
helpdesk.shhotelsandresorts.com
helpdesk.springboardse.org
helpdesk.warren-wilson.edu
helpdesk.westsiderc.org
it-helpdesk.dtgo.com
itpodrska.skijalistasrbije.rs
itservicedesk.intactpublicentities.ca
sdp.aasted.eu
servicedesk.hardwoodlumber.net
support.lhscorp.com
support.lhsllc.com
technologyhelpdesk.slimmingworld.co.uk
helpdesk.9rooftops.com
helpdesk.alfarisgrp.com
helpdesk.epostglobalshipping.com
helpdesk.gs-activities.com
helpdesk.ilt.co.nz
helpdesk.lighthouseautismcenter.com
helpdesk.posnackschool.org
helpdesk.renin.com
helpdesk.shhotelsandresorts.com
helpdesk.springboardse.org
helpdesk.warren-wilson.edu
helpdesk.westsiderc.org
it-helpdesk.dtgo.com
itpodrska.skijalistasrbije.rs
itservicedesk.intactpublicentities.ca
sdp.aasted.eu
servicedesk.hardwoodlumber.net
support.lhscorp.com
support.lhsllc.com
technologyhelpdesk.slimmingworld.co.uk
Other certificates including the domain name intactpublicentities.ca
(limited to 100 certificates)
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
sni.cloudflaressl.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
intactpublicentities.ca
helpdesk.warren-wilson.edu
intactpublicentities.ca
intactpublicentities.ca
sni.cloudflaressl.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
itservicedesk.intactpublicentities.ca
sni.cloudflaressl.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
intactpublicentities.ca
helpdesk.warren-wilson.edu
intactpublicentities.ca
intactpublicentities.ca
sni.cloudflaressl.com
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
intactpublicentities.ca
Certificate
The complete raw certificate details for itservicedesk.intactpublicentities.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISBAQl1DdM8fZG7ErkxRp1DKwzMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA2MjgxNjUyMThaFw0yMTA5MjYxNjUyMTdaMDAxLjAsBgNVBAMT JWl0c2VydmljZWRlc2suaW50YWN0cHVibGljZW50aXRpZXMuY2EwWTATBgcqhkjO PQIBBggqhkjOPQMBBwNCAASvEHZtdWUGqRjBwc4E0a9TbZ2IxQiS3gqyBpDkNbDu Av6ESbjPv50ckn0/+q8zlBMZLhMRnhMp2yD7TSe84S28o4IDizCCA4cwDgYDVR0P AQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBTlLg1rZtrc30bmXEYL0pjR5iVkrDAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCCAkwGA1UdEQSCAkMwggI/ghdoZWxwLmFiaWxlbmVtYWNo aW5lLmNvbYIWaGVscGRlc2suOXJvb2Z0b3BzLmNvbYIXaGVscGRlc2suYWxmYXJp c2dycC5jb22CIGhlbHBkZXNrLmVwb3N0Z2xvYmFsc2hpcHBpbmcuY29tghpoZWxw ZGVzay5ncy1hY3Rpdml0aWVzLmNvbYISaGVscGRlc2suaWx0LmNvLm56giNoZWxw ZGVzay5saWdodGhvdXNlYXV0aXNtY2VudGVyLmNvbYIaaGVscGRlc2sucG9zbmFj a3NjaG9vbC5vcmeCEmhlbHBkZXNrLnJlbmluLmNvbYIfaGVscGRlc2suc2hob3Rl bHNhbmRyZXNvcnRzLmNvbYIaaGVscGRlc2suc3ByaW5nYm9hcmRzZS5vcmeCGmhl bHBkZXNrLndhcnJlbi13aWxzb24uZWR1ghdoZWxwZGVzay53ZXN0c2lkZXJjLm9y Z4IUaXQtaGVscGRlc2suZHRnby5jb22CHWl0cG9kcnNrYS5za2lqYWxpc3Rhc3Ji aWplLnJzgiVpdHNlcnZpY2VkZXNrLmludGFjdHB1YmxpY2VudGl0aWVzLmNhgg1z ZHAuYWFzdGVkLmV1gh5zZXJ2aWNlZGVzay5oYXJkd29vZGx1bWJlci5uZXSCE3N1 cHBvcnQubGhzY29ycC5jb22CEnN1cHBvcnQubGhzbGxjLmNvbYImdGVjaG5vbG9n eWhlbHBkZXNrLnNsaW1taW5nd29ybGQuY28udWswTAYDVR0gBEUwQzAIBgZngQwB AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBACXtAzIWdofKnSnSS1mlB2Gu2qQQ1y1JC4mf0zPPI5/nOI57W+LdpL8Ng8Jw 1qGryTWu4rEMWp9hxfF/Hsc7siedkVXCcBU010Mf2m7LJNyFscxRAQEK9zlUB8S8 /4CpBhBVzSJtmKPygjchJtcGuPR4gNFM1Mvb5QiVhtRhvsDVlrLwHr88gRsHE7BH Qbx63eiDlvIUYT/8DkJnR+Dhn9inh7WZkEOEEp92oDKO+C/K3LbuvqKbLibILKd8 h1OX1DlG9lGUJqFMn5zdZTZL8PdZOmyb72v4tZNPpVF7ebmZwZcVxvaxa1VOUmwV /xTSbT0AYrj9bsmGn0ynH90aB0s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErxB2bXVlBqkYwcHOBNGvU22diMUI kt4KsgaQ5DWw7gL+hEm4z7+dHJJ9P/qvM5QTGS4TEZ4TKdsg+00nvOEtvA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349860556519131543881072800158099239119923 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-28 16:52:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-26 16:52:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itservicedesk.intactpublicentities.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004af10766d756506a918c1c1ce04d1af536d9d88c50892de0ab20690e435b0ee02fe8449b8cfbf9d1c927d3ffaaf339413192e13119e1329db20fb4d27bce12dbc . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e52e0d6b66dadcdf46e65c460bd298d1e62564ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (579 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.abilenemachine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.9rooftops.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.alfarisgrp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.epostglobalshipping.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gs-activities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ilt.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.lighthouseautismcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.posnackschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.renin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.shhotelsandresorts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.springboardse.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.warren-wilson.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.westsiderc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-helpdesk.dtgo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpodrska.skijalistasrbije.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.intactpublicentities.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdp.aasted.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.hardwoodlumber.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lhscorp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lhsllc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technologyhelpdesk.slimmingworld.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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