pedraderaio.org.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1b:df:ef:04:2f:b4:1f:4b:a3:1d:64:ab:20:cb:c4:14:61 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pedraderaio.org.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:df:ef:04:2f:b4:1f:4b:a3:1d:64:ab:20:cb:c4:14:61Serial Number (int): 270822140589064411705275359905001540686945
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 34:d0:ac:14:d5:28:87:aa:33:38:c3:b4:8b:4e:52:bc:20:7a:d5:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 03:f5:0a:be:41:51:fe:4c:76:73:6f:98:0d:15:8b:dc:cd:e9:75:3b
Fingerprint (sha256): 81:69:9f:04:b2:d1:9e:32:a8:f7:29:b5:7b:da:36:68:71:fb:b6:98:5d:fa:68:dd:2e:a0:5d:b1:54:35:79:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pedraderaio.org.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pedraderaio.org.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pedraderaio.org.br
www.pedraderaio.org.br
www.pedraderaio.org.br
Other certificates including the domain name pedraderaio.org.br
(limited to 100 certificates)
Certificate
The complete raw certificate details for pedraderaio.org.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgISAxvf7wQvtB9Lox1kqyDLxBRhMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMzEwMDAyMjNaFw0x OTAxMjkwMDAyMjNaMB0xGzAZBgNVBAMTEnBlZHJhZGVyYWlvLm9yZy5icjCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4LZRHruFWGyB2dzVwDtXbRtt80 pvNSsVOTgj5dLr9NFw9EsgaCtSv2J9CGcfDy/KUloV1brRyB4gPn0RLDa4IiVGR5 OqftWB6NaNGj1NoZG0ZcpS3DpiQKG2nsfGPm9NqPsLnD54hgxKfw8S7W+tS7Hp9s 3hpH4Gsy6QaZhRlR8TgNLbmsWr5ga5ZuNGqW2YL822EtzUtGwkeCUc34iNl/k+d2 SBGTRqGx+uIwMOm6cqopHrIytXDzFGGMznT1To+76584LQGAsKdm0Gi8JMHcs9EJ 8XHcaz6+J0ElEsoTF81Zap28T318RYa6aPR0T77xRThuJcBNQELFEMo/g3f/HHak uhoXiwZ8Of5F1OrJwkorpdlStAzdw7H3FuZl9ujEfKWH0ci6qmv5Cc88xOUFuayO zZjZIzXjcX+LRkwdCjETZ+7EkYWMLXLa0PtTilC8E3BShPS8PP5vP8u9pDrWiMN3 ncCmP41t+jFeRissJSZPHoelJ8UyFJjshrfpeu0wyzyZfEr9NmcoUg+hPl+wj3IJ ulk59QHIaj5NQa7r6hLbXAIPt+140dM1QGqshcJhP0U7wEzzcwTv0F/luMeLgisL ak/kzuK9Qix655gJ9fXvjzHruY1C9Qtt6TZG10Tom+Iicv892tDi0Pybd58a5TmP XX+1xMjL7tk8j7h1AgMBAAGjggMwMIIDLDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FDTQrBTVKIeqMzjDtItOUrwgetUiMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wNQYDVR0RBC4wLIIScGVkcmFkZXJhaW8u b3JnLmJyghZ3d3cucGVkcmFkZXJhaW8ub3JnLmJyMIH+BgNVHSAEgfYwgfMwCAYG Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w ggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7 pI8okwGd3fHb/gAAAWbHpJNfAAAEAwBGMEQCICyHW3l5/l7faB3DeUu9yvvsCRv+ Pt8bCXrT7qMMtTtVAiB5S1PuQCZzr9PN3wZFfUg+cHlk3M8G0HlGzAxwDhng+wB1 AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZsekk10AAAQDAEYw RAIgRGflgZDj3GY8xSF9yVXEu3M+id1WC5x0UIXQ9F+LJ50CIFZJyw7+Te/PLzZq RaSvkiiQKr2P0SmJkCtSHJyxPKptMA0GCSqGSIb3DQEBCwUAA4IBAQBHadlFTLpT s77ive5qzS6hkXtN01qXuVJgBT5+kGDK0N6iub5Ea8IF6rggchci4/1bWLneydDp SPNZSk5WW1ODiAg4rvWXQ0rgrWmIM50Z0YQNVyBj8ahmRlL2CBLNk4hf2OHiLN1R BQXkgOqNBfM3rCfjeidJaOnzrWZOURGca9jSvmxrlZwD9BrBwMsxsRPknKLgihKz Urh5xbgY/dF/W34IBy81jVbqpRUhvADlTCe7ZFX7ZFDNOa90aXPlyVVjQLhKwENy /fDxrtgjd/C2T5foToxOA6p3wl5SBcq8jJmYLoTbeCWUgAqhY3DRwe7dufkUbyWI unf8MZrQAdUR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvgtlEeu4VYbIHZ3NXAO1 dtG23zSm81KxU5OCPl0uv00XD0SyBoK1K/Yn0IZx8PL8pSWhXVutHIHiA+fREsNr giJUZHk6p+1YHo1o0aPU2hkbRlylLcOmJAobaex8Y+b02o+wucPniGDEp/DxLtb6 1Lsen2zeGkfgazLpBpmFGVHxOA0tuaxavmBrlm40apbZgvzbYS3NS0bCR4JRzfiI 2X+T53ZIEZNGobH64jAw6bpyqikesjK1cPMUYYzOdPVOj7vrnzgtAYCwp2bQaLwk wdyz0QnxcdxrPr4nQSUSyhMXzVlqnbxPfXxFhrpo9HRPvvFFOG4lwE1AQsUQyj+D d/8cdqS6GheLBnw5/kXU6snCSiul2VK0DN3DsfcW5mX26MR8pYfRyLqqa/kJzzzE 5QW5rI7NmNkjNeNxf4tGTB0KMRNn7sSRhYwtctrQ+1OKULwTcFKE9Lw8/m8/y72k OtaIw3edwKY/jW36MV5GKywlJk8eh6UnxTIUmOyGt+l67TDLPJl8Sv02ZyhSD6E+ X7CPcgm6WTn1AchqPk1BruvqEttcAg+37XjR0zVAaqyFwmE/RTvATPNzBO/QX+W4 x4uCKwtqT+TO4r1CLHrnmAn19e+PMeu5jUL1C23pNkbXROib4iJy/z3a0OLQ/Jt3 nxrlOY9df7XEyMvu2TyPuHUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270822140589064411705275359905001540686945 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 00:02:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 00:02:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pedraderaio.org.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775313961780848555124432579025859420466182969577146201261327157894827893399122073693942495420758868752205870927022191542084378078811174377095516112629977477240771704979585073457663751898857891095857896164411784156947100436599440676507038151918696539233232870959602751506518597842134338139442515663308313563117874078807748706997846939006963593992515799773529709180389487095028096408520997058470002373965933815799671756392278931492864284752218781826574499996781364110018070714677254231215742467903614310976247449361948762118206305137961900006786705748240148316227392402906635815127568648301573661017228335469426299491305487852565942860429133041982359220383901400945301488459885668049035321397456077540855889085786167071139046795150010823171933813433142353585063807940692469370095823543851664047193653826727192186759527135120349506632234655336279084376014955890681280656028852747085417319694545756859695096855185559652513529087934254236350489036183337230046138984372664057913843604044706418816025318711833127137795066947016900283282832736768636291823523399257672318231988917588615930400809607350049226143630418559170163651055261511262494084889626176177296420581325604153074614811145148702069419363452302982441479808796575673556497578101 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 34d0ac14d52887aa3338c3b48b4e52bc207ad522 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedraderaio.org.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedraderaio.org.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166c7a4935f000004030046304402202c875b7979fe5edf681dc3794bbdcafbec091bfe3edf1b097ad3eea30cb53b550220794b53ee402673afd3cddf06457d483e707964dccf06d07946cc0c700e19e0fb00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166c7a4935d000004030046304402204467e58190e3dc663cc5217dc955c4bb733e89dd560b9c745085d0f45f8b279d02205649cb0efe4defcf2f366a45a4af9228902abd8fd12989902b521c9cb13caa6d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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