www.snailsites.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:4a:33:f2:78:a7:17:7b:ed:ed:e5:83:7b:51:8a:77:e1 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.snailsites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:4a:33:f2:78:a7:17:7b:ed:ed:e5:83:7b:51:8a:77:e1
Serial Number (int): 312818127797072532946235277867534516910049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:af:f7:f0:76:01:d0:ac:0d:8d:90:61:21:d3:a3:ea:5b:4f:66:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:c1:95:39:5f:4c:da:96:1a:a6:6a:fe:94:87:58:92:08:ab:7a:b4
Fingerprint (sha256): 83:25:fc:3f:63:8d:b2:4d:2b:3c:73:be:fb:07:c3:c1:49:10:e6:e7:9a:d8:0d:89:6c:3b:34:bb:c0:75:84:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.snailsites.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.snailsites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snail-sites.com
snail-sites.de
snailsites.com
snailsites.de
www.snail-sites.com
www.snail-sites.de
www.snailsites.com
www.snailsites.de

Other certificates including the domain name snailsites.com

(limited to 100 certificates)
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
anywhere.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
www.snailsites.com
wgg-hgw.de
wgg-hgw.de
anywhere.snailsites.com
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
portal.vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
www.snailsites.com
version.snailsites.com
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
vp.primaholding.snailsites.com
anywhere.snailsites.com
wgg-hgw.de
anywhere.snailsites.com

Certificate

The complete raw certificate details for www.snailsites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2zCCBcOgAwIBAgISA5dKM/J4pxd77e3lg3tRinfhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzExMjI0MjRaFw0y
MDAzMzAxMjI0MjRaMB0xGzAZBgNVBAMTEnd3dy5zbmFpbHNpdGVzLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOTGlHS23cy9VIhPQ/0R0lJZtJSj
sPy36o7tIGSbYxla2apQCM6BLWhoyUDb4aAPngnEiGhiOj5TzZ6/f4SzdEM64Qhg
4+VdZtIawNHJ+qydkFTMLygh0K26GUntD29drNx/ZOk4ZzxgqFBPs1KRCupyUcsZ
C0B6BYqmPm2QJ02ILH87qGVGIJYI4d/ePNZONOam2uxrEnlFkiTW34bhRcF9jjHc
tmOJF27nRwv7gSlxdFThCqPA3CGQh59qkSbERrhJ7gVmKxTPPa7VwpZH7T//PsR8
WVvwBNtQ+G7fbHPwW3wExWdzXVaUe+OdgLz9HdhQY1QpgdKcnq85uCvyEVcTSqk3
9zcg1jzkZT76sG5mhLowDDA0DEKdzpdNKdeSL5SpTlQr/cvFSuKP1DdSnOp64Wfx
kSHH917jtKPB3bCzaA1zKS1XQqBT6s6eChJ17AYpzfTEM5LzVOVIuUM0cfc3kcvt
zTYgB1NcruG9crgn/tIWNBEKO2cDsYmI9f1CQLh+5eYZdoblvHXiEbTknoMqIDRc
kx+nraEO9+aAGqyRoJ9cStwEW+kfqYss7pKMi8irY3GaXAOsn6OpjIBFE1CcexxN
iMMo78juk/HxlI67dYTi4Lex8LJ8ZONcXmVmYpx7p6YF3ag0/kMoDiJB2FE0E5GG
29ZXy6hqXD1K5HADAgMBAAGjggLmMIIC4jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FBuv9/B2AdCsDY2QYSHTo+pbT2bGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgZsGA1UdEQSBkzCBkIIPc25haWwtc2l0
ZXMuY29tgg5zbmFpbC1zaXRlcy5kZYIOc25haWxzaXRlcy5jb22CDXNuYWlsc2l0
ZXMuZGWCE3d3dy5zbmFpbC1zaXRlcy5jb22CEnd3dy5zbmFpbC1zaXRlcy5kZYIS
d3d3LnNuYWlsc2l0ZXMuY29tghF3d3cuc25haWxzaXRlcy5kZTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCV
pFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABb1whAsAAAAQDAEcwRQIh
AIkgjDAGSwSAoKLkZn+hbReMwD33wKJnTDwkb18YwGtKAiBJEMFHn3SwAJ40TxtY
dZ5XFPkDBlMra6Rn0UkDXxBF/wB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh
Ohpp06IcAAABb1whAwkAAAQDAEcwRQIgCulJpx03vChNR+20DkyQ7oWotAMmNsK0
HrMPW3Zz5iwCIQDwLduO8OIO1vUY8FuGTvshVSJ7gy400Yo3l+AVeQcJCjANBgkq
hkiG9w0BAQsFAAOCAQEAWmFN3RZJsZN2Rsq0dONSQZSTeZNZdPLuh+2kMhcQvzUQ
q07T6lY60jbM4VIowB0Q2gog6msrVfsYwJ4LGCSIIe0rk+1BIH0WaBpFefk+PMMc
LNxmYAUR2YW57WAuSOwzf60KOfSBw3TpAktbFXmUMcNdA/1ufMhIsQxK4WngALKk
NfFSYIgphFwu0bH27Flj36+G8+zTZrDlcBjVIhJMG1UeKWYeX7XR0eY8GJtNzhEv
us+pJSdOSkMZZw2A7OeZ+R7aa2hFHz9j7nPxq+LGKMXr4VZkb2uDYLuPmbqdJg45
ewsHwEc3CzpvKHlzcSckGIIV1o28VVMkzpXaJY0l0w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312818127797072532946235277867534516910049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 12:24:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 12:24:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.snailsites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933323438661758225368361923695573503763555515779360903687133790321439909848821085853076529538150132800472281145649652498227051747714187543276635916148719931256172471209948171042092000362395678196990743478821199285603909041131904866959974919747905632795858756520879278589249493786152847310556040103600480239747873884772810801129967173104472137420703919395149073833700773915678356038690826581290589688201537142321515200744883217105889060451305961812639692923116335447699101229229126162361823636849877042210741259181992486930601332798345981220435019689884579076977595295913481343115060576920284075559157479738221023445907862987123264777941674615447755517689020522067434207734158875322260919027332671254941762330544951084482500249231978658647581040816193551120084862990338252599218868528013340572302635121707636656462485770298165851407632444330117488847917868612115300209059497040579083729873427198673595627867081015998470107347643354243563370275042064004131109927757793200555671317461397969033946501077083501770046463251849435439525533483226257054955410239309002955294999548943529450216578550220760850299637860992430109859324306159484980640178216191740277277229060224963686662713409550896399957956831455610034664880810445180496226054147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1baff7f07601d0ac0d8d906121d3a3ea5b4f66c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snail-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snail-sites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailsites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snail-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snail-sites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailsites.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f5c2102c0000004030047304502210089208c30064b0480a0a2e4667fa16d178cc03df7c0a2674c3c246f5f18c06b4a02204910c1479f74b0009e344f1b58759e5714f90306532b6ba467d149035f1045ff00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f5c210309000004030047304502200ae949a71d37bc284d47edb40e4c90ee85a8b4032636c2b41eb30f5b7673e62c022100f02ddb8ef0e20ed6f518f05b864efb2155227b832e34d18a3797e0157907090a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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