plan.kentei.cc
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ae:b4:61:b8:63:4c:50:2e:f6:6b:76:18:a4:ca:fb:c7:ae was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=plan.kentei.cc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ae:b4:61:b8:63:4c:50:2e:f6:6b:76:18:a4:ca:fb:c7:aeSerial Number (int): 320785758071391168275307552411173798004654
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5b:3c:f9:6f:ae:fe:6b:6b:a6:d4:9a:b3:8e:49:0d:72:45:07:a5:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 04:08:e3:c2:1a:9a:fe:f9:23:ff:51:db:44:75:6a:99:88:7d:94:31
Fingerprint (sha256): 89:ad:8a:08:dc:d9:6b:57:03:67:b6:da:ec:32:02:53:0d:7e:25:d9:70:84:72:a7:df:d4:78:a0:8c:40:7a:58
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate plan.kentei.cc
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plan.kentei.cc
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
plan.kentei.cc
Other certificates including the domain name kentei.cc
(limited to 100 certificates)
*.kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
Certificate
The complete raw certificate details for plan.kentei.cc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISA660YbhjTFAu9mt2GKTK+8euMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTcxOTM5MzlaFw0x OTA0MTcxOTM5MzlaMBkxFzAVBgNVBAMTDnBsYW4ua2VudGVpLmNjMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Rr2wRgB+LHtpZBidFBe/vUXQtzPi4Cc C5bz/6uwL6695kK25lTopdzJMZAuKBqRMtycrB0xaKgpsIeBFiPwhkj4Vu9dw0DK GTZmkE10rwFodpDDgsP+fuOwI3WioFyN9sfRXcpum8bydGoMTVWNuHobXHZyU8qS V35wXjXJ4TiVWZwybXbHoFHWmDfSlVmn7841QQ8n9mZM0850qiOBWvzGeyKIvT/G qDJlbW+0J68WX7AdY7I7y1OkHJZaIbCOGjry/BV1zITkNvuRb+vEo43vyjHcJpfg 57muz8RqpsVgKhUUVCd5LuHC4gpuvHTp4aalUo23GI3SDUdztUQO0NNImaFR0Lc7 gy1Dr87OHRUKxZdJyOcuYCSV497ztc2IbyiTdtncRzDa25KPvml/TDPGN08d5I/i yjrXvzUuZ9Bd5bzkTBmIZnH88UbstADOgnOBPgCTMNk4r1VmVfQdYfpMmtD3qroL E5Bk6gphE7Rwyd1lvWpbOPvvxp4m2pJA8cplTXpsV+vocCn9cnGDiKGjvkt4DC3P C44WRa1oNVIBD+c7ruppDZg7OK7MYVH0MYMvjCcpNyiagxGkCJq6DemqZPjoMI8m kgFmrtW0MiehFUVHU2JAEHCTxOL7wyDtf1FW9uqS2Yx1WU6SJt+l6gB4ErrSR9kN MKSp6iZJXNkCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWzz5 b67+a2um1JqzjkkNckUHpXYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5wbGFuLmtlbnRlaS5jYzBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaF2KcCYA AAQDAEcwRQIgRuYntNe8OMaydb/ZvyAo2/OklFfxmSSzgE0HIntUndUCIQDRWbf8 UOwqbRpfaNOt7N1GLG2U6Op6EFu8ean/d3e+wwB2AGPy283oO8wszwtyhCdXazOk jWF3j711pjixx2hUS9iNAAABaF2KbicAAAQDAEcwRQIhAL9Kf0+M6LnHZd+Tw88F xl72nJkKalG5PnFBsq8WOGn7AiBt9tCQ38FLgI/uG6BkPqb93AV846o+XD37XUU2 hOoEvjANBgkqhkiG9w0BAQsFAAOCAQEAIN+CNLibm/1QUKR3gnGQdvbheqeYWyAV NbqIJgVrdrBTWJES44eU4NRUHVWcmCJux5IqFcuM5LnlOmwX+ntR4EonpU3pazi9 3IruCyfTxkmlwvdiBKBJwbXG5i4VJpE84p6RGibMDkEMnr/Xm0N1ttC2CcPlXoIY 6yvcP+xH/lY5ScIxCKRJx8FIRBHIXNpF+oYCfKdNfWsWYdBxptRSFCJPxh/xQB0Y /ttXAcgVZglAkSElfarotAUVErthrj/dsJNoh0U2iCHkWgffcKa1Dv3HSYZWgOy8 n0It3ln74SSmpmE9XcdZUooMObPU4Jrk/ZqOrkImGG7ulsFBbFlz8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Rr2wRgB+LHtpZBidFBe /vUXQtzPi4CcC5bz/6uwL6695kK25lTopdzJMZAuKBqRMtycrB0xaKgpsIeBFiPw hkj4Vu9dw0DKGTZmkE10rwFodpDDgsP+fuOwI3WioFyN9sfRXcpum8bydGoMTVWN uHobXHZyU8qSV35wXjXJ4TiVWZwybXbHoFHWmDfSlVmn7841QQ8n9mZM0850qiOB WvzGeyKIvT/GqDJlbW+0J68WX7AdY7I7y1OkHJZaIbCOGjry/BV1zITkNvuRb+vE o43vyjHcJpfg57muz8RqpsVgKhUUVCd5LuHC4gpuvHTp4aalUo23GI3SDUdztUQO 0NNImaFR0Lc7gy1Dr87OHRUKxZdJyOcuYCSV497ztc2IbyiTdtncRzDa25KPvml/ TDPGN08d5I/iyjrXvzUuZ9Bd5bzkTBmIZnH88UbstADOgnOBPgCTMNk4r1VmVfQd YfpMmtD3qroLE5Bk6gphE7Rwyd1lvWpbOPvvxp4m2pJA8cplTXpsV+vocCn9cnGD iKGjvkt4DC3PC44WRa1oNVIBD+c7ruppDZg7OK7MYVH0MYMvjCcpNyiagxGkCJq6 DemqZPjoMI8mkgFmrtW0MiehFUVHU2JAEHCTxOL7wyDtf1FW9uqS2Yx1WU6SJt+l 6gB4ErrSR9kNMKSp6iZJXNkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320785758071391168275307552411173798004654 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 19:39:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 19:39:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plan.kentei.cc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885712462170174763420036128503697293753997537669609124906033125361761266586554278123908141895398237348181736453298910758108014276540192624586051768617855702600028000182210443550327432956720304397527520181871600698800203921388713847650536648162432075479388974692850540972834740899355737835127558402815325003639197928294985354096904616176554595701885993523872889478135733661190224956939530179687422174018042757424731058238204071556563606817088104167378498392096594137190449042158358049800389445500078702628496735077203250703688244358845168017203357196244224719379373202990276597900921405472133127497004759968212512784963458529427530638722555567011713271010018614589691786662879909193532545088416907177769565501147346156661925832365801474013789945427338305385277101708253454590028710800007146536124026162141707858711948975258421357056964039279418398974461149345219691514412054880502783274837878740575783752267739403013419400288968794949248100553405783784273677839333367374390150655785038748749709113879423040728338662196234197072984149289589735580988807584220274775719651454949509142149907221106963099761552036282345264479625954883186871009770082305723500024504421786271961029935002342025891165496496022253006676069073970533496099790041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5b3cf96faefe6b6ba6d49ab38e490d724507a576 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.kentei.cc' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001685d8a70260000040300473045022046e627b4d7bc38c6b275bfd9bf2028dbf3a49457f19924b3804d07227b549dd5022100d159b7fc50ec2a6d1a5f68d3adecdd462c6d94e8ea7a105bbc79a9ff7777bec300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001685d8a6e270000040300473045022100bf4a7f4f8ce8b9c765df93c3cf05c65ef69c990a6a51b93e7141b2af163869fb02206df6d090dfc14b808fee1ba0643ea6fddc057ce3aa3e5c3dfb5d453684ea04be . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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