plan.kentei.cc
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:54:c5:b1:99:db:19:40:6f:e9:b8:05:3b:72:9a:54:f4:14 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=plan.kentei.cc
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:54:c5:b1:99:db:19:40:6f:e9:b8:05:3b:72:9a:54:f4:14Serial Number (int): 377295642620680858583192849720771758846996
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ff:4c:d4:79:9d:68:9b:b7:30:4a:84:c5:5a:5c:bc:d1:d9:23:b9:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bf:e3:7b:69:6e:af:1a:b1:79:da:d8:b4:92:bc:2c:c0:c3:68:d6:31
Fingerprint (sha256): 8a:b6:07:17:ae:1b:54:c3:19:3e:04:71:48:9e:40:4e:65:44:b6:0e:32:4b:70:42:a5:fb:56:31:5f:4a:f7:38
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate plan.kentei.cc
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plan.kentei.cc
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
plan.kentei.cc
Other certificates including the domain name kentei.cc
(limited to 100 certificates)
*.kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
dev.kentei.cc
plan.kentei.cc
plan.kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
*.kentei.cc
kentei.cc
plan.kentei.cc
dev.kentei.cc
kentei.cc
*.kentei.cc
dev.kentei.cc
dev.kentei.cc
ssl.kentei.cc
kentei.cc
kentei.cc
kentei.cc
plan.kentei.cc
plan.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
*.kentei.cc
dev.kentei.cc
ssl.kentei.cc
dev.kentei.cc
plan.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
dev.kentei.cc
kentei.cc
plan.kentei.cc
kentei.cc
biz.kentei.cc
*.kentei.cc
kentei.cc
Certificate
The complete raw certificate details for plan.kentei.cc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISBFTFsZnbGUBv6bgFO3KaVPQUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTMyMjAwNTdaFw0y MDAyMTEyMjAwNTdaMBkxFzAVBgNVBAMTDnBsYW4ua2VudGVpLmNjMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv0c+3AnfVuqhueH9TsReJXNUQyXUxYJP jshfb+36nj7g85HhtlbbFeE6Nay48LvJpnEVCxJ7t4/UwaBixL+fUOrHIOUcKrFj /pgcdO1ZAqbGY9K6omAhLu7T9785GYBk8a04L2Ph3R8swh3zS9RJoOMDwdICFIoe uejnz6HyE7UOQyC9Ad1zFZJpXLT8wO53tXQ8lNBxCC2GQwbkkHJ46NvYb7l7FdLO cQ4ttOkf3S1w+uo+ynlupj/8Vk5GmHnahj+t6DDZu7qPrNVtEoGRLMvKhnMaZzXz M+L9pZaC/628DTujqCrlD0IH166NQ8y/0X3CygMdFXwXnI3yUmmJiZO2TLBfzi+Z kCiTyN7Z0faLUrSq1ZpAHn4578bWbtpbBjPrk3K6vTYHIkSjobUk/rTR/I+AgeX3 jbmZDhP3b3U2yHUtAHDlFeL76juWB9DQjxhnpp8f+X4p1ESPUdtitQPrbbULStJY NnmFIv8WrNNEUQXPggVim/Dip2iSSKldWCy8truFcEuSSLZeYlKMdTq6PWbweKgU +1cDVVkLgtZVm/sbfBf3U7a9pfFrJ+tkr1jtSE+kcgF5pSzaBySZPRwqMSD2zdyF MLs1eGJgWFavxiwyzKcGt9BYCQpGLByfAh4bMqyhAoJKoZa7SJk16Uf/UmOOBLmU PUl532EbiPcCAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/0zU eZ1om7cwSoTFWly80dkjuSgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5wbGFuLmtlbnRlaS5jYzBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbmb/mUoA AAQDAEcwRQIgNgfCxX5DitTtNOgOFBFE1QoCKMg9NTgZutJlQD5y2OYCIQCyUVRW c6IZC0JUyj80uwZHksmks9nZNLVXCIeMHXOA8AB3APCVpFnyANGCQBAtL5OIjq1L /h1H45nh0DSmsKiqjrJzAAABbmb/mcoAAAQDAEgwRgIhANdfFCcmuG0Cuae38l1X tx6G7NpMHJ5IkxU4Z2Qxkj87AiEA1xih6RxzMUQG+OseIxdFMB6BCAg0s2Tfe8Lh 6U6lotEwDQYJKoZIhvcNAQELBQADggEBAGjqgclqaX9obog9ndzfSsHhoHoX+F1z hH3KtwSs+27/qHv2dApOzolp7ki1B2wdQzHW0gqTxH2TKGsSvtUirXqwP5G0lUz+ UJaXm70P6DOP/x0JkQkQQDKFx947/rwRynNGlvpBL3steii+c/RJbLRcyVOY4Jk4 X8HAk85PfJlfvTQeWqDBNy2jHGqKoWuYUPDyh4po3Wdcs/81HlMgtSne4oSbxeUe 0ma97UJAI6X1jqYceqsVsjVWx7NnTZyAyfnQ1j/pqiqkX8c/akOv3PxPelSBTtSx 2dCOnJJrD9vXV9CeK5UDP7Ax9bZzHhhtWRZGhOj/Fq9VRXg1ufrY6E4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv0c+3AnfVuqhueH9TsRe JXNUQyXUxYJPjshfb+36nj7g85HhtlbbFeE6Nay48LvJpnEVCxJ7t4/UwaBixL+f UOrHIOUcKrFj/pgcdO1ZAqbGY9K6omAhLu7T9785GYBk8a04L2Ph3R8swh3zS9RJ oOMDwdICFIoeuejnz6HyE7UOQyC9Ad1zFZJpXLT8wO53tXQ8lNBxCC2GQwbkkHJ4 6NvYb7l7FdLOcQ4ttOkf3S1w+uo+ynlupj/8Vk5GmHnahj+t6DDZu7qPrNVtEoGR LMvKhnMaZzXzM+L9pZaC/628DTujqCrlD0IH166NQ8y/0X3CygMdFXwXnI3yUmmJ iZO2TLBfzi+ZkCiTyN7Z0faLUrSq1ZpAHn4578bWbtpbBjPrk3K6vTYHIkSjobUk /rTR/I+AgeX3jbmZDhP3b3U2yHUtAHDlFeL76juWB9DQjxhnpp8f+X4p1ESPUdti tQPrbbULStJYNnmFIv8WrNNEUQXPggVim/Dip2iSSKldWCy8truFcEuSSLZeYlKM dTq6PWbweKgU+1cDVVkLgtZVm/sbfBf3U7a9pfFrJ+tkr1jtSE+kcgF5pSzaBySZ PRwqMSD2zdyFMLs1eGJgWFavxiwyzKcGt9BYCQpGLByfAh4bMqyhAoJKoZa7SJk1 6Uf/UmOOBLmUPUl532EbiPcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 377295642620680858583192849720771758846996 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 22:00:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 22:00:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plan.kentei.cc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780347393808727102210750062421944177116320587074153485200399230987446030696114217086495918535592244733280904180309314658126305365528443962271472961682490189630250623365926783574012073125091385495703005919948885023555965672919900095841070767182602381439067901368806489614363151876053005868060933436141043138559766033314993930277465204578393424398616559134766314320454338473641161074172225273383083981458017852238093263337445895102079641049434784822092890318147470021288074386653010912774329509945183404040904384378046481774711865970850982679160614322398986291318262395484308113662911975080223039980258940618684158854500825475851826633365202894337333605266299810086048563500956834239317045034793327950548472620859687199031421634236384734802084016988563006466705791534506451523764528795411679324349222055336687589204758750669661259798316990861900387956221316410122979185875245339345902121498757768763810947554905534592813956170806158301382477782613788504599474267436062078013006319162822237020185804907264126028118305662435607395233577370339017996909041720206221569927460639817238921673844078516239094534377201575305441376494679856204384089557148593198743649747630054940928504530533937370143396397196562865432573426441828028190027385079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff4cd4799d689bb7304a84c55a5cbcd1d923b928 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.kentei.cc' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e66ff994a000004030047304502203607c2c57e438ad4ed34e80e141144d50a0228c83d353819bad265403e72d8e6022100b251545673a2190b4254ca3f34bb064792c9a4b3d9d934b55708878c1d7380f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e66ff99ca0000040300483046022100d75f142726b86d02b9a7b7f25d57b71e86ecda4c1c9e48931538676431923f3b022100d718a1e91c73314406f8eb1e231745301e81080834b364df7bc2e1e94ea5a2d1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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