www.craniocheck.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:70:37:7c:8c:ff:ad:37:43:0c:d6:06:af:a8:df:b5:76 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.craniocheck.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e6:70:37:7c:8c:ff:ad:37:43:0c:d6:06:af:a8:df:b5:76
Serial Number (int): 426863249756901824863798942788308218918262
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:da:67:f8:1e:e7:c3:42:26:a0:d8:c7:0b:de:13:70:30:54:bf:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:0f:06:52:8f:cf:74:99:ca:ea:68:7a:ca:f8:68:ee:66:57:09:80
Fingerprint (sha256): 98:fb:b0:51:c8:55:3b:25:5e:79:a4:2b:de:07:ac:b2:12:a3:6d:54:11:91:b7:b2:ae:a8:b1:8f:65:09:c0:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.craniocheck.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.craniocheck.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aktionsmgmt.de
*.aqua-lyros.com
*.bredemeier.io
*.danielegilardi.ch
*.darkcial.de
*.duygusbeauty.de
*.eko40-immobilien.de
*.foerderverein-cadillac.de
*.genial-software.de
*.glycerin-ge.de
*.isang90.de
*.lorenzschleske.de
*.maxxframe.de
*.medienspatzen.de
*.skybox-entertainment.de
*.vineta-heidelberg.de
*.xn--hhnermobil-allhusen-59b.de
020.icekey.org
aktionsmgmt.de
aqua-lyros.com
bandsasquatch.de
betrug.drjustusadam.de
bredemeier.io
danielegilardi.ch
darkcial.de
duygusbeauty.de
eko40-immobilien.de
foerderverein-cadillac.de
genial-software.de
glycerin-ge.de
handtuch.sonokowitsch.de
isang90.de
lima-premium.de
lorenzschleske.de
maxxframe.de
medienspatzen.de
neurobotics.org
peterschlenker.de
skybox-entertainment.de
thbohlen.de
updates.caismedia.de
vineta-heidelberg.de
wordpress.katharina-on-tour.de
www.ahnenforschung-noll.de
www.craniocheck.com
www.dolierte.de
www.gutturalzine.net
www.inter-vista.de
www.mcwerneuchen1906ev.de
www.updates.caismedia.de
xn--hhnermobil-allhusen-59b.de

Other certificates including the domain name craniocheck.com

(limited to 100 certificates)
a3.prankson.net
www.janniknies.lima-city.de
www.gosys.ch
greentale.lima-city.de
ferdinand9.lima-city.de
*.kasmodo.de
www.bitperfect.at
fosbos-nu.lima-city.de
www.socialdaygame.de
funbilder.lima-city.de
www.isenringen.ch
nici217.lima-city.de
craniocheck.com
rames.lima-city.de
cms.antimarder.com
service.antimarder.com
*.mister-akomi.com
www.craniocheck.com
andreas-immobilien.net
www.craniocheck.com
mkt.antimarder.com
www.craniocheck.com
andreas-immobilien.net
www.craniocheck.com
www.craniocheck.com
kasmodo.com
ivhbk-hameln.de
www.craniocheck.com
krzak90.lima-city.de
*.frauimdauerstress.de
*.frauimdauerstress.de
www.craniocheck.com
www.gerdklimpel.12hp.de
craniocheck.ch
whitewolfy.lima-city.de
www.craniocheck.com
www.automobile-butler.de
www.craniocheck.com
www.clancx.lima-city.de
www.craniocheck.com

Certificate

The complete raw certificate details for www.craniocheck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfMXF8dC3D55lgmQnEe2mtZkmkSrp
541VRkaor8n3wwg0qBSg0gld1WkNZROL5RYYwxE7Lpu2E/Nj/R01x00hsQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426863249756901824863798942788308218918262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 08:06:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-09 08:06:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.craniocheck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047cc5c5f1d0b70f9e6582642711eda6b59926912ae9e78d554646a8afc9f7c30834a814a0d2095dd5690d65138be51618c3113b2e9bb613f363fd1d35c74d21b1
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9eda67f81ee7c34226a0d8c70bde13703054bfc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktionsmgmt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqua-lyros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bredemeier.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielegilardi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkcial.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duygusbeauty.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eko40-immobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foerderverein-cadillac.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genial-software.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glycerin-ge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isang90.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorenzschleske.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxxframe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medienspatzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skybox-entertainment.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vineta-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hhnermobil-allhusen-59b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '020.icekey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktionsmgmt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-lyros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandsasquatch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betrug.drjustusadam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bredemeier.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielegilardi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkcial.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duygusbeauty.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eko40-immobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foerderverein-cadillac.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genial-software.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glycerin-ge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handtuch.sonokowitsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isang90.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lima-premium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenzschleske.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxxframe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medienspatzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurobotics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterschlenker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skybox-entertainment.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thbohlen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.caismedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineta-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress.katharina-on-tour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahnenforschung-noll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craniocheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolierte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gutturalzine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inter-vista.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcwerneuchen1906ev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.updates.caismedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hhnermobil-allhusen-59b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f66e77ac30000040300473045022027cf1a851b5299c9d4dd2b93c24ce7406e97b3925792c67e91622f9435be67cf022100cd2d8318a2b7182f5e026d1917837a6542fcad5a7184f035d2b815a1492033cc007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f66e77b850000040300463044022038baf30b01acb9510faa6046afb1d9dbded11bd3b9c03f8a4a5c847c47e8ac61022011b2ab35605c62e9cdb5fae03bf4fbfb986b5dc02684ab6c9325665948f21909
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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