link.globalspec.com
Issued by R3
About this certificate
This digital certificate with serial number 03:79:39:de:1d:b7:ee:a5:7f:92:62:4e:16:c9:40:7f:6c:ca was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=link.globalspec.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:79:39:de:1d:b7:ee:a5:7f:92:62:4e:16:c9:40:7f:6c:caSerial Number (int): 302587943481139118708976460977246224477386
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 26:b0:56:85:1a:be:e4:3e:ef:a6:e2:3e:7d:b9:ff:34:c1:1f:31:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2b:7e:a8:8c:49:51:d1:35:1b:ea:dc:e5:1e:ae:2c:e9:b8:87:42:84
Fingerprint (sha256): a6:2a:1f:81:1b:f2:f2:32:9b:2f:9a:c8:69:18:a9:0a:af:3e:f5:b5:73:fc:bb:dd:97:b5:6f:94:9e:4e:df:df
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate link.globalspec.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for link.globalspec.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
link.globalspec.com
Other certificates including the domain name globalspec.com
(limited to 100 certificates)
tls.automattic.com
secure.globalspec.com
incapsula.com
catalyst.globalspec.com
uc18.janrainengage.com
ssl478190.cloudflaressl.com
ssl478189.cloudflaressl.com
partimages.globalspec.com
incapsula.com
globalspec.com
login.catalyst.globalspec.com
*.globalspec.com
incapsula.com
ssl478191.cloudflaressl.com
ssl478190.cloudflaressl.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
tls.automattic.com
secure.globalspec.com
ssl478191.cloudflaressl.com
www2.globalspec.com
filedrop.globalspec.com
tls.automattic.com
saa.globalspec.com
www.globalspec.com
tls.automattic.com
tls.automattic.com
globalspec.com
static.globalspec.com
uc18.janrainengage.com
incapsula.com
webmail.globalspec.com
login.catalyst.globalspec.com
uc18.janrainengage.com
incapsula.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
sni.cloudflaressl.com
www.globalspec.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
mail.globalspec.com
login.catalyst.globalspec.com
vpn.globalspec.com
tls.automattic.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
incapsula.com
login.demo.catalyst.globalspec.com
marketingmaven.globalspec.com
incapsula.com
sni.cloudflaressl.com
uc18.janrainengage.com
static.globalspec.com
tls.automattic.com
www.globalspec.com
www.globalspec.com
tls.automattic.com
incapsula.com
incapsula.com
uc18.janrainengage.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
atlas-product-store.globalspec.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
tls.automattic.com
saa.globalspec.com
uc18.janrainengage.com
uc18.janrainengage.com
link.globalspec.com
login.catalyst.globalspec.com
tls.automattic.com
saa.globalspec.com
tls.automattic.com
*.globalspec.com
tls.automattic.com
globalspec.com
tls.automattic.com
incapsula.com
partimages.globalspec.com
tls.automattic.com
marketingmaven.globalspec.com
www.globalspec.com
uc18.janrainengage.com
tls.automattic.com
www2.globalspec.com
tls.automattic.com
tls.automattic.com
marketingmaven.globalspec.com
login.catalyst.globalspec.com
tls.automattic.com
tls.automattic.com
globalspec.com
secure.globalspec.com
incapsula.com
catalyst.globalspec.com
uc18.janrainengage.com
ssl478190.cloudflaressl.com
ssl478189.cloudflaressl.com
partimages.globalspec.com
incapsula.com
globalspec.com
login.catalyst.globalspec.com
*.globalspec.com
incapsula.com
ssl478191.cloudflaressl.com
ssl478190.cloudflaressl.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
tls.automattic.com
secure.globalspec.com
ssl478191.cloudflaressl.com
www2.globalspec.com
filedrop.globalspec.com
tls.automattic.com
saa.globalspec.com
www.globalspec.com
tls.automattic.com
tls.automattic.com
globalspec.com
static.globalspec.com
uc18.janrainengage.com
incapsula.com
webmail.globalspec.com
login.catalyst.globalspec.com
uc18.janrainengage.com
incapsula.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
sni.cloudflaressl.com
www.globalspec.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
mail.globalspec.com
login.catalyst.globalspec.com
vpn.globalspec.com
tls.automattic.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
incapsula.com
login.demo.catalyst.globalspec.com
marketingmaven.globalspec.com
incapsula.com
sni.cloudflaressl.com
uc18.janrainengage.com
static.globalspec.com
tls.automattic.com
www.globalspec.com
www.globalspec.com
tls.automattic.com
incapsula.com
incapsula.com
uc18.janrainengage.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
atlas-product-store.globalspec.com
tls.automattic.com
www.globalspec.com
tls.automattic.com
tls.automattic.com
saa.globalspec.com
uc18.janrainengage.com
uc18.janrainengage.com
link.globalspec.com
login.catalyst.globalspec.com
tls.automattic.com
saa.globalspec.com
tls.automattic.com
*.globalspec.com
tls.automattic.com
globalspec.com
tls.automattic.com
incapsula.com
partimages.globalspec.com
tls.automattic.com
marketingmaven.globalspec.com
www.globalspec.com
uc18.janrainengage.com
tls.automattic.com
www2.globalspec.com
tls.automattic.com
tls.automattic.com
marketingmaven.globalspec.com
login.catalyst.globalspec.com
tls.automattic.com
tls.automattic.com
globalspec.com
Certificate
The complete raw certificate details for link.globalspec.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgISA3k53h237qV/kmJOFslAf2zKMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjcwNTU3MjBaFw0yMzEyMjYwNTU3MTlaMB4xHDAaBgNVBAMT E2xpbmsuZ2xvYmFsc3BlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCx9A+D3CjW7yd7RpEfoIxN2bF/ukUHhLNJ9xBe3VTu36orQpPVCYA8MNFa 5moUdAy5t5i6Yt2hSfViSBGz72B1Db9SEQaDIDp58bY6dhKMH/n1sQwVIUfhWrq1 vR/RkoN6UUUdNVb/fztGhUOrg3pKsOJ5YiYEdh8NIQgpfLgaJ7cQUFAQ/7JDgNnm fSQ5rVsM39ApLSOuTc+mfNdXKSayPQdEYJf/4mqt5Uk7TYa0+33pykAEcRPj4C3g bielXcfbClmmIEoUZ9lzCO5j1KCaYy+Ics7QlWnDYzLeaA8l46OaKlIykFapbnFs 8mKn9rJqhE8fNF3ZQeWNnDQkuz4dAgMBAAGjggIVMIICETAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFCawVoUavuQ+76biPn25/zTBHzFEMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMB4GA1UdEQQXMBWCE2xpbmsuZ2xvYmFsc3BlYy5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQB6MoxU2LcttiDq OOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYrVbYoVAAAEAwBGMEQCIGCEOC55mZ/C IWsK4JZ3Qr8pXyZZUyRXfL0OWg7oJJxpAiA6N2PvTuAIVYMUGv//wKQwOtvR+4Bq i4h0vsmwjCZU3QB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAAB itVtig0AAAQDAEgwRgIhAPo1+sl1765gItSUiyanuwxvxnFU+53fJTZl8HGOxkIp AiEAt9+0rQV21bzr8YfJU02czRl1sjXJ5ZDvtkI2Z1DxmpEwDQYJKoZIhvcNAQEL BQADggEBADV4r1Xw4XMEjQEea8KCudyGD9KZW+jEo+eRFDmvfeIhqJaPulf1E2l6 WHGmW2jYHeHjiqD1uOVy6+PiJ62geGk1AVGYdl5lrXHAwpOeo9tjsi0Vx2FwrXhX J5VY/MsmutRVR7HefBfh0WMPyHX6TFkvtQohhjdt5jfjQyh2z2n8Yo3VqRVrsXii 9SEGFTRCVRnPpGSPd6rylsI0ydpoOFGRxguRpEnpLdNC1V0OXIbYyd3TspJHU+bl F3d5ajtkfadAMXdzGLlUE6wcWMHetxY98+cJNlO6bDihHdWb5H5Hyq/mPdtP1SMp xfqLEKyT/G64DRe0lkKIYHR9XLsfq6U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfQPg9wo1u8ne0aRH6CM Tdmxf7pFB4SzSfcQXt1U7t+qK0KT1QmAPDDRWuZqFHQMubeYumLdoUn1YkgRs+9g dQ2/UhEGgyA6efG2OnYSjB/59bEMFSFH4Vq6tb0f0ZKDelFFHTVW/387RoVDq4N6 SrDieWImBHYfDSEIKXy4Gie3EFBQEP+yQ4DZ5n0kOa1bDN/QKS0jrk3PpnzXVykm sj0HRGCX/+JqreVJO02GtPt96cpABHET4+At4G4npV3H2wpZpiBKFGfZcwjuY9Sg mmMviHLO0JVpw2My3mgPJeOjmipSMpBWqW5xbPJip/ayaoRPHzRd2UHljZw0JLs+ HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302587943481139118708976460977246224477386 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 05:57:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 05:57:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'link.globalspec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22464530749234119545438305788476061271804243258646660899635083047517699617805577241261118973071422588718099845253957156918191457861800953658352601685308557628438369792314335994268279392915552721777751701923884175405162555981245769484130895809226813869186407397956861807563979591043371059373715304846821670343276368505967897930236922195589072326746143485342630842525481753224624484665660381425624944058317862947785877751310952946467545784977000546683982005194856515067387604639066500928959688966597805226109946488870900896811142094866968784829153643418948625822564889591095174301702473006377946232598968896326247071261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 26b056851abee43eefa6e23e7db9ff34c11f3144 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.globalspec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad56d8a15000004030046304402206084382e79999fc2216b0ae0967742bf295f26595324577cbd0e5a0ee8249c6902203a3763ef4ee0085583141affffc0a4303adbd1fb806a8b8874bec9b08c2654dd007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad56d8a0d0000040300483046022100fa35fac975efae6022d4948b26a7bb0c6fc67154fb9ddf253665f0718ec64229022100b7dfb4ad0576d5bcebf187c9534d9ccd1975b235c9e590efb642366750f19a91 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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