sonar.ws
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ee:05:5d:60:99:1f:6c:cd:78:5d:d9:43:ba:84:77:dc:48 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sonar.ws
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ee:05:5d:60:99:1f:6c:cd:78:5d:d9:43:ba:84:77:dc:48Serial Number (int): 342331192105293818947330112663554778192968
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2f:96:8b:04:a4:be:b4:1a:6e:69:13:a0:6c:17:c6:af:d1:05:02:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fb:a7:82:fd:c0:08:a7:d4:30:8d:79:47:99:52:9a:5d:7c:6e:9c:32
Fingerprint (sha256): d0:9d:19:27:d7:a0:0e:aa:fe:04:22:3b:ff:56:2a:68:df:69:85:d1:20:81:a8:ea:b4:52:34:17:58:a3:e0:cd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sonar.ws
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sonar.ws
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sonar.ws
www.sonar.ws
www.sonar.ws
Other certificates including the domain name sonar.ws
(limited to 100 certificates)
sni.cloudflaressl.com
hr.digital-studios.ca
sonar.ws
employees.boldercontracting.com
sonar.ws
sonar.ws
sonar.ws
hr.digital-studios.ca
sonar.ws
sni.cloudflaressl.com
hr.digital-studios.ca
hr.digital-studios.ca
sonar.ws
hr.digital-studios.ca
hr.digital-studios.ca
employees.boldercontracting.com
app.sonar.ws
hr.digital-studios.ca
sonar.ws
sonar.ws
hr.digital-studios.ca
sonar.ws
hr.digital-studios.ca
sonar.ws
employees.boldercontracting.com
sonar.ws
hr.digital-studios.ca
app.sonar.ws
hr.digital-studios.ca
hr.digital-studios.ca
hr.digital-studios.ca
sonar.ws
sonar.ws
hr.digital-studios.ca
sonar.ws
sonar.ws
employees.boldercontracting.com
employees.boldercontracting.com
sonar.ws
personal.sonar.ws
app.sonar.ws
employees.boldercontracting.com
sonar.ws
hr.digital-studios.ca
hr.digital-studios.ca
employees.boldercontracting.com
sonar.ws
www.sonar.ws
sonar.ws
employees.boldercontracting.com
hr.digital-studios.ca
sonar.ws
employees.boldercontracting.com
sonar.ws
sonar.ws
sonar.ws
hr.digital-studios.ca
sonar.ws
sni.cloudflaressl.com
hr.digital-studios.ca
hr.digital-studios.ca
sonar.ws
hr.digital-studios.ca
hr.digital-studios.ca
employees.boldercontracting.com
app.sonar.ws
hr.digital-studios.ca
sonar.ws
sonar.ws
hr.digital-studios.ca
sonar.ws
hr.digital-studios.ca
sonar.ws
employees.boldercontracting.com
sonar.ws
hr.digital-studios.ca
app.sonar.ws
hr.digital-studios.ca
hr.digital-studios.ca
hr.digital-studios.ca
sonar.ws
sonar.ws
hr.digital-studios.ca
sonar.ws
sonar.ws
employees.boldercontracting.com
employees.boldercontracting.com
sonar.ws
personal.sonar.ws
app.sonar.ws
employees.boldercontracting.com
sonar.ws
hr.digital-studios.ca
hr.digital-studios.ca
employees.boldercontracting.com
sonar.ws
www.sonar.ws
sonar.ws
employees.boldercontracting.com
Certificate
The complete raw certificate details for sonar.ws in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISA+4FXWCZH2zNeF3ZQ7qEd9xIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDIwNDA0MjVaFw0x ODEyMDEwNDA0MjVaMBMxETAPBgNVBAMTCHNvbmFyLndzMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAu8zErY87K7r3CtI3WlSi2l8ALHd7GygNqqafqfVa sq+6D4NeAcoXenaprHSa9vnO1X+ukXc9rdnbCU8OujCqKggL1ZjD1lOn/9r6vyHd jTGt4I1w8InwGx0L1uqMsOBtYcOnDF66WD6CafSC/Ji+vBh54LP58uIDjrrw4+TY lxx0caBPyLjjXOKuauD2VmfX7KwaMFV1WuX8HwrW1x4p2XlB6gb3B4VQ3R6gpydg +Qs0bX51QuVpXYffH0jZdu8/cuaPq+mLBVSCPrMWSTwcEubjdD2BZWdxPpGDcxzN hM4bK18otVWkAL/307vll2/EaGMHGVRDmRMjNQfXkcvnHwIDAQABo4IDHjCCAxow DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQvlosEpL60Gm5pE6BsF8av0QUCCTAfBgNV HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEG A1UdEQQaMBiCCHNvbmFyLndzggx3d3cuc29uYXIud3Mwgf4GA1UdIASB9jCB8zAI BgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRp ZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGll cyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBv bGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5 LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4 cCUIFy+jqh0HE9MMAAABZZiq9MQAAAQDAEcwRQIgTzaObgcRuh8dQyH39Qtk07mh W3tcjumk+KVaqUJFOYUCIQC+6JemSp15rtdlaZMsP1GtBZapwAs3JDgQZz8jzFe5 0QB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZZiq9gcAAAQD AEcwRQIhAOsfVhRiiIz1hHDUmgvgshtTdP4tCpX99n4vvP1Kv9T5AiBM9QHC1m5x n5z1wnQZ5IHrM5xHPlbkBvlg70p0W22ARTANBgkqhkiG9w0BAQsFAAOCAQEAmp2d i12GZjfSz4BIrydqV6dd6DD3qochyCPLPJRS0nAbfjDIuQv1oRp4za5GtXCd0Y4L gIfDaUQiqvx0gEh8l6pwcv9YW9gUPpMnRk7wQ2X0DhZbEr66Y6ohMyg5XsbuI4Ji 4dQdODcyRMIwrn2g4L1tZJaJKSZuKGXkadZffOMBKRC7fjN22L9L2Z9/YDr1W9O/ wY1AjNTWWV7hMjx2Cb9mtDgZmdEoxvkvuQ0sb5TibkEa5LMUdAd5jl+xpoXffiaE rCHfIZWbRZHc3LQ2M5HsKl9mB7JgiZYJXwid+LJXqCJC9bnrqKI7yEtcKwv/1yx7 EmscTY/nIHKUMXvivA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8zErY87K7r3CtI3WlSi 2l8ALHd7GygNqqafqfVasq+6D4NeAcoXenaprHSa9vnO1X+ukXc9rdnbCU8OujCq KggL1ZjD1lOn/9r6vyHdjTGt4I1w8InwGx0L1uqMsOBtYcOnDF66WD6CafSC/Ji+ vBh54LP58uIDjrrw4+TYlxx0caBPyLjjXOKuauD2VmfX7KwaMFV1WuX8HwrW1x4p 2XlB6gb3B4VQ3R6gpydg+Qs0bX51QuVpXYffH0jZdu8/cuaPq+mLBVSCPrMWSTwc EubjdD2BZWdxPpGDcxzNhM4bK18otVWkAL/307vll2/EaGMHGVRDmRMjNQfXkcvn HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342331192105293818947330112663554778192968 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-02 04:04:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 04:04:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sonar.ws' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23707538027610762497176871508607308760555535866850457012086954833853845372000547249939083000255439233867122556810373729714485458691131381199487915481626832208189462152666310352650810446181288409385049050343039951088531483558859165537797827303295442730808168327387118739751934612640636074602668397679891690038659770522177571067104413627069856734875255747671142676370900986324315149070642339609652973443189529898384461456987503149630836399321284056334673773603517367369289598714951080891587231587122287688826356222789972351874126022856480218555832688551186774836294068812763315724018358224654045759587343549888692217631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f968b04a4beb41a6e6913a06c17c6afd1050209 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonar.ws' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonar.ws' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016598aaf4c4000004030047304502204f368e6e0711ba1f1d4321f7f50b64d3b9a15b7b5c8ee9a4f8a55aa942453985022100bee897a64a9d79aed76569932c3f51ad0596a9c00b37243810673f23cc57b9d1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016598aaf6070000040300473045022100eb1f561462888cf58470d49a0be0b21b5374fe2d0a95fdf67e2fbcfd4abfd4f902204cf501c2d66e719f9cf5c27419e481eb339c473e56e406f960ef4a745b6d8045 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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