*.ferries-booking.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 2b:0f:e7:6c:9e:0b:9e:b2:0c:c2:1a:41:1b:74:3b:41 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.ferries-booking.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 2b:0f:e7:6c:9e:0b:9e:b2:0c:c2:1a:41:1b:74:3b:41Serial Number (int): 57239382113802079179840399399340751681
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 2d:b2:61:83:3b:23:89:98:1b:d5:b3:9f:a8:2d:b8:a2:56:02:df:95
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 5e:9c:4c:92:21:9c:15:27:fc:b3:1a:84:d9:c4:89:5c:73:b5:97:d6
Fingerprint (sha256): d3:bc:2f:0b:14:aa:3c:71:eb:20:1d:d7:4f:06:a6:27:0a:95:40:18:7e:41:f1:12:d4:dd:2f:20:f0:7a:b5:62
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate *.ferries-booking.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ferries-booking.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ferries-booking.com
ferries-booking.com
ferries-booking.com
Other certificates including the domain name ferries-booking.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.ferries-booking.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIQKw/nbJ4LnrIMwhpBG3Q7QTANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTI0MDMyMjAwMDAwMFoXDTI1MDMzMTIzNTk1OVowIDEeMBwGA1UEAwwVKi5m ZXJyaWVzLWJvb2tpbmcuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEA1xlapRhavnGUKIGkjcfU3gVM44DEcAZjTcOzCx+vug76lpukeJYVcDiSuOUn E4KNrVRADoC/TbdnwGyOjt0bG9Y2nZW1CtOyC1rA3LvCboe7SgQtNKPWJdIoeIDg q7vmYVwJoh0QNhqRIcBoyAuRsaXKDoh9hYoocBGs47LZSbazAZDmpdvPB9I+bJhS kqiUEURKTbHgtPKLB9jk4AVrbccXAaxqlQENMaHTG7NgqfgJVrd1IG98/eeQPC+S I4Z+uILR/hDg94T6yQpvsuQHSKqAK9eGwI3wxIT9YJmQ8XXc51AcMtCt3bR2TPR8 Wve92oahZqkhw6quasj5k6UlOMZyg2liiQig+xfxtyel6XBoJBWL5ZpQJLQueIdc vGRnhJ8a62813sJFuACAwZqqYRRAdg/8qAhd2LZyxhBr5pjycDsDhaNyOOdQalkh +BoSDnexbmvM2rtS3ms+Q8xPIxx9Hi/s9vNZi+6AqMYDvCiGybFJzgIaFE80zaBO ExtKtllHWjczxZQgg+vx+LdPrExkKdkX9m5pLGsKh19dyE3G/0nSkpQp7+Hk9YD6 /oV3ghkzqm84whfJFT34uluo3/zpPuPlbaU8ED0b0h/EeITbeac5ujmic7rHpGpC cv8jEN+R9FD6/U6Ht2YA23wHoBToaF6IvtREBA7RoSomZTcCAwEAAaOCAwswggMH MB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBQtsmGD OyOJmBvVs5+oLbiiVgLflTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE AbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI BgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2Ny dC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNl cnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20w NQYDVR0RBC4wLIIVKi5mZXJyaWVzLWJvb2tpbmcuY29tghNmZXJyaWVzLWJvb2tp bmcuY29tMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDPEVbu1S58r/OHW9lp LpvpGnFnSrAX7KwB0lt3zsw7CAAAAY5lVUG8AAAEAwBGMEQCIFNxHaTYzHfKKTFV UITwZDcuErrl7mn1/HLGWwpOnrIZAiBZ6rKVbOLBDPOhMYQWgpcWuIu7rhbORokD PGCCKcRfLgB3AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjmVV QVQAAAQDAEgwRgIhAJ4u7IDSd0rzq13dXVV/dvkFSEnuMm9jPQ1ucVfmeFfrAiEA qvtc9OaIlxUSJ29ZFOUm0WBm0adnVFrSd1njmS9pBSgAdQBOdaMnXJoQwzhbbNTf P1LrHfDgjhuNacCx+mSxYpo53wAAAY5lVUFCAAAEAwBGMEQCIANvD+Elesqk2t8k uROKSyVxaOjDzxvDHT+itV3sD1toAiB3joKJuy8VSbiLT9B2YovVWgq6PZei6iIa HOPO44wnKjANBgkqhkiG9w0BAQsFAAOCAQEAy6gI9TbchYc0a45wTHoGrNZ7kFOP aPAUR5pGhp+PDtXoVhTo4FqgyysQhkT1qR3lTRv2GXPr4wYE6st5g56D8Dz9LNtF vxAJGodu8akHsRLzZjFdDmJadraeZg5wdmfHhTtc3Gvh/oXclIYcPSektIrKGPbP OlRLSQi9iKWHEDPjSGyAMuWwLGXgsL+1AINZpktIGK/rxGPwis5ym7yR2Q13jGCt 83UbGIbNqc2uKSeM4L77CFzbTHgTzOIUP8rQaE9gOlVt0/XXiaeRO/Vz/Ha903CG +0qYzOPQzEDgI5iA/jlSg5CwTrW80CQWGJVA7IDXapSGU2n1B11JXGW9Kg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1xlapRhavnGUKIGkjcfU 3gVM44DEcAZjTcOzCx+vug76lpukeJYVcDiSuOUnE4KNrVRADoC/TbdnwGyOjt0b G9Y2nZW1CtOyC1rA3LvCboe7SgQtNKPWJdIoeIDgq7vmYVwJoh0QNhqRIcBoyAuR saXKDoh9hYoocBGs47LZSbazAZDmpdvPB9I+bJhSkqiUEURKTbHgtPKLB9jk4AVr bccXAaxqlQENMaHTG7NgqfgJVrd1IG98/eeQPC+SI4Z+uILR/hDg94T6yQpvsuQH SKqAK9eGwI3wxIT9YJmQ8XXc51AcMtCt3bR2TPR8Wve92oahZqkhw6quasj5k6Ul OMZyg2liiQig+xfxtyel6XBoJBWL5ZpQJLQueIdcvGRnhJ8a62813sJFuACAwZqq YRRAdg/8qAhd2LZyxhBr5pjycDsDhaNyOOdQalkh+BoSDnexbmvM2rtS3ms+Q8xP Ixx9Hi/s9vNZi+6AqMYDvCiGybFJzgIaFE80zaBOExtKtllHWjczxZQgg+vx+LdP rExkKdkX9m5pLGsKh19dyE3G/0nSkpQp7+Hk9YD6/oV3ghkzqm84whfJFT34uluo 3/zpPuPlbaU8ED0b0h/EeITbeac5ujmic7rHpGpCcv8jEN+R9FD6/U6Ht2YA23wH oBToaF6IvtREBA7RoSomZTcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 57239382113802079179840399399340751681 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ferries-booking.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877527520049370291130219427400678931093916324747581815107052463966277041876643192727910010962918036276641871644033481664406738644796912701363398882582001584852722647814880777875428892530716550638036391480574426028100209892944653254232967692861325031317546066349265565823423321317508812590304655356254660188531489618968189895458716559534238445819973652588669248813719250104138293176923738289244646226948994627138201174219995874368443156830317432175037117988918177564761012914547078113476126091959159723477767548358738169677788658917514076722532551250697202864289264281993964031553585132330355048490900386658207723647676102665640844010689799214586107637042588492043046504130328108850200164533341347635274518506586737372915681865358815634253059100780537603512208022018659869358280114482883813971795877338299475227195812094597003745317227471605558183874762927261141345765409988700325507373280291324766307805112895033211790294825868325125994408512012132156366096248949967554434629028122834966502848670639497774892626129092224509004512809994281993814622287757820295710986533564045733235250335877632840156121703166438713575538909659457158819279526283706449853945625523386165694790211316493213554737204101255512900060797797286065109522081079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2db261833b2389981bd5b39fa82db8a25602df95 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferries-booking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferries-booking.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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