hydratight.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:ce:3d:9a:1e:03:96:19:8d:31:c2:a3:04:af:bb:3b:be was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hydratight.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:ce:3d:9a:1e:03:96:19:8d:31:c2:a3:04:af:bb:3b:be
Serial Number (int): 322861824664158760409933972698903535631294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:09:5c:14:1d:aa:e6:a1:3c:c7:ca:15:91:85:29:96:86:8e:4f:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:6e:f9:95:cd:59:41:08:46:de:51:cf:d0:29:31:9a:e3:f9:a0:d1
Fingerprint (sha256): ff:ec:12:bd:4f:11:94:39:1b:1b:fb:2c:c1:06:f9:83:e5:4f:02:7f:e4:cf:61:b8:3d:2b:da:f7:0a:56:1d:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hydratight.ca

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hydratight.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4irwallet.com
barberquarter.com
bearsofficial.com
chat4vip.com
cretefire.com
crisisfinancialanalysts.com
ecommerceconnection.com
fundofus.com
goldexchangerates.com
healthycandybarsreimagined.com
hempislife.com
home4vip.com
houstoncommericalplumbing.com
hydratight.ca
lawntv.com
legalcosmos.com
miamiorlandotours.com
michigancnatraining.com
ms.cosfacts.org
mypsprt.com
narock.com
ofcryptos.com
ofwtalk.com
oohfoundation.com
philadelphiachristianschools.com
privatehousestaysuk.com
progolfaccessories.com
realtychisholmtrail.com
redtrac.com
resortnews.com
rxliver.com
sanantoniocondostore.com
sasfoundation.org
scentifique.com
servicefaq.com
shibariumindex.com
stamina.com
startupforvip.com
tech6g.com
templatesmachine.com
thealternativepac.org
wegive1.com
www.alpacablanket.com
www.shapefashion.org
www.unsugaryourmind.com
youngpersonrehab.com
youroursmine.org
yourownsignaturecolor.com

Other certificates including the domain name hydratight.ca

(limited to 100 certificates)
hydratight.ca
hydratight.ca
bramptonhomebuyers.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
medicusshop.com.34725625397.ca
hydratight.ca
www.hydratight.ca
ticketsdirect.ca
hydratight.ca
medicusshop.com.34725625397.ca
virtualblackbook.com.finland.biz.hydratight.ca
westernaesthetics.com.hydratight.ca
bramptonhomebuyers.ca
bramptonhomebuyers.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
hydratight.ca
f1xed.com.hydratight.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
hydratight.ca

Certificate

The complete raw certificate details for hydratight.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueK/5K9MqyACTlJnX1fE
/iecycFAJ7U8E7FW4r6Pr7IkvUznYTKZ8vMaHCumo6ysjFbnYTSS6Ft17QNWwHBP
EDCKLNKtl2x9/sh//toJ3iKfyeo14PJ+jL4F3xvZvsBVXb2pyVZKd509gNQrJiNe
QFNoiC0c0esRjVPAf1k5lKgP/o/ZODCozCGvHiPVXrxnvELDLQ9wAdZ/d+5zvvtu
85kQ1h7q61PI7gCq2+wmbVs+oBe25ibJH3FPrXzatZbeuhM2zwSkw0DMmvX5U4XE
qY2k5ZF6DnewLtNBuGgPDUIUx2II3of/jiKQTs7Y8I+BaRAwpJVsqjWKOf6tcJwZ
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322861824664158760409933972698903535631294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 04:58:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 04:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hydratight.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23465900805577300965348704914741745538564885308352287715823511381110292683388318559871285506046324418634236075216429744901893161648454762036546942213041416289193826273565112819810959363347906644967346188845740987250345228309437515304311739029020777294066966522300155918716240753287403382734739708649541557354676506054121993063715696836370319060969341513457911618943439265392394626011212213365489386957649176625294949312864660898304013735079424836592198868240528854915232686008122434900931335671566115922415515900748959807719688222280002869986442068752995453776691220222091410140348320873256165718652868150207943809353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96095c141daae6a13cc7ca1591852996868e4f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4irwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberquarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearsofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cretefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisisfinancialanalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommerceconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundofus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldexchangerates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthycandybarsreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempislife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstoncommericalplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydratight.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalcosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamiorlandotours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigancnatraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypsprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofcryptos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofwtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oohfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphiachristianschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatehousestaysuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progolfaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtychisholmtrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redtrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxliver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniocondostore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scentifique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicefaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibariumindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stamina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech6g.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatesmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealternativepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegive1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpacablanket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shapefashion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unsugaryourmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngpersonrehab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youroursmine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourownsignaturecolor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d445933120000040300463044022039ea1dc9560b34c45c21d4e22763222c34f1e0e1de79aaf75455b3024f804b6402207d591da3c73fe95bd5c3a47174b9f616824e2d2ac8d7ab1f4415bbb79e96f6a5007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d445933d0000004030046304402201d60ae25eb0eed783d861fa314499f5e152534aaec08ff5dc921de6632526d90022059595c3c318bce507532f86b2a1ea1d550e4d5371d1b86ca044eac14b9cc0ec7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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