The OID appears twice in a certificate, in the signatureAlgorithm field and inside tbsCertificate, and both must match (RFC 5280 §4.1.1.2). Its AlgorithmIdentifier parameters MUST be NULL, although implementations must also accept them absent (RFC 4055 §5).
1.2.840.113549.1.1.11
sha256WithRSAEncryption
sha256WithRSAEncryption: an RSASSA-PKCS1-v1_5 signature with SHA-256, the signature on most Web PKI certificates.
1.2.840.113549.1.1.11 identifies sha256WithRSAEncryption, a signature algorithm. DER: 06092a864886f70d01010b.
- Dotted notation
1.2.840.113549.1.1.11- DER encoding
06092a864886f70d01010b- Category
- a signature algorithm
- Also known as
RS256, sha256WithRSA- OpenSSL short name
RSA-SHA256- OpenSSL long name
sha256WithRSAEncryption- Listed by
- the ecdsa.com catalog