app.bestsf.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:f8:35:ae:d9:00:70:c6:0c:c1:fb:8d:ea:0c:c9:b3:e8 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.bestsf.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:f8:35:ae:d9:00:70:c6:0c:c1:fb:8d:ea:0c:c9:b3:e8
Serial Number (int): 324278740589753497335418796864365757314024
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:89:bc:3e:86:56:1e:28:70:82:24:ea:e4:c7:68:7c:54:df:03:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:b4:64:a7:0a:7e:75:f6:41:4e:4c:01:3c:24:6a:24:e0:7a:8c:fb
Fingerprint (sha256): 0f:e7:10:7a:99:a2:49:66:d0:4c:7f:e4:d1:0a:85:f3:0c:c9:26:bd:03:a6:08:f7:f1:0f:06:99:9f:9d:5c:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.bestsf.com.br

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.bestsf.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.bestsf.com.br
app.bestsf.com.br
master.bestsf.com.br
parceiro.bestsf.com.br

Other certificates including the domain name bestsf.com.br

(limited to 100 certificates)
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
app.bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
portal.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
api.bestsf.com.br
api.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
api.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
www.bestsf.com.br
app.bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
bestsf.com.br
sni181392.cloudflaressl.com
bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com
bestsf.com.br
leads.bestsf.com.br
sni181392.cloudflaressl.com
sni181392.cloudflaressl.com

Certificate

The complete raw certificate details for app.bestsf.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISA7j4Na7ZAHDGDMH7jeoMybPoMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTkxODI0NTBaFw0x
OTAzMTkxODI0NTBaMBwxGjAYBgNVBAMTEWFwcC5iZXN0c2YuY29tLmJyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjjGmACZhVRnfWOlsiKbZWgzOqTF
1CDT4S8/hvT16ttbKa0ITF0Uw5lufLglDeWK91MPU77fCj2NaF64Wd5CAamHUpog
jmdAH0jutUdxy+VKUxJJw/gSamSGJabrswJ6MPG6YypR2HmAeUQAWCcYBwT3A62b
qC4GkXxpAeOu6l2mlLD/wG5XzGu7hffhBq3KFMIV/okQj8BTe7Tjw2HCBjT5jntU
0OKLuXKIHKGmhH2AA+E5LU8WA8TL9AD/DobpzJo3nUYp+M6e3P9SK9bwE1qkTFPX
ejxDuFfg+F7kp6nHdr1Y0vH6XY5sGL/YoC3LC2R3QQi6bcyAXpiQ8xQK0wIDAQAB
o4ICqDCCAqQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ3ibw+hlYeKHCCJOrkx2h8
VN8DeTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMF0GA1UdEQRWMFSCEWFwaS5iZXN0c2YuY29tLmJyghFhcHAuYmVzdHNm
LmNvbS5icoIUbWFzdGVyLmJlc3RzZi5jb20uYnKCFnBhcmNlaXJvLmJlc3RzZi5j
b20uYnIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5
AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA
AWfH7X/+AAAEAwBHMEUCIHIA8YI83Im9GTuQYQCrv2Ty6As+0rjY34LdtrcH8J4q
AiEAoG9slIut+b+j+MWDJgTWguGPwKIe0RxLjQwuq5fsyMoAdwApPFGWVMg5Zbqq
UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWfH7YAMAAAEAwBIMEYCIQDbmqYrwxZ8
agRwDE9vp8mQk0mydQtx2tpGoFXqKJwevQIhAKtLRWRg/8ecXHQOpT+MxbArxjtx
IljCej9d+kmoCkUjMA0GCSqGSIb3DQEBCwUAA4IBAQBHRGuK9D+ld7FY//P1qbjb
8XmFJSmpXLvU7fmJDSBQvkxIRZAZfOU1UDBT5Wn67dC61jCJgJVk+xf7dLX87/iZ
1V2LP4RNd1fLE/HTTc6H1HPwS+uKptrgZB4H2LRt3tmsmS5PEEO27uMA30mO9lQf
4uocZZKF0zYv9cWGf5AA6EdLTOqyyQ76+HiRBJNohJPP+UVENBsuGmKl4BiTclob
waL5okn1LdadFBxUDuyxhrtUQZ9jHtDz8sSLwoGRKvzAaYWppaxCZeMgGbys6UJh
1e8sUxT8UxoLWFZtk+RrhtjwuV9U8dTI7ZVzJXTL2OC40MHKFq99ylID2t1CPBJQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjjGmACZhVRnfWOlsiKb
ZWgzOqTF1CDT4S8/hvT16ttbKa0ITF0Uw5lufLglDeWK91MPU77fCj2NaF64Wd5C
AamHUpogjmdAH0jutUdxy+VKUxJJw/gSamSGJabrswJ6MPG6YypR2HmAeUQAWCcY
BwT3A62bqC4GkXxpAeOu6l2mlLD/wG5XzGu7hffhBq3KFMIV/okQj8BTe7Tjw2HC
BjT5jntU0OKLuXKIHKGmhH2AA+E5LU8WA8TL9AD/DobpzJo3nUYp+M6e3P9SK9bw
E1qkTFPXejxDuFfg+F7kp6nHdr1Y0vH6XY5sGL/YoC3LC2R3QQi6bcyAXpiQ8xQK
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324278740589753497335418796864365757314024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 18:24:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 18:24:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.bestsf.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18458789694226770460474159782121098395723336636671238586518323884334362740842545609535170355932156808603066554910644762487213125825942641140746964084557874900447368773667404025470378196177646829835075133166735362391668688319284625158952261948781852914764740356239577801277254184156934629401783187270840427478904751549055759250021247258701189935000725016219793108594892994427172684837783199896307541589230461789504002481683996605704949584835208580612844973629612109624510873372502139799315877469250614911624666435894084725393925929455447547699775428265814859677464903328099729908991904619962556608072457420437579893459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3789bc3e86561e28708224eae4c7687c54df0379
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.bestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiro.bestsf.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167c7ed7ffe000004030047304502207200f1823cdc89bd193b906100abbf64f2e80b3ed2b8d8df82ddb6b707f09e2a022100a06f6c948badf9bfa3f8c5832604d682e18fc0a21ed11c4b8d0c2eab97ecc8ca007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167c7ed800c0000040300483046022100db9aa62bc3167c6a04700c4f6fa7c9909349b2750b71dada46a055ea289c1ebd022100ab4b456460ffc79c5c740ea53f8cc5b02bc63b712258c27a3f5dfa49a80a4523
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047446b8af43fa577b158fff3f5a9b8dbf179852529a95cbbd4edf9890d2050be4c484590197ce535503053e569faedd0bad63089809564fb17fb74b5fceff899d55d8b3f844d7757cb13f1d34dce87d473f04beb8aa6dae0641e07d8b46dded9ac992e4f1043b6eee300df498ef6541fe2ea1c659285d3362ff5c5867f9000e8474b4ceab2c90efaf878910493688493cff94544341b2e1a62a5e01893725a1bc1a2f9a249f52dd69d141c540eecb186bb54419f631ed0f3f2c48bc281912afcc06985a9a5ac4265e32019bcace94261d5ef2c5314fc531a0b58566d93e46b86d8f0b95f54f1d4c8ed95732574cbd8e0b8d0c1ca16af7dca5203dadd423c1250