expresso.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:82:00:4c:93:d9:1a:50:33:4d:1e:cb:2c:aa:8a:e6:91:b1 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expresso.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:00:4c:93:d9:1a:50:33:4d:1e:cb:2c:aa:8a:e6:91:b1
Serial Number (int): 392686249040039102052609211850527271719345
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 49:d2:c5:7b:e1:b6:63:7b:5e:3d:f5:55:d0:e3:4b:ca:22:1c:ce:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:6c:34:b5:68:eb:52:77:04:b3:9a:6c:f1:d9:42:e5:c2:38:f1:a9
Fingerprint (sha256): 1e:40:aa:3d:03:63:71:7a:65:ec:0e:34:61:cf:f2:41:77:9b:ae:d5:6c:37:ac:e2:fe:cf:51:6e:d7:b0:7e:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate expresso.pt

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expresso.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.expresso.pt
app.leitor.expresso.pt
apps-expresso.expresso.pt
apps.expresso.pt
bcbm.pt
beta.app.leitor.expresso.pt
beta.leitor.expresso.pt
blitz.pt
codigo.expresso.pt
colecionaveis.expresso.pt
economia.expresso.pt
expresso.pt
ineditos.expresso.pt
inteligenciacoletiva.expresso.pt
leitor.expresso.pt
loja.expresso.pt
multimedia.expresso.pt
offline.leitor.expresso.pt
player.expresso.pt
preview-app.leitor.expresso.pt
preview-leitor.expresso.pt
ranking-escolas-2017.expresso.pt
tribuna.expresso.pt
tribunaexpresso.pt
vidaextra.expresso.pt
www.bcbm.pt
www.expresso.pt
www.tribuna.expresso.pt
www.tribunaexpresso.pt
www.vidaextra.expresso.pt

Other certificates including the domain name expresso.pt

(limited to 100 certificates)
expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
subscriber.pagesuite.com
*.aws.impresa.pt
player.impresa.pt
expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
migration.subscriber.pagesuite.com
ssl278568.cloudflaressl.com
ssl461243.cloudflaressl.com
subscricao.leitor.expresso.pt
expresso.pt
expresso.pt
boacamaboamesa.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.app.bcbm.pt
*.advnce.sic.pt
expresso.pt
boacamaboamesa.pt
*.app.bcbm.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
player.impresa.pt
*.expresso.pt
player.impresa.pt
subscricao.leitor.expresso.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
subscricao.leitor.expresso.pt
player.impresa.pt
*.advnce.sic.pt
expresso.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
expresso.pt
ssl461241.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
expresso.pt
subscriber.pagesuite.com
*.advnce.sic.pt
*.app.bcbm.pt
*.bcbm.pt
aws.preview.expresso.pt
pdf.leitor.expresso.pt
*.advnce.sic.pt
expresso.pt
*.averdade.com
semanario.expresso.pt
*.advnce.sic.pt
*.averdade.qas.impresa.pt
outdated.expresso.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.aws.impresa.pt
*.bcbm.pt
*.advnce.sic.pt
expresso.pt
*.advnce.sic.pt
outdated.expresso.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni.cloudflaressl.com
outdated.expresso.pt
impresa.pt
subscricao.leitor.expresso.pt
ssl278570.cloudflaressl.com
*.advnce.sic.pt
tribunaexpresso.pt
expresso.pt
tribunaexpresso.pt
expresso.pt
*.aws.impresa.pt
expresso.pt
anunciar.expresso.pt
*.advnce.sic.pt
boacamaboamesa.pt
migration.subscriber.pagesuite.com
*.advnce.sic.pt
*.advnce.sic.pt
player.impresa.pt
tribunaexpresso.pt

Certificate

The complete raw certificate details for expresso.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392686249040039102052609211850527271719345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 09:42:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 09:42:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expresso.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729244610533110836364743914186652869957626167754396161454018377632450765526324450194860520734333519659736877983099822661683803166670092444491867235046272853865044363677633244665798126155709920903052124912360136849591123524710766421199212349020277832876837710559726767905684110939305459888646126884918412581036408598448469224362838637221621181736949232056037146384205188025744938687014221862740608595882134312757150505723188514358678642514219493652736485683435174421741934959900940419035967606944226072948502246634206213727886806933640391078213509496791579311503808242111448622713155381322370486253363015518580587940664348548572854308176909685518727743060498760730673291282791581241172238756461443645524060390970699162995938787812420918997710619153995801642709405980238013736704685952373122401973524698140522936459141875321297458302773108478232381620299901889025478435165416535325433510723213941146683262555149073472667769398826598177107520647732217249825839177628199125412270285787679507613965789401194280796037523550830331630248491380887633875189929089951871749337971391462193168267135309304573472714227054206084738311564270819228819389689096834091563453929738359764491099507764847882287376579133630174802484464532145996662714907389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49d2c57be1b6637b5e3df555d0e34bca221ccec2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-expresso.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codigo.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colecionaveis.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economia.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ineditos.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inteligenciacoletiva.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimedia.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-app.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranking-escolas-2017.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidaextra.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaextra.expresso.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165a42cf4bd000004030047304502204da22ec8cc25557d207b3afd580ecfbafa755ed541deda99ff86f5353d205bbf022100cfe452b9d49f7050da98cac8b271c7164734ce38442dac3e06cad5d8bb27f2bf007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165a42cf6b400000403004630440220731debd24bf04c7e1b45a689b339210c4d6b8ad66e029f2a722e4fec34b834a4022061222064e0749f46bd934b9d6cb14927f817dd2493e7732c2a812cb28ffd252e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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