ingresso.bns.dito.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:ed:1c:d2:e1:5a:9c:71:6d:cc:54:8b:d9:00:80:06:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ingresso.bns.dito.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:ed:1c:d2:e1:5a:9c:71:6d:cc:54:8b:d9:00:80:06:fb
Serial Number (int): 326986248940574385073416301402637949994747
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:44:a5:0d:0c:ad:c5:93:96:19:de:c7:c0:ee:75:43:c7:5f:2a:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:31:26:d4:e8:ec:37:d0:83:ce:71:58:1f:4d:72:f5:02:c6:87:bc
Fingerprint (sha256): 23:80:3d:c1:91:82:33:76:ec:b2:2c:7e:71:a9:e9:a0:a4:57:4e:fc:52:3d:3a:b5:9e:b0:12:b8:55:49:d5:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ingresso.bns.dito.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingresso.bns.dito.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingresso.bns.dito.com.br

Other certificates including the domain name dito.com.br

(limited to 100 certificates)
www.dito.com.br
admin.cc.dito.com.br
brickz.bns.dito.com.br
hive.dito.com.br
newrelic.kstars.org
crm.dito.com.br
ingresso.bns.dito.com.br
newrelic.kstars.org
oraculo.dito.com.br
dito.com.br
newrelic.kstars.org
ref.uplus.com.pl
dito.com.br
ingresso.bns.dito.com.br
dedoduro.pdv.dito.com.br
dito.com.br
foundry-usz-1.status.palantir.com
crm.dito.com.br
6bd21a3c.status.cleafy.cloud
pbi.dito.com.br
www.starjourney.nightspeller.net
ajuda.dito.com.br
openapi.dito.com.br
recursos.dito.com.br
scan.tbsx3.com
newrelic.kstars.org
bns.dito.com.br
via22latam.workspace.training
www.admin.sper.com.vn
newrelic.kstars.org
newrelic.kstars.org
crm.dito.com.br
inbox.rest
bns.dito.com.br
link.wavescool.com
schumann.bns.dito.com.br
newrelic.kstars.org
forum.dito.com.br
docollab.com
newrelic.kstars.org
crm.dito.com.br
field-assessment.grapeweb.com.au
foundry-usz-1.status.palantir.com
6bd21a3c.status.cleafy.cloud
docs-prod.imagin.studio
traineeserasaexperian.com.br
agenda.dito.com.br
bns.dito.com.br
ingresso.bns.dito.com.br
foundry-usz-1.status.palantir.com
crm.dito.com.br
pesquisa.dito.com.br
dito.com.br
michaelmoyles.ie
foundry-usz-1.status.palantir.com
crmbonusserviceapi.dito.com.br
foundry-usz-1.status.palantir.com
ingresso.bns.dito.com.br
eng.dito.com.br
linkerd-prod-us-east.dito.com.br
dito.com.br
newrelic.kstars.org
newrelic.kstars.org
blabla.cam
www.dito.com.br
cofre.dito.com.br
docs-prod.imagin.studio
newrelic.kstars.org
newrelic.kstars.org
autocomplete.dito.com.br
crm.dito.com.br
crm.dito.com.br
dito.com.br
pesquisa.dito.com.br
test.learnerspace.online
weeklychefs.com
recursos.dito.com.br
staging-app.nos2.pp.ua
newrelic.kstars.org
api.dito.com.br
crm.dito.com.br
integrations-hub.dito.com.br
ingresso.bns.dito.com.br
www.estebancastano.com
residenciastransparentes.com
grafana.dito.com.br
www.dito.com.br
materiais.dito.com.br
crm.dito.com.br
link.feras.dito.com.br
weltindia.in
veldre-bygdebok.no
crm.dito.com.br
run.photo
extractordbserviceapi.dito.com.br
blog.dito.com.br
www.bns-staging.dito.com.br
6bd21a3c.status.cleafy.cloud
blog.dito.com.br
newrelic.kstars.org

Certificate

The complete raw certificate details for ingresso.bns.dito.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISA8DtHNLhWpxxbcxUi9kAgAb7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MzExNzI4MjJaFw0x
OTExMjkxNzI4MjJaMCMxITAfBgNVBAMTGGluZ3Jlc3NvLmJucy5kaXRvLmNvbS5i
cjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANxpiHUFaW2Jm8w8Ab6r
t+tbeYG6+BSLPZUgfY+KwS2zBFNeh6eBZTu7D6MNtl/iu0hXbMvLcVKRQluT5WXD
4nmGpOJL2MU0ENkb1wvLY6uhnOrt7q8C/pCSN3FpNFRcIB3RfWkOnlDWpoAwnbfX
MRO8OEveO+EsVU6nq8BS5IKp/kP2fwTF6LXwzKCGtF/9IpX5KZXXayiQJ0HrbKrz
RQEtlN6A88sYf6injHtBCbFy/kWL3OVU/z1qTDDaWj9jAtPy6acj7JrQJY08saB3
/t+u/TXRyIEjBUoaLlX74e5WpXd9Ce7PDJkwIgALC+UDd6c+5EGamqhHRWQgBwVB
7EvUFpRwLcLsWhSNJQQ4uRxqbH/9BkkRojLAr9YUEg8r35Yq6Fa7sv6XXsIDeR5R
JPMLGNFVeL6tNXxLwYSvAyoI2qOFXNW4Khtn0Fwhnh23mgAJ4a4KSOGWHL5YpdNx
WhTOycOUVDQUEQXHYvnelyJTyovC3XSmV2FkDEJPAcXnFDju+pW0GmFUOJzWMY3Z
9URIWn8IKt3vJezdSLBhCGUxduEq8YejyCXDYs83bF5xhKc5JohNaPbX1HNacGa3
SD7ObefhK3fu6vjFQM2jjQzHIZ7lXXpyX0aX4T1mAOBSpyd/dKm9wMYJyFl4vE+l
gG3SOKnh1tJUqOeIXCtW+ea/AgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFC1EpQ0MrcWTlhnex8DudUPHXyqiMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYaW5ncmVz
c28uYm5zLmRpdG8uY29tLmJyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFs6O9yTgAABAMARjBEAiAQRsG/dJ+xrPaESVBWUQEI/7jW
XEnbIoURKqHPOSbhjAIgPqtQZmhiCZKo+dsMW/wYtJ0+mGQvNcjUw/qST55wVN8A
dgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWzo73H9AAAEAwBH
MEUCIC5DzOT1q6FHLJkcc/yBVYJoIqpPaqxxH749KbZCpoqtAiEAvrxXCQOATbJA
rOJnfjCbOJD0J2mHCLWXUknf5M10tt0wDQYJKoZIhvcNAQELBQADggEBAEsfhU2I
A0MIqZCbQLTHecg5sw73925gk/TkMTH1ssQYO6LW8+s8w4GxvM3ocL8hfMcbqTaB
PAJnS0jsbrHkXYc+6KMSpERZF/9SOmkq946KC5gcRws36YTmm/tFES6hVqnOjdl6
nc3VOZtlQg/g9UWVE4tz1FKqCIdgCsQAaBUNzgxHtsrwAm/fugdQ3Ld+tez/VMTO
52bog/8CVjes7MOTZDdVM7Ba8PntyKFvSBSP0BK/a+hxqDmAgTCOeVKG0pVhmSdJ
2EhOyWvPJnwgzfzMe6pRmBxqr3VECkK0aJdYoM9TAI8hQuQDH68kWIaE9IEulYI5
JTnkDXgXMV6K77I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326986248940574385073416301402637949994747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 17:28:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 17:28:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingresso.bns.dito.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899203480990480003041329353534892211781443947968518220528546832492999988428436345325822090590366922365294545520007056042797618836288544857184548606805244770980430231788577130970199013091214536103115132668896332861580543467582199691626798865474541382567258749101750792701695971857024620063294136183130883430616972916229403325914231060977419398452294535443632157319732100134627783620115292800182858834928384292798103068066517182614334491991927558105539319705685245109077378636866679982684180949879919128774831771111277152297229938524852572861195024954366004782700889945334798237249581313064626698459796601312573602294050581205640804582461167888200410138385231560894292178935145872518671245345466567876479794627600981766967995102431805263347368998073469328209942596711727723617194312429346212227044298649385573157973033837903526325586797112362743979829784889692890744925069861285128984667963706912585754188925662718239633052186784946047566362075586671353745734979751737117323795671551087560523043828501525973710639739700856082967604650739655606198049203704408186081871677617448311069709594186683709386410242638294815249139576687323731580774291531385937107781416650383464954539788805321712011255424652777482455998120004416751001302329023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d44a50d0cadc5939619dec7c0ee7543c75f2aa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingresso.bns.dito.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ce8ef724e000004030046304402201046c1bf749fb1acf684495056510108ffb8d65c49db2285112aa1cf3926e18c02203eab506668620992a8f9db0c5bfc18b49d3e98642f35c8d4c3fa924f9e7054df00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ce8ef71fd000004030047304502202e43cce4f5aba1472c991c73fc8155826822aa4f6aac711fbe3d29b642a68aad022100bebc570903804db240ace2677e309b3890f427698708b5975249dfe4cd74b6dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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