a2.client.inovamind.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:ca:6b:64:a4:93:3f:c6:60:dc:b9:c9:ab:69:4b:4b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=a2.client.inovamind.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ca:6b:64:a4:93:3f:c6:60:dc:b9:c9:ab:69:4b:4b
Serial Number (int): 14343302114850590939877699511606922059
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:ab:1f:6a:53:5a:13:8b:b3:79:8c:94:71:3d:bb:23:33:0e:34:e1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7b:ea:84:54:7f:5c:85:c2:b6:ce:cb:c4:86:f8:23:fd:20:04:9f:d9
Fingerprint (sha256): 4c:7a:7d:12:08:95:fa:d0:40:fd:e7:cc:4b:40:b9:e4:a5:a3:ef:c2:35:18:6d:8e:7e:61:37:42:33:46:8d:f4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate a2.client.inovamind.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a2.client.inovamind.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a2.client.inovamind.com.br

Other certificates including the domain name inovamind.com.br

(limited to 100 certificates)
inovamind.com.br
gm.api.client.inovamind.com.br
inovamind.com.br
ws.inovamind.com.br
xpi.regtech.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
painel.inovamind.com.br
filemanager-hml.inovamind.com.br
aa.client.staging.inovamind.com.br
eudora.front.inovamind.com.br
quiz.inovamind.com.br
bgcveiculo.staging.inovamind.com.br
rocket.client.inovamind.com.br
*.inovamind.com.br
aa.client.inovamind.com.br
bgc.credilink.com.br
ocrprd.inovamind.com.br
aa.client.staging.inovamind.com.br
sni190869.cloudflaressl.com
mikkel.full.inovamind.com.br
sni190869.cloudflaressl.com
full-dev.inovamind.com.br
painel.staging.inovamind.com.br
aa.client.inovamind.com.br
poseidon.client.staging.inovamind.com.br
anubis.client.staging.inovamind.com.br
anfora.client.staging.inovamind.com.br
show.regtech.inovamind.com.br
backstage-pagon-aqbank.inovamind.com.br
crt4.regtech.inovamind.com.br
sni190869.cloudflaressl.com
legal.inovamind.com.br
orchadm.private.inovamind.com.br
inovamind.com.br
xpi.regtech.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
bgcveiculo.inovamind.com.br
moira.admin.inovamind.com.br
sni190869.cloudflaressl.com
inova.regtech.inovamind.com.br
anfora.client.staging.inovamind.com.br
poseidon.client.inovamind.com.br
sni190869.cloudflaressl.com
www.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
eudora.front.inovamind.com.br
liveness-hml-fpp.app.inovamind.com.br
dashboard.inovamind.com.br
a2.client.inovamind.com.br
bgccredil.client.inovamind.com.br
liveness.app.inovamind.com.br
*.regtech.inovamind.com.br
motorbgc.vb.hml.inovamind.com.br
hml.regtech.inovamind.com.br
bancoob.regtech.inovamind.com.br
projeto.inovamind.com.br
moira.admin.inovamind.com.br
poseidon.client.inovamind.com.br
*.legalfinder.inovamind.com.br
sni190869.cloudflaressl.com
inovamind.com.br
inovamind.com.br
spartacus.staging.inovamind.com.br
sni190869.cloudflaressl.com
sni190869.cloudflaressl.com
spartacus.inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
inovamind.com.br
sni190869.cloudflaressl.com
weel.regtech.inovamind.com.br
consultoria.regtech.inovamind.com.br
eudora.dashboard.inovamind.com.br
devportal.inovamind.com.br
sni190869.cloudflaressl.com
painel.compliance.inovamind.com.br
sni190869.cloudflaressl.com
full.inovamind.com.br
*.dashboard.inovamind.com.br
*.pservice.inovamind.com.br
crt4.regtech.inovamind.com.br
eudora.client.inovamind.com.br
inovamind.com.br
ocrcnh-stg.inovamind.com.br
consultoria.regtech.inovamind.com.br
full-hml.inovamind.com.br
anubis.client.inovamind.com.br
anfora.client.inovamind.com.br
cloud.inovamind.com.br
*.dashboard.inovamind.com.br
bnp.regtech.inovamind.com.br
sni190869.cloudflaressl.com
poseidon.client.staging.inovamind.com.br
inovamind.com.br
inovamind.com.br
rocket.client.staging.inovamind.com.br
easy.regtech.inovamind.com.br
sni190869.cloudflaressl.com

Certificate

The complete raw certificate details for a2.client.inovamind.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEijCCA3KgAwIBAgIQCsprZKSTP8Zg3LnJq2lLSzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAyMTEwMDAwMDBaFw0yMDAzMTEx
MjAwMDBaMCUxIzAhBgNVBAMTGmEyLmNsaWVudC5pbm92YW1pbmQuY29tLmJyMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl/JQ4YOAFfgYJQPqbXHczRw
msmk/IOhV6tpT1tmfHnDbX8QKw54MDZlRtto7PykHAxgMcynKJ8h2HnzX/IhuVuy
H9hVfzoIMyW/OHKLrhm2cJT8ILK3BwWyf+PvhkKCpjFsHF8vtr5ymg/x4l4yz3tH
nCw+lnEi6pGcZ4dJTxypZqb/9+I4hj1OWST3sXDhlDHqD9V/MUDcxFpeeQZ/SBr3
DrTYHrb0011A3+0RYB8zjG/MS5wolXBl5o0iiYiYrlrdz4bK7dVqo/NPDp34bT1K
3ZKodvH2H11cQ+vf8rjE/Sg1SDQl6OlP9X3QoMxKQlaqISAuLF+YIKoabSZ0TQID
AQABo4IBkzCCAY8wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYD
VR0OBBYEFAirH2pTWhOLs3mMlHE9uyMzDjThMCUGA1UdEQQeMByCGmEyLmNsaWVu
dC5pbm92YW1pbmQuY29tLmJyMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z
Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI
AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB
/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC63
PA26dQC5C6oii5HB0AhyMiBSFm2qetgh1QQH1piyTD9vRhgz2osCXEH/CpJwVSoV
m0aj56oGc1+H/kdPKTC8CCAR4cMjCz38GAJ4ikrpkvuY5dZuN3SBVrblaZhLNmiP
5c/R8mf1P2NVCr8Gtbgrd87xW7ue83cmFlCJbpM7r/fBO15OLpODntuaDF1nhAR1
j/17NQbb9TCBAaJkXzqlC6LWKJ2NO8FgN2dsUv3Sb/RjlwbHJwZoMlDakc813W3E
Kz1LRIlPKVLt9acUAoMb+qt4+cTLNmfAk3fBP7uNlczYdpJYUAmCPZDJ0Kk+Y1D4
mR/X9pma/OdpFNVEhLg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl/JQ4YOAFfgYJQPqbXH
czRwmsmk/IOhV6tpT1tmfHnDbX8QKw54MDZlRtto7PykHAxgMcynKJ8h2HnzX/Ih
uVuyH9hVfzoIMyW/OHKLrhm2cJT8ILK3BwWyf+PvhkKCpjFsHF8vtr5ymg/x4l4y
z3tHnCw+lnEi6pGcZ4dJTxypZqb/9+I4hj1OWST3sXDhlDHqD9V/MUDcxFpeeQZ/
SBr3DrTYHrb0011A3+0RYB8zjG/MS5wolXBl5o0iiYiYrlrdz4bK7dVqo/NPDp34
bT1K3ZKodvH2H11cQ+vf8rjE/Sg1SDQl6OlP9X3QoMxKQlaqISAuLF+YIKoabSZ0
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14343302114850590939877699511606922059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a2.client.inovamind.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25042418312314429356387130871492238348126557780542387176470321400405516880367231755509696325420495374653296987389771449124818129558047277684158336772769817665632474472274603085686378861201057340400546293780878914104260963896062024111431599724309258620254007905802327460791335353793919993630558765917814657144579178977653256639656012050904979552705524283512890386239908734007778210887788602561372284882005609261620239169470111284998152502228135584797806624708391560715100996789412290513354823346518686859995506947825082749821702261504467206716615871752989301287541117546068873781150265095842707476160188867688224158797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08ab1f6a535a138bb3798c94713dbb23330e34e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.client.inovamind.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002eb73c0dba7500b90baa228b91c1d00872322052166daa7ad821d50407d698b24c3f6f461833da8b025c41ff0a9270552a159b46a3e7aa06735f87fe474f2930bc082011e1c3230b3dfc1802788a4ae992fb98e5d66e37748156b6e569984b36688fe5cfd1f267f53f63550abf06b5b82b77cef15bbb9ef377261650896e933baff7c13b5e4e2e93839edb9a0c5d678404758ffd7b3506dbf5308101a2645f3aa50ba2d6289d8d3bc16037676c52fdd26ff4639706c72706683250da91cf35dd6dc42b3d4b44894f2952edf5a71402831bfaab78f9c4cb3667c09377c13fbb8d95ccd87692585009823d90c9d0a93e6350f8991fd7f6999afce76914d54484b8