facamp.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:85:42:6c:00:a9:9f:6a:09:1c:ea:d2:86:d3:01:84 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=facamp.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:85:42:6c:00:a9:9f:6a:09:1c:ea:d2:86:d3:01:84
Serial Number (int): 13984202635914744630226245488863281540
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 19:a5:f7:b3:b6:46:25:25:71:34:af:aa:b8:29:a6:24:10:9c:b4:c2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0b:a3:43:63:74:a8:57:d1:cf:bf:73:27:ab:43:e9:5d:cd:d0:ee:40
Fingerprint (sha256): 64:7b:f1:dc:b8:63:12:ed:b0:0e:1a:c9:6f:d8:b9:c2:5b:72:40:bd:94:ef:0a:7d:74:db:6b:43:80:97:01:66

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate facamp.com.br

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for facamp.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

facamp.com.br
*.agenciaproa.com.br
*.famun.com.br
*.seminariofacamp.com.br
seminariofacamp.com.br
agenciaproa.com.br
famun.com.br
*.facamp.com.br

Other certificates including the domain name facamp.com.br

(limited to 100 certificates)
facamp.com.br
access.fortefoundation.org
facamp.com.br
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
*.facamp.com.br
aatlconnected.com
access.fortefoundation.org
access.fortefoundation.org
alumni.facamp.com.br
access.fortefoundation.org
alumni.thrivescholars.org
facamp.com.br
access.fortefoundation.org
app.facamp.com.br
alumni.facamp.com.br
access.fortefoundation.org
*.famun.com.br
alumni.facamp.com.br
facamp.com.br
alumni.facamp.com.br
aatlconnected.com
*.facamp.com.br
aatlconnected.com
alumni.facamp.com.br
*.facamp.com.br
facamp.com.br
*.famun.com.br
app.facamp.com.br
access.fortefoundation.org
aatlconnected.com
alumni.facamp.com.br
facamp.com.br
alumni.thrivescholars.org
facamp.com.br
alumni.facamp.com.br
aatlconnected.com
access.fortefoundation.org

Certificate

The complete raw certificate details for facamp.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIQCoVCbACpn2oJHOrShtMBhDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMjgwMDAwMDBaFw0yMzAxMjUy
MzU5NTlaMBgxFjAUBgNVBAMTDWZhY2FtcC5jb20uYnIwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC8K5KqN9yDoAvTHMq6PjuBviByn6pwm29dkmrwAcRD
XCJIPyVDvbaCkXRC/ckMvd4r50rzO8OFP88xcvT1fYzknWkJwgDlGLVwk+qGBKrF
MSIrlijpZ5+lpE3HqBbL4faiM0J9HtpvIReMfgzOdXy3bZiFVIDDY0FfL9Vq7vil
S+z5vTUatoRXvOVP2hZvcq8LkA1ZBVRCibJGSPjbzuR4t8P98ZNmHroz/0sEloCK
bGdE40tPZsG5BAVsVndUOht0/wXm9zbfmTZIdGYIls/075oWkeD8pv4z9rxKTfE+
Ka7SV3qzY1qZCFf5aevwhhK+4CAEXze9muDfGPNCTlXfAgMBAAGjggN2MIIDcjAf
BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUGaX3s7ZG
JSVxNK+quCmmJBCctMIwgaUGA1UdEQSBnTCBmoINZmFjYW1wLmNvbS5icoIUKi5h
Z2VuY2lhcHJvYS5jb20uYnKCDiouZmFtdW4uY29tLmJyghgqLnNlbWluYXJpb2Zh
Y2FtcC5jb20uYnKCFnNlbWluYXJpb2ZhY2FtcC5jb20uYnKCEmFnZW5jaWFwcm9h
LmNvbS5icoIMZmFtdW4uY29tLmJygg8qLmZhY2FtcC5jb20uYnIwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0
MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x
LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0
MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABff+eSoEAAAQDAEcwRQIgV4ik
W1xFAN8F0vPOEoeaBexgSXyG1XCwr2fc0/IVZuACIQCSQnsVS78I0tpdBxu0siLz
KH81E1bL58QWfFGI94crkgB3ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPD
O9ZMAAABff+eSr4AAAQDAEgwRgIhAPw3dIXg3wogCehvtOE/H7gV8atRPR+cMKaf
De8z31hvAiEAz532FEkr+mByl+IUNTidg0oWQZIPggnXD2Rx2F6hxugAdQCzc3cH
4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAX3/nkrjAAAEAwBGMEQCIGny
HBt6dg3IF9YmBw/pzP6tnhRJUuuj7wpte0AjWuq0AiBK6Pqvxhuv0vBCIEoECOQ1
nQCz//mQA+nGjF/Y1Ot8uTANBgkqhkiG9w0BAQsFAAOCAQEArZHfS3Dhrf6N1MoO
4VMmk2tSXAGV33C9ew9CEdPo6jF6JbsE+hcIgLTpOnkavfQqkUgZh/4DOC2rrhne
/kzk23CS2AzSMVfrtemC92llPYH1P9emPG3Qz8fcZeUmPs8Etbe4rXIowkVyPC5n
ROH6lwGk+ldim6QILzqaMpe2YZ7X2H66DYg5zModzmETV7EZ79uO5RX04rA9YOQu
FVaYfLWDPK08TdE6/otmCtuD9WOvMbDnRi1vHSQkjS6CrzYcgKRgYYBvKPB8mvun
zQHR1pxinuGOIA+T7IE3Ui2tyXvQwfU1Ba+EJAvRgP1ZO2ub5rRk4x/aw1vvMfTr
RZT3LQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCuSqjfcg6AL0xzKuj47
gb4gcp+qcJtvXZJq8AHEQ1wiSD8lQ722gpF0Qv3JDL3eK+dK8zvDhT/PMXL09X2M
5J1pCcIA5Ri1cJPqhgSqxTEiK5Yo6WefpaRNx6gWy+H2ojNCfR7abyEXjH4MznV8
t22YhVSAw2NBXy/Vau74pUvs+b01GraEV7zlT9oWb3KvC5ANWQVUQomyRkj4287k
eLfD/fGTZh66M/9LBJaAimxnRONLT2bBuQQFbFZ3VDobdP8F5vc235k2SHRmCJbP
9O+aFpHg/Kb+M/a8Sk3xPimu0ld6s2NamQhX+Wnr8IYSvuAgBF83vZrg3xjzQk5V
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13984202635914744630226245488863281540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'facamp.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23754287936269754102362688485675097223710344377963380525923659159246922962293745441396324198053978011488351119896805206287210959424279605928090766316098936773071440087329118095111398186180452820595392615416095451968981537774512753085352343072462449737005637156791114185168831442698605387172097178533755190265350264998558565854185973833897900536589349900937587941414129496755662789382735852273210047993109281850065307943687598150821169463589894299535924532492436878043961794324648274897091594388905240639112808705203819655108832217382979366299901429901873305107785233854295380397428401365116084826890636464906306475487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19a5f7b3b64625257134afaab829a624109cb4c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facamp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenciaproa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.famun.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seminariofacamp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminariofacamp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenciaproa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famun.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facamp.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017dff9e4a81000004030047304502205788a45b5c4500df05d2f3ce12879a05ec60497c86d570b0af67dcd3f21566e002210092427b154bbf08d2da5d071bb4b222f3287f351356cbe7c4167c5188f7872b9200770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017dff9e4abe0000040300483046022100fc377485e0df0a2009e86fb4e13f1fb815f1ab513d1f9c30a69f0def33df586f022100cf9df614492bfa607297e21435389d834a1641920f8209d70f6471d85ea1c6e8007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017dff9e4ae30000040300463044022069f21c1b7a760dc817d626070fe9ccfead9e144952eba3ef0a6d7b40235aeab402204ae8faafc61bafd2f042204a0408e4359d00b3fff99003e9c68c5fd8d4eb7cb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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