assinador.pgms.salvador.ba.gov.br

Issued by R3

About this certificate

This digital certificate with serial number 04:42:ad:e1:8d:51:a1:f1:8d:f9:bb:ec:1b:58:cd:28:f5:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assinador.pgms.salvador.ba.gov.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:42:ad:e1:8d:51:a1:f1:8d:f9:bb:ec:1b:58:cd:28:f5:ce
Serial Number (int): 371138907520174240344012259474286672672206
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:c4:be:05:fc:1d:4b:4e:d1:5b:d2:97:2f:27:e9:b9:38:ec:19:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:74:18:d0:6b:8c:0a:db:3d:26:8e:97:82:f8:73:b8:f5:d0:9c:75
Fingerprint (sha256): 6a:62:f0:f3:68:ce:6e:12:af:a4:0c:29:95:85:31:60:f2:bc:2a:df:00:b0:0d:0e:e5:69:f0:e9:bf:e6:f5:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assinador.pgms.salvador.ba.gov.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assinador.pgms.salvador.ba.gov.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assinador.pgms.salvador.ba.gov.br

Other certificates including the domain name salvador.ba.gov.br

(limited to 100 certificates)
recadastramento.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
ava.portaleducacao.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfse.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
agendamento.sedur.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
sedur.salvador.ba.gov.br
*.salvador.ba.gov.br
portalvida.saude.salvador.ba.gov.br
www.dom.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
sci.sefaz.salvador.ba.gov.br
vacinaexpress.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
*.salvador.ba.gov.br
filometro.saude.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
nfse.salvador.ba.gov.br
marketingturistico.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
christi.salvador.ba.gov.br
salvador.ba.gov.br
sedur.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
pad.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
wsnoeprod.salvador.ba.gov.br
www.aplicativos.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.engrafo.salvador.ba.gov.br
vacinahoramarcada.saude.salvador.ba.gov.br
recadastramento.saude.salvador.ba.gov.br
webmail.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
vacinometro.saude.salvador.ba.gov.br
plano500.navegarte.org
dados.salvador.ba.gov.br
*.salvador.ba.gov.br
www.controleacesso.saude.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
ppi.salvador.ba.gov.br
nfsehml.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
senhaweb.salvador.ba.gov.br
horamarcada.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
www.sefaz.salvador.ba.gov.br
webmail.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
*.sefaz.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
sedur.salvador.ba.gov.br
redmine.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
www.pgms.salvador.ba.gov.br
sgf.sefaz.salvador.ba.gov.br
pad.salvador.ba.gov.br
api.pgms.salvador.ba.gov.br
sedur.salvador.ba.gov.br
recadastramento.salvador.ba.gov.br
christi.salvador.ba.gov.br
snacional.sefaz.salvador.ba.gov.br
webmail.sefaz.salvador.ba.gov.br
www.vida.saude.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
siap.pgms.salvador.ba.gov.br
secure.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
webmail.salvador.ba.gov.br
auditoria.snacional.sefaz.salvador.ba.gov.br
*.salvador.ba.gov.br
nfse.sefaz.salvador.ba.gov.br
ppi.salvador.ba.gov.br
assinador.pgms.salvador.ba.gov.br
gitlab.pgms.salvador.ba.gov.br
servicos.sedur.salvador.ba.gov.br
cadastroescolar.salvador.ba.gov.br
carnaval.sedur.salvador.ba.gov.br

Certificate

The complete raw certificate details for assinador.pgms.salvador.ba.gov.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISBEKt4Y1RofGN+bvsG1jNKPXOMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MTAxMzE3NDdaFw0yMzExMDgxMzE3NDZaMCwxKjAoBgNVBAMT
IWFzc2luYWRvci5wZ21zLnNhbHZhZG9yLmJhLmdvdi5icjCCAaIwDQYJKoZIhvcN
AQEBBQADggGPADCCAYoCggGBAIafOX0riJo5bXhljLLXLGMfv9oFriTb75Peg1Zk
RIAW0IHuTomQvvVW6nQ+7XP5R5eLWq1gvk107idjpUIZyC26Ryl3PbU22or/yawZ
kEaJRU6xd6OB/iyK0iqIHFVVw1/A6BpgbjMmdpo3BYtePvzQjiRa8VvDEtOScolZ
/aCbImpIhNNnzgmOggyXSNIxcSE2v4pDHlqXx0y8jOj0qL4WyHcwBJFya68sna6q
GdrcIPnl+48vt2VoOhc6jg46lNdLpUgZGyxfIEidrVdyWiZzgcZ0dluw8lwfJzsJ
fO8zsYu2HB5lWNHKRy7vBrC08m1iljTcAynrWaANNjg1zURCTfqrffcF47EwVjwW
VUP3z80UwZRNv2Fy5NNl+wl2ytFFa5d8nUJ//hxtRDJyyJwEiCHnpYcJ2iUzjMwo
xjo/T82bOt6rgYjr4goUSfkTzeQGWUtWPFzdSUcZ9rEmBP8sMLAs9Fm1Lscc4Tbb
TtJ/8vUZmubWISEdF6SdVIgL6QIDAQABo4ICIzCCAh8wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBR1xL4F/B1LTtFb0pcvJ+m5OOwZxzAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzAsBgNVHREEJTAjgiFhc3NpbmFkb3IucGdtcy5zYWx2YWRvci5iYS5nb3Yu
YnIwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYnfz4tSAAAEAwBG
MEQCIHwxTWOP0abDf/FJcRL8Zeu3t16Be5+TLEBpDcm6+pXRAiAxnRlAnGlxx68u
iX4HgBtq7or8eA/m/K05D9TREohr2AB3AHoyjFTYty22IOo44FIe6YQWcDIThU07
0ivBOlejUutSAAABid/Pi2kAAAQDAEgwRgIhAP0nZQ654yry4nV4TkdUaHHMRHE/
+BnrPVWzLnVK7qAdAiEArr4zxL9YZzj7KgWAN484tEaNgmOyO8yY8mXjtaMEQVUw
DQYJKoZIhvcNAQELBQADggEBABYJYlPJpu2tb4/099xsa3IXltXfc6038v87qalN
EKq691xz96Mp+7zzXFDM+1EkLu+N5hdbcAMj6J/U0e9deghn07urrxo72lZScARN
ZhGvK4jB9Kqul9okG6sE43uwx6UANA/2tajP+KPlJw7OO5p4cj4UA9EoGc3TPfiw
6voyJQCiWF4Sa2RLcQA+YrnDaqqiP0P/Je55c4+hYLFIDrrZFP9Vrt3FkOcX9W2M
q+8nDrxvCnAoA1dyGGlqul1KYc2dhhODJzIzZappH2LSsjCz7HewkuW0hBS4z40e
OQBuix574nOx58L20XH9Lww/VABA88yf0SMkiQ0pGeN3A3Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371138907520174240344012259474286672672206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 13:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 13:17:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assinador.pgms.salvador.ba.gov.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3055080506279580966306615738214653427456751022607271117969609004644297770206640487155546832430196920281203260952341623891179239295444189351363775408282776953330986892611106389313976648069656363826354517027907309808111655079518445124811680639786481962995460550056525851111432807898989501275594804319186615799612058858229857544026950842828150333327694075394803492551716862335178989644132710897564580696495919338932873267290972362782528455445425642073764396159271779897564160713632837407942464932969917312380055911456735349102356103531964115549614608652745641921329312605021309223022377325999851125993336499109065047399847888281987947801485360107608263622091089584527130018746046550671353273910347673794355039117107860192355604360592310058899696210227023474635820317012112210462918100746649591286541194506341716970241287403659771047371152110270448578520406019704638122114821805062745331469872064829379815961547113090498997783529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75c4be05fc1d4b4ed15bd2972f27e9b938ec19c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinador.pgms.salvador.ba.gov.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189dfcf8b52000004030046304402207c314d638fd1a6c37ff1497112fc65ebb7b75e817b9f932c40690dc9bafa95d10220319d19409c6971c7af2e897e07801b6aee8afc780fe6fcad390fd4d112886bd80077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189dfcf8b690000040300483046022100fd27650eb9e32af2e275784e47546871cc44713ff819eb3d55b32e754aeea01d022100aebe33c4bf586738fb2a0580378f38b4468d8263b23bcc98f265e3b5a3044155
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016096253c9a6edad6f8ff4f7dc6c6b721796d5df73ad37f2ff3ba9a94d10aabaf75c73f7a329fbbcf35c50ccfb51242eef8de6175b700323e89fd4d1ef5d7a0867d3bbabaf1a3bda565270044d6611af2b88c1f4aaae97da241bab04e37bb0c7a500340ff6b5a8cff8a3e5270ece3b9a78723e1403d12819cdd33df8b0eafa322500a2585e126b644b71003e62b9c36aaaa23f43ff25ee79738fa160b1480ebad914ff55aeddc590e717f56d8cabef270ebc6f0a702803577218696aba5d4a61cd9d86138327323365aa691f62d2b230b3ec77b092e5b48414b8cf8d1e39006e8b1e7be273b1e7c2f6d171fd2f0c3f540040f3cc9fd12324890d2919e3770376