correioadm.barradalcantara.pi.leg.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:78:97:da:13:b6:09:b2:35:40:99:b3:f3:94:cd:d8:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=correioadm.barradalcantara.pi.leg.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:78:97:da:13:b6:09:b2:35:40:99:b3:f3:94:cd:d8:c2
Serial Number (int): 286337766399956043113937012307497090668738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:d7:b4:5c:14:03:28:fc:a7:74:56:e1:e6:1d:0c:3e:c1:1e:10:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:05:39:3c:8f:07:f1:13:8c:73:aa:37:bf:7e:52:7b:2a:a7:09:fe
Fingerprint (sha256): 6b:40:d7:61:09:c6:da:03:a0:b1:d4:60:0d:b1:7d:73:13:25:14:65:ea:df:5a:13:8f:cd:6a:54:b2:da:9e:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate correioadm.barradalcantara.pi.leg.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for correioadm.barradalcantara.pi.leg.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

correioadm.barradalcantara.pi.leg.br

Other certificates including the domain name barradalcantara.pi.leg.br

(limited to 100 certificates)
www.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
sapl.barradalcantara.pi.leg.br
correioadm.barradalcantara.pi.leg.br
mail.barradalcantara.pi.leg.br
www.barradalcantara.pi.leg.br

Certificate

The complete raw certificate details for correioadm.barradalcantara.pi.leg.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgTCCBWmgAwIBAgISA0l4l9oTtgmyNUCZs/OUzdjCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTgxNDI4MjJaFw0y
MDAyMTYxNDI4MjJaMC8xLTArBgNVBAMTJGNvcnJlaW9hZG0uYmFycmFkYWxjYW50
YXJhLnBpLmxlZy5icjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKWU
3PEu2AUeTmNLX25DY1nKX8NX71w8+oDtoMJpxttTxJBRdaVTy6gXRlZYCwxnD6iz
LB+uNbudg/weI9Ps3QDdO2JMUFvRhOVOYKWB80/PoBV/79xG9HziE5nufj+Rs055
FmIAk6k1jI9KcjUlr51+wW4dmt+vDdSeg9HZNHgITAT1tVqlSTdvkAWt57k5UCDo
qsax3McEDDJXa/UKeVTdICXGH5BdXDT3KQuZXvIvyd4tojFRxzb8aHtJOxewpcha
ic4vPeSGXO5kFxziAKhECUzTgqI5VTku7vtDf2mCMtWH7jQIAk4eP5p2eqQLGNT0
UA8bQsH9BrHp7Sk1JBx3sVWm1J6jT1jvsyZEuYWD0xyYvOGfcDeQuhcyuI1wX77S
PVBPL7xl4EPzaPKskNHo1HH17xGO1/gPJbGezzdHHlyXGFVDvusCwcdHPri8oAky
Uj1/+WatkyZATusmcXkTBxXwhHW5x8HkCyV1iBTfaKm3XgAT13J1948H2XhWmryt
+SokGG9E1WJ6jGA87h1iUAsU3agAtRRt6FXHQ8ngHLkxro8m2qWgzdZcVM/g5tA2
4zzJ6bSJNtSbPc6BZUME2i44HDFyLbXqiBigWTe0XJWooaDNCOBoebSXqzgPyTT0
XKq75TLJ88Aqt6POMS7xvGnf+8+PYlTBfazm47NnAgMBAAGjggJ6MIICdjAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFBjXtFwUAyj8p3RW4eYdDD7BHhBtMB8GA1UdIwQY
MBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEF
BQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEF
BQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0R
BCgwJoIkY29ycmVpb2FkbS5iYXJyYWRhbGNhbnRhcmEucGkubGVnLmJyMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFufyEM7wAABAMA
RzBFAiA+WxXmjv8rLXU4p5gypR9FanFpfn4GtBf/UOBQTBIY2QIhALiKvjnckkPF
6f1HLay76Cd7Xf+qCgjtgRCopA4hMi6aAHcAsh4FzIuizYogTodm+Su5iiUgZ2va
+nDnsklTLe+LkF4AAAFufyEM4AAABAMASDBGAiEAt5IYyXASLODUc4BlLVV7WQ+x
X9TY34/JXQ1Q8uxESQ4CIQCyR/BeBCViwAWzUhoClhl8C66gKTd7qbwIkk8Jg3J4
LzANBgkqhkiG9w0BAQsFAAOCAQEAfO7EEucsknmvAi/EKNpLXY8hZ8evzBDrqmVw
CFVT3Di6g55cyEOJsDT00jaUpTPzVTmawEnzd5NTLIkhkc8O6KC2UXNIsJN8n3cR
fhV6lY0fQ1K8JbgxnxDsxV+M6HNytDuNn2brhxPgVmbyJ/R0RseFFgqiWc/DijvE
BT6jF1Tc4ZejSIsVgklK17F9O5FQRLnEmH49xHPicjjeED7P3u7psH67N4z7eDUw
GpUFo1xOeeJqInEVaW7rn7CJWg8bz9mpa7GVOBvW8HL7K10H6GSrQVfiDxXCaytR
f0znt/A3XcuJqxoI63p5uGGeJ9pJRsIMQ0vttfM9FVUTwXuyCw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApZTc8S7YBR5OY0tfbkNj
Wcpfw1fvXDz6gO2gwmnG21PEkFF1pVPLqBdGVlgLDGcPqLMsH641u52D/B4j0+zd
AN07YkxQW9GE5U5gpYHzT8+gFX/v3Eb0fOITme5+P5GzTnkWYgCTqTWMj0pyNSWv
nX7Bbh2a368N1J6D0dk0eAhMBPW1WqVJN2+QBa3nuTlQIOiqxrHcxwQMMldr9Qp5
VN0gJcYfkF1cNPcpC5le8i/J3i2iMVHHNvxoe0k7F7ClyFqJzi895IZc7mQXHOIA
qEQJTNOCojlVOS7u+0N/aYIy1YfuNAgCTh4/mnZ6pAsY1PRQDxtCwf0GsentKTUk
HHexVabUnqNPWO+zJkS5hYPTHJi84Z9wN5C6FzK4jXBfvtI9UE8vvGXgQ/No8qyQ
0ejUcfXvEY7X+A8lsZ7PN0ceXJcYVUO+6wLBx0c+uLygCTJSPX/5Zq2TJkBO6yZx
eRMHFfCEdbnHweQLJXWIFN9oqbdeABPXcnX3jwfZeFaavK35KiQYb0TVYnqMYDzu
HWJQCxTdqAC1FG3oVcdDyeAcuTGujybapaDN1lxUz+Dm0DbjPMnptIk21Js9zoFl
QwTaLjgcMXItteqIGKBZN7RclaihoM0I4Gh5tJerOA/JNPRcqrvlMsnzwCq3o84x
LvG8ad/7z49iVMF9rObjs2cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286337766399956043113937012307497090668738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 14:28:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 14:28:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'correioadm.barradalcantara.pi.leg.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675513569191805185743194910354550770847268936351562618458900689522402118765095953801210697851488170229590046912362525010197948052634643748331331809501164929771925539934435909427231161792700064654196686192795774852002179671663752283571715101331869850930366460489804670923506492438128701305424848126672109085457972821681668114632411001271079014243821773358139762815869170493050888734047683751257054540065277280725563454903351568091230708661897154720244134810396840863194489116099488967951062730841656311563839066230488072574572144386564423272784639056459116734040825963875648129384400969939844169112981379079230677264968473167020157092169760416546492460730398677347624981670778817216157273294907138719012022446370176592928040326325468013067433514254451716718444768465661297731751192033321709779047105195181145474440123533722553039497134541602635226823218644330309793647940777210913585488420679448933984684290014075987718709151527603222574394025718915908666583376653096373792323704908842392161812197749971608759299668122500869202605708351911604508890380080447303453914887219389598764920280809674946085531138924022700527727189304425379463754608490757777605305289964770883869683406918291821643051379690207785019632873578419600136427778919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18d7b45c140328fca77456e1e61d0c3ec11e106d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correioadm.barradalcantara.pi.leg.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e7f210cef000004030047304502203e5b15e68eff2b2d7538a79832a51f456a71697e7e06b417ff50e0504c1218d9022100b88abe39dc9243c5e9fd472dacbbe8277b5dffaa0a08ed8110a8a40e21322e9a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7f210ce00000040300483046022100b79218c970122ce0d47380652d557b590fb15fd4d8df8fc95d0d50f2ec44490e022100b247f05e042562c005b3521a0296197c0baea029377ba9bc08924f098372782f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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