goveo.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:d2:5e:bd:d1:cd:19:b8:47:36:65:6a:9c:2a:08:61:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goveo.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:d2:5e:bd:d1:cd:19:b8:47:36:65:6a:9c:2a:08:61:6e
Serial Number (int): 324909007847592405327201150960637565231470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:20:c2:17:94:ca:ff:4d:c9:e6:e5:27:39:7d:9a:69:5c:c8:2c:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:61:d5:22:77:f2:94:a2:de:aa:a7:01:c2:83:8e:ac:75:47:8d:e5
Fingerprint (sha256): 75:ed:f8:83:06:e3:d4:ea:9c:9e:c8:5e:40:1a:ea:66:de:92:c9:cc:1a:65:6e:60:91:83:eb:3d:fc:49:95:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goveo.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goveo.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goveo.app

Other certificates including the domain name goveo.app

(limited to 100 certificates)
climbo.io
www.goveo.app
shop.goveo.app
id.goveo.app
rancher.goveo.app
www.cesbarstore.com.bo
cms.thucdon.app
www.goveo.app
goveo.app
shop.goveo.app
auth.icepeak.ai
goveo.app
shxt.xyz
id.goveo.app
auth.icepeak.ai
www.cernst.dev
goveo.app
johnsontechgroup.net
mailer.goveo.app
kamberapp.com
cms.thucdon.app
www.alvarado.dev
order-n-pay.com
unwatchme.juanguarin.com
takion0.jp
www.stylemycloset.in
www.moment-bern.ch
goveo.app
jifunzebitcoin.online
goveo.app
mailer.goveo.app
www.cghxstudio.com
akbarali.tech
www.intelystate.ca
www.pokebattle.click
links.goveo.app
www.goveo.app
mailer.goveo.app
admin.metootribe.com
docs.latd.ai
www.oneworldservices.com
qrms-v2.qburst.in
goveo.app
www.cernst.dev
www.app.zkmakers.com
goveo.app
q4b.org
ipv6-insider.de
vebizhuri.com
elfwill.com
fastify.pandicorn.app
ipv6-insider.de
sarov.name
app.luner.com
goveo.app
www.dotawho.net
fastify.pandicorn.app
goveo.app
www.northmiamibeachpermits.com
goveo.app
geooh.app
www.goveo.app
mailer.goveo.app
www.kolorsearch.net
onlinewaitbot.flashaim.com
onlinewaitbot.flashaim.com
kamberapp.com
www.footprintsads.com
memory.muravidek.re
mickeyuysal.com
www.mioju.app
www.oneworldservices.com
www.goveo.app
afifnass.com

Certificate

The complete raw certificate details for goveo.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISA7rSXr3RzRm4RzZlapwqCGFuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTkxNzAyMjhaFw0x
OTA3MTgxNzAyMjhaMBQxEjAQBgNVBAMTCWdvdmVvLmFwcDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBANpfWgsNY9i5mBxg9QqWsCdxizAHLQs/o7WsSKJ1
h8yIG+9U7LaPdZEHMuwp3CcxzWVMas6Oi/x2zJRrPDyyf3FaknDb9u3wl2cIQWLg
1Xq95yPD2tj4MSJJBXlhaqY4IXvBynHJxGN9lxk/LVwb/XVec/8T+0FbbTpsY37+
ajo+7MnQlamjbIRQAd2P3ZTKRC87QSjLC2FWtcT/fo4qLLdcHrqSM5k7ypiqWZYH
VccotOA53ayM01/habDDMbHqoVFBUACwNzEZg3fCHr2CpPSIEUAlzbKLHbmG7duK
Pk7v/wuDBa9xI0L61Ew4HrkUob+VVjUFSqjR+xbJ3Yo85OzTjdMWhGyF9JuvTRVc
XgOk/ty3qmM3m99h/6H05R9nbf3usXlJ6fyCY3oCyfnCaTOTEkchtev5Ziq1gfzy
nL/yOvaSkUZbLT7aU2YQMXqv/n5X00/mY86gpQAE522GOtq+bBZmckMogSfX7DwP
v4Gh54qVZ6ApS1ozrUsNULDT3O0vVOOialuJaXquHHdinziszVu3wQN2dfK/JSs4
NKuxahdr1UHxMfjPvCpczDxV3aXAAw1UCtfLxsloRH6kybnVPEwwLRi7wiKvw2s7
u5M3zRuOpSKOYICIzgdyb9PFXOauXKtbE6yYJaPbS96cr70FOyRi7rgVrivt1+m8
AGuJAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLYgwheUyv9N
yeblJzl9mmlcyCzIMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJZ292ZW8uYXBwMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdH7a
gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFqNsOX7wAABAMARzBFAiEA
r5k2Ab8hSdPgfkohintZAGgG2ey7mryK9LR78neIFVcCIAY4zSmsdigDUfm8SoDg
lyzRMPWeDBbW9dhcBo9gU3aXAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFqNsOWDwAABAMASDBGAiEA7asaZDEWeDoCWesFob2Lu7oJ3Ar1CpXw
sn8WJ1ePIMsCIQDeqgx8cA0LARgFdaww07VROV+6qFKojzosL8nlvEfkiTANBgkq
hkiG9w0BAQsFAAOCAQEAQhJij3qo+576IUDqAWt2flV0E/PxS+6yM03J+zD4is97
cFxhA9ylGao+sdhXbmNUAKJqEGHWXyNg/ePgcm44kcNUgWSoF6Ojr49zp2w538fA
uC505k5UAnydoCmm1sUmZGfwZX7R+NxJA0TAJEavhdn7pzu+HIT1vIt8YLndJFBu
cpQtqUt1QROQMpRQkjAz1bUzi6R2RwlpXEHPMDOCnXzjXUYai10GJn584S78oohy
Ls4ZkASGtnGAbTQ+sK8+6kY6DZHxycQaVKp7yHl9hcdQ3Qd2iZg49KK3plR9VAWy
mxSb/evPXXZZndhGD2FzahQUVvtak5o2+jJGHXvVuw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2l9aCw1j2LmYHGD1Cpaw
J3GLMActCz+jtaxIonWHzIgb71Tsto91kQcy7CncJzHNZUxqzo6L/HbMlGs8PLJ/
cVqScNv27fCXZwhBYuDVer3nI8Pa2PgxIkkFeWFqpjghe8HKccnEY32XGT8tXBv9
dV5z/xP7QVttOmxjfv5qOj7sydCVqaNshFAB3Y/dlMpELztBKMsLYVa1xP9+jios
t1weupIzmTvKmKpZlgdVxyi04DndrIzTX+FpsMMxseqhUUFQALA3MRmDd8IevYKk
9IgRQCXNsosduYbt24o+Tu//C4MFr3EjQvrUTDgeuRShv5VWNQVKqNH7Fsndijzk
7NON0xaEbIX0m69NFVxeA6T+3LeqYzeb32H/ofTlH2dt/e6xeUnp/IJjegLJ+cJp
M5MSRyG16/lmKrWB/PKcv/I69pKRRlstPtpTZhAxeq/+flfTT+ZjzqClAATnbYY6
2r5sFmZyQyiBJ9fsPA+/gaHnipVnoClLWjOtSw1QsNPc7S9U46JqW4lpeq4cd2Kf
OKzNW7fBA3Z18r8lKzg0q7FqF2vVQfEx+M+8KlzMPFXdpcADDVQK18vGyWhEfqTJ
udU8TDAtGLvCIq/Dazu7kzfNG46lIo5ggIjOB3Jv08Vc5q5cq1sTrJglo9tL3pyv
vQU7JGLuuBWuK+3X6bwAa4kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324909007847592405327201150960637565231470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 17:02:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 17:02:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goveo.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890881942470341907897684378398042853854314602219699564473555762209609194054306606956873411086378802888028525342740802040482283462820879807264764287053988025342237856088156462902769942748342750979987283132630437145624633696165236458809438563860689348316078464900867232536231011356875644682210013035627653358479891448262656279145023935159791944006016144501644913681206551482808665367490777734308659698990638331129425886226358808565932749940979999477119541063055584294138333687891023550488251257340549603745897823684224423859547035080264680076127844222157723941077901382717189234956559530258196404224700420807275232444633778380014811413029607205358548817647092973838289053225559754752512226622208063203872462737995497298789842126555937254044792908925865001763995446535224256381380991600128446401007455736006606037605131876347016602337049838485121336532644022906744582465663108131855198811749069092278815134376959590987107486258707079750471857357701364201386766367491955920464396407242741199123520440166790670398350298782806249322948053653833121546256857658292579615177777551531120515722769415455246067545144777613981728541780500020362019259112177739128080780893814706495213219755522345068747046798541211760411241733152922964930649418633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b620c21794caff4dc9e6e527397d9a695cc82cc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goveo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a36c397ef0000040300473045022100af993601bf2149d3e07e4a218a7b59006806d9ecbb9abc8af4b47bf27788155702200638cd29ac76280351f9bc4a80e0972cd130f59e0c16d6f5d85c068f6053769700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a36c3960f0000040300483046022100edab1a643116783a0259eb05a1bd8bbbba09dc0af50a95f0b27f1627578f20cb022100deaa0c7c700d0b01180575ac30d3b551395fbaa852a88f3a2c2fc9e5bc47e489
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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