XP Investimentos S/A

- XP Investimentos S/A -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 09:d8:7a:9d:43:8f:92:02:13:25:e3:ab:07:82:22:8b was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

XP Investimentos S/A

Company registration number: 16.838.421/0001-26
Organization: XP Investimentos S/A
Address: Av. Chedid Jafet, 75 - Torre Sul - Vila Olímpia
Locality: São Paulo
Country: BR

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:d8:7a:9d:43:8f:92:02:13:25:e3:ab:07:82:22:8b
Serial Number (int): 13087074997209987421204332377419162251
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 45:6e:f8:c8:e8:8d:bd:ed:37:b6:72:f3:bf:79:b5:ce:10:f0:2c:fc
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 68:6c:cf:5c:3a:cc:9c:7f:15:3e:bc:30:44:44:f1:52:81:64:0d:69
Fingerprint (sha256): 83:66:3e:e1:79:9c:f5:15:c6:97:cc:58:3f:e8:63:ab:e9:78:ad:f5:76:69:a1:75:30:a8:a7:c9:42:4a:da:21

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate XP Investimentos S/A

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for XP Investimentos S/A

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rico.com.vc
maisrico.com.vc

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for XP Investimentos S/A in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpQj0p8sTvTpHBpvc/AA
7Re7WbDsEZsjCz4PqOfBhdyZSXxLT2jUeSr8i64Z4rkkOFETcMHyGneF3djbo8ud
z9SXI+CnEx8K9b/iM4Ih1SZbafP+a+bSVS5+z3O76d2072pxQvUVWMRDrVuoHEbK
dq2V/PyYuRLoYq+aZoMV6YhNaSa6ze1oItl62A4tvhpbVEnsUsRCgu1VVEUWl0mp
0YEzK4LnNYRD6B5Z444SNfu8/2aPAoyfH+7xy9Yn7tcieHnm1s3oxzvXMDnWpmoP
r1ng+NBqsiu5jYnLZgmcSgpf7cphuRQLCHgXPp/6XtZhQswfrpPfBj7deMt8aAsg
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13087074997209987421204332377419162251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '16.838.421/0001-26'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'São Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Av. Chedid Jafet, 75 - Torre Sul - Vila Olímpia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XP Investimentos S/A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XP Investimentos S/A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '921268157'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24058328466938185357850125559502202947758596646552932409696492780436264556213413179948274255089079794568719684227316892745980936904572771486365278075758448203630563278181045271239354243544946692272787692525294513044641392812538167165117008685334932494162024138933442530001702350898185738662142897217355617773234536496844198831967352458224119271506617212870240977863967921406690278212953180268036913361625939046894762455181741538576947727936156014093717463611397283639992057897078490284497948909783387202994109725561333188729464802023159437910446279011835362521589268201539196317009309556351821808274500740891879874701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							456ef8c8e88dbded37b672f3bf79b5ce10f02cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rico.com.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisrico.com.vc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															a8e53bd047cec8ed6c3dade0d0c80288c12c8025
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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