avnida.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:0d:2d:82:76:47:d3:83:9b:c7:7f:0b:e6:bf:da:ef:52 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avnida.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:0d:2d:82:76:47:d3:83:9b:c7:7f:0b:e6:bf:da:ef:52
Serial Number (int): 306611928859153794346040785604927576272722
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:8f:5d:c5:24:ec:57:b1:c9:0f:a8:36:dc:94:3f:25:28:a5:cb:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:b1:75:79:1d:c0:20:f4:c4:e9:4a:5e:3e:12:a6:d5:21:d9:57:28
Fingerprint (sha256): 8f:b9:8f:a3:1d:db:86:20:3e:c1:44:8d:9e:95:d6:58:0d:88:1a:30:83:f1:97:ee:b2:49:3a:eb:09:b0:47:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avnida.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avnida.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avnida.com.br
www.avnida.com.br

Other certificates including the domain name avnida.com.br

(limited to 100 certificates)
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
www.avnida.com.br
avnida.com.br
sni206984.cloudflaressl.com
sni175095.cloudflaressl.com
www.rolhalivre.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
play.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
cloud.avnida.com.br
www.getpaar.com
sni206984.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
cloud.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
painel.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
painel.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni206984.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
www.emcantomeu.com.br
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
se.avnida.com.br
avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
avnida.com.br
sni175095.cloudflaressl.com
cloud.avnida.com.br
sni206984.cloudflaressl.com
sni206984.cloudflaressl.com
sni206984.cloudflaressl.com
sni206984.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
se.avnida.com.br
cloud.avnida.com.br
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com
sni175095.cloudflaressl.com

Certificate

The complete raw certificate details for avnida.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISA4UNLYJ2R9ODm8d/C+a/2u9SMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTAxMzUzMjNaFw0x
OTAyMDgxMzUzMjNaMBgxFjAUBgNVBAMTDWF2bmlkYS5jb20uYnIwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5+ZVUELstRkCAFP0e4i1QzcfEUJj/QXI
Sbo+lxHe7/EStcgaZPU8lx0ByTuHcj0qdlMV8g/jwvu6Yxl2gVABE8StIFhKMYYY
tF9JYqyfPZQxFp6xiWJDO7vP/y2GZxuvmo7T7wNezfRKJP6a3JAvyVYsCQFZK2ez
Lk3s7e/bzk4C0vDE9mZvvt9dNWSFQ4I2uslpaJ4IYb/+XBuL0TMiOLXDb+JYyS/I
oe+6z9F/XsPz8hP6UeSPrh4oOaSYnbMeMZ/CGp+2TrpPnwCkreQkIC60Ha5YU00q
DZ0HO4Yg5rd/Gh2EG5+vf03KgKUnymq789IotH3zhituLe17CgZ3AgMBAAGjggJz
MIICbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAOPXcUk7FexyQ+oNtyUPyUopcuo
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wKwYDVR0RBCQwIoINYXZuaWRhLmNvbS5icoIRd3d3LmF2bmlkYS5jb20uYnIw
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHz
BIHwAO4AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWb+HPpE
AAAEAwBGMEQCIBNkBB3INDf5mVahkqhJ1+UAX0pT4UuJaXOdt9zB2FehAiBEWarJ
wxX1OHkDQJFScDezK5y2UFLkAGaBP7QPIQejIQB1AGPy283oO8wszwtyhCdXazOk
jWF3j711pjixx2hUS9iNAAABZv4c+kUAAAQDAEYwRAIgIT6GEt+rM9UCe+JGBBrh
6GyZDVnvfL5PJfh2lxKNWSgCIBkqj6qqeWBPxhbDL9LnU/3r1+pat4Vn4l2Iqojh
A8KQMA0GCSqGSIb3DQEBCwUAA4IBAQBx8JqjfrnGN3I/dgMB7s5pjzRq3UI/HCoc
Cg/lEVu5oRtHeOfdCfestlVGrxtxfCX59tDAcuToiY7ZYEydcBcQZrqzB5Xrl8wq
vDp4dfboKZtwvbTT5Af9ynTsd7wj485P2Vj9wpYM7KbtkrLwrJ7L2gZ2dYn3Qq3w
jAvDkrDtnaMiF3gx45i2XmAhJ1AukdtH3mqe185XrXjsO+V7ISVofmYnaC5olfna
WmcSVueNKc2W1ck5QcPHYlwY4jj/3uIbYWR8KqqxHEeNDRdyhjGryoYK1JHQTyTt
dfkpRrqPRUcj62UYk5vfCQD3e1dFBiba+/yuTNGuHtmxPM95K/YI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+fmVVBC7LUZAgBT9HuI
tUM3HxFCY/0FyEm6PpcR3u/xErXIGmT1PJcdAck7h3I9KnZTFfIP48L7umMZdoFQ
ARPErSBYSjGGGLRfSWKsnz2UMRaesYliQzu7z/8thmcbr5qO0+8DXs30SiT+mtyQ
L8lWLAkBWStnsy5N7O3v285OAtLwxPZmb77fXTVkhUOCNrrJaWieCGG//lwbi9Ez
Iji1w2/iWMkvyKHvus/Rf17D8/IT+lHkj64eKDmkmJ2zHjGfwhqftk66T58ApK3k
JCAutB2uWFNNKg2dBzuGIOa3fxodhBufr39NyoClJ8pqu/PSKLR984Yrbi3tewoG
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306611928859153794346040785604927576272722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 13:53:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 13:53:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avnida.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20186244513075615440376557131125769799192027264461973312812641904601180152476138988900812148097880772851329037908165710284543044661565691067530021485965681230171343322548892036224334161908305082147503515067309015881225012503075936318698974679335981203435231612526707503495290573148120911040566918286591698304388940208022542598642308033219152717484753489899471414718601766784385964808002630970661645375367548620987743013887568453824593024169755528411651776790266387968622483973582204386169015287832991472247825026566134842409571574044843032822002116788928325748937184257696133557427980074854298403203235918913297057399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							038f5dc524ec57b1c90fa836dc943f2528a5cba8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnida.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avnida.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166fe1cfa44000004030046304402201364041dc83437f99956a192a849d7e5005f4a53e14b8969739db7dcc1d857a102204459aac9c315f53879034091527037b32b9cb65052e40066813fb40f2107a32100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166fe1cfa4500000403004630440220213e8612dfab33d5027be246041ae1e86c990d59ef7cbe4f25f87697128d59280220192a8faaaa79604fc616c32fd2e753fdebd7ea5ab78567e25d88aa88e103c290
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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