rosatavares.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:11:4b:6b:41:8b:56:97:b4:af:17:bf:c4:20:09:5a:a3:62 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rosatavares.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:4b:6b:41:8b:56:97:b4:af:17:bf:c4:20:09:5a:a3:62
Serial Number (int): 354334192969540810321137581027549224018786
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:79:ae:c5:fa:42:6b:ad:b7:99:d1:3d:10:ce:20:e8:cc:12:7b:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:f8:cb:90:9b:31:92:dd:bf:82:e7:ce:f9:ca:83:aa:59:b8:fe:e3
Fingerprint (sha256): bf:e8:b9:2c:ae:72:58:57:9d:93:2f:3d:e2:aa:59:b1:53:9c:58:7a:06:1b:95:4f:68:7b:15:0b:ee:96:9f:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rosatavares.com.br

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosatavares.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.parraengenharia.com.br
cpanel.rosatavares.com.br
parraengenharia.com.br
parraengenharia.imobibrasil.net
rosatavares.com.br
rosatavares.imobibrasil.net
webdisk.parraengenharia.com.br
webdisk.rosatavares.com.br
www.parraengenharia.com.br
www.parraengenharia.imobibrasil.net
www.rosatavares.com.br
www.rosatavares.imobibrasil.net

Other certificates including the domain name rosatavares.com.br

(limited to 100 certificates)
molinoconsultoria.com.br
rosatavares.com.br
tinguaimoveis.com.br
rosatavares.com.br
rosatavares.com.br
rosatavares.com.br
*.rosatavares.com.br
rosatavares.com.br
rosatavares.com.br
rosatavares.com.br
rosatavares.com.br

Certificate

The complete raw certificate details for rosatavares.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGqDCCBZCgAwIBAgISBBFLa0GLVpe0rxe/xCAJWqNiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTIxMzI2MTlaFw0y
MDAyMTAxMzI2MTlaMB0xGzAZBgNVBAMTEnJvc2F0YXZhcmVzLmNvbS5icjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALzDYF8S0nYdKMe2UR6NjifExhNC
t8lSU9qaCL/lYd+TtuobSqZZeM4FPc2K/qzTEqIqUKGBZF6UFBNiVhdBXJ8Uek06
Vws/2uoHNOXTW9ybfvguJxpk0iegX+nftLqUNXIl3G0meHPGSAv5+qdbvWv6s6a0
h9njmOHUJILfiHiwgSzthMNKx5f2pW2md3/21+EUMjLp0M+4+nzBEysA7Ex28LrU
4LGgb7hFfITH9vfAGmago4FdU7hYwoeYX9l+xoSNULEaly3WPt6yylUAhTbHz8tN
APlHXCsCNphMRaMu+jXrwjaUSrQJkghn48A7jA862h0ieXFFj3mypy4VLWcCAwEA
AaOCA7MwggOvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUXXmuxfpCa623mdE9EM4g
6MwSe1kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCAWcGA1UdEQSCAV4wggFagh1jcGFuZWwucGFycmFlbmdlbmhhcmlh
LmNvbS5icoIZY3BhbmVsLnJvc2F0YXZhcmVzLmNvbS5icoIWcGFycmFlbmdlbmhh
cmlhLmNvbS5icoIfcGFycmFlbmdlbmhhcmlhLmltb2JpYnJhc2lsLm5ldIIScm9z
YXRhdmFyZXMuY29tLmJyghtyb3NhdGF2YXJlcy5pbW9iaWJyYXNpbC5uZXSCHndl
YmRpc2sucGFycmFlbmdlbmhhcmlhLmNvbS5icoIad2ViZGlzay5yb3NhdGF2YXJl
cy5jb20uYnKCGnd3dy5wYXJyYWVuZ2VuaGFyaWEuY29tLmJygiN3d3cucGFycmFl
bmdlbmhhcmlhLmltb2JpYnJhc2lsLm5ldIIWd3d3LnJvc2F0YXZhcmVzLmNvbS5i
coIfd3d3LnJvc2F0YXZhcmVzLmltb2JpYnJhc2lsLm5ldDBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFny
ANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbmACFsgAAAQDAEcwRQIgFuTb
mvua3NV7GLWSsLrqflKw+q2CEEy7wzvTrwCythICIQCImWL5uuJPNRAcKn/aOrxH
iWC1zh5aZi13zxEi1dd9QQB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp
06IcAAABbmACFu4AAAQDAEcwRQIgZS1LPObWLrbZjaFeRLnRk0Bal0q9zrFAJlAe
XpasNkgCIQCYJuCqati4BKrbriniyMe/54KcqyJiXj1StBKuEhHLcTANBgkqhkiG
9w0BAQsFAAOCAQEAm7Z1OHQlVlrNmG17zXFTnmWjRBblOTa6SqgU8m1TqA204miO
4/fahHbFRB2nQFncwzHLkvpYDi1gzn/kMhmd8llTXfWnkXHXA0EndJmIiXLM47Mo
Lpqz8KJa/L9jIg4GJHMgeM39olRI6V2H2eZRRg2xeG1no9EduijZc/7u3x9K0xeA
co5W0XX1DUQv0uKTEs40eKkxPb8+dgfwcN5hzjx2pusv0d3ysELjDCRUvI0SBtPs
uD71ZhLRcfg36eF7LEVhu7O+0xliBsaN3jKMjMygKG7qXuhZD1tiujgmQNlJ7uKG
y0MizcZHUsg3fcZxqmDPzRfE7CycPAAfD3VIuQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNgXxLSdh0ox7ZRHo2O
J8TGE0K3yVJT2poIv+Vh35O26htKpll4zgU9zYr+rNMSoipQoYFkXpQUE2JWF0Fc
nxR6TTpXCz/a6gc05dNb3Jt++C4nGmTSJ6Bf6d+0upQ1ciXcbSZ4c8ZIC/n6p1u9
a/qzprSH2eOY4dQkgt+IeLCBLO2Ew0rHl/albaZ3f/bX4RQyMunQz7j6fMETKwDs
THbwutTgsaBvuEV8hMf298AaZqCjgV1TuFjCh5hf2X7GhI1QsRqXLdY+3rLKVQCF
NsfPy00A+UdcKwI2mExFoy76NevCNpRKtAmSCGfjwDuMDzraHSJ5cUWPebKnLhUt
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354334192969540810321137581027549224018786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 13:26:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 13:26:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosatavares.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23829145052242134251483934353370633434051916867196500961180054759706082690043345264133426967547503095241921698848704295670706462959660151062559335510147579993470130150876218955877985740469036643241484689971376631986857378432074036916271296680062883783029668821271240589478116368853238344491252377609633809130581752590990624156982917716071048073400317989727124863997157735183671119139503651581718821295472793127762008750836742775403191962408795668339240155844538765599499334643910059124188709253008257386594824701937140910374794020462264173885142709519933105971469113414154143663691906177292488207365500494414714580327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d79aec5fa426badb799d13d10ce20e8cc127b59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.parraengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.rosatavares.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parraengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parraengenharia.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosatavares.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosatavares.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.parraengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.rosatavares.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parraengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parraengenharia.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosatavares.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosatavares.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e600216c80000040300473045022016e4db9afb9adcd57b18b592b0baea7e52b0faad82104cbbc33bd3af00b2b612022100889962f9bae24f35101c2a7fda3abc478960b5ce1e5a662d77cf1122d5d77d4100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e600216ee00000403004730450220652d4b3ce6d62eb6d98da15e44b9d193405a974abdceb14026501e5e96ac36480221009826e0aa6ad8b804aadbae29e2c8c7bfe7829cab22625e3d52b412ae1211cb71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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