lgpdagricolaalvorada.nuvemx.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:f1:df:8a:34:e4:5d:1d:0f:7e:29:87:0a:be:6c:b8:85 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lgpdagricolaalvorada.nuvemx.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c6:f1:df:8a:34:e4:5d:1d:0f:7e:29:87:0a:be:6c:b8:85
Serial Number (int): 329034271077973238601798025587192924780677
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:97:b7:5e:35:f6:e2:75:8b:59:94:32:99:8f:5f:2b:b8:03:50:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:45:a9:32:0f:de:b1:3f:73:5c:43:d4:3c:83:48:19:0d:1d:81:a8
Fingerprint (sha256): c0:bc:cf:ba:50:c9:10:da:22:fe:66:e0:cd:aa:3d:42:65:19:22:7c:47:dc:33:50:29:64:c1:f8:5e:b2:68:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lgpdagricolaalvorada.nuvemx.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lgpdagricolaalvorada.nuvemx.com.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lgpdagricolaalvorada.nuvemx.com.br
portallgpd.agricolaalvorada.com.br

Other certificates including the domain name nuvemx.com.br

(limited to 100 certificates)
lgpdavonale.nuvemx.com.br
lgpd.mmcorporatelaw.com.br
businessgenesis.nuvemx.com.br
grcdemo.nuvemx.com.br
lgpddata.nuvemx.com.br
everest.nuvemx.com.br
lgpdalbertsabin.nuvemx.com.br
lgpdtotvsux.nuvemx.com.br
lgpdconceicaorioverde.nuvemx.com.br
lgpddemoux.nuvemx.com.br
lgpdpostopresidente.com.br
lgpdpmi.nuvemx.com.br
portallgpd.lojasmm.com.br
lgpdmutua.nuvemx.com.br
lgpdteste0715.nuvemx.com.br
portallgpd.stoccheforbes.com.br
vivver.nuvemx.com.br
businessnec.nuvemx.com.br
santacruz.nuvemx.com.br
lgpdunipam.nuvemx.com.br
lgpditauna.nuvemx.com.br
lgpdcoqueiral.nuvemx.com.br
lgpdband.nuvemx.com.br
lgpdmpevazia.nuvemx.com.br
lgpdbelago.nuvemx.com.br
lgpdsinprosp.nuvemx.com.br
lgpdsonda.nuvemx.com.br
lgpdsuporteemx.nuvemx.com.br
lgpddediccar.nuvemx.com.br
businessembol.nuvemx.com.br
cedro.nuvemx.com.br
lgpdbasicdebleison.nuvemx.com.br
grcvazia.nuvemx.com.br
portallgpd.bbmlogistica.com.br
portallgpd.tppf.com.br
portallgpd.defensoria.pe.def.br
lgpdmpeparceirovazia.nuvemx.com.br
portallgpd.rfconsultores.com.br
lgpdhtb.nuvemx.com.br
lgpdabr.nuvemx.com.br
cs.minhaitatiaia.com.br
portallgpd.taua.com.br
lgpdpmi.nuvemx.com.br
precavida.nuvemx.com.br
csc.pluro.com.br
portallgpd.fibracem.com
lgpdtotvs.nuvemx.com.br
lgpdtvanhanguera.nuvemx.com.br
lgpdexcellence.nuvemx.com.br
lgpdquintera.nuvemx.com.br
portallgpd.defensoria.pe.def.br
grupocataratas.nuvemx.com.br
ouvire.nuvemx.com.br
lgpdcobasi.nuvemx.com.br
lgpdteste0823.nuvemx.com.br
lgpdpoclgpd.nuvemx.com.br
lgpd.gndconstrucoes.com.br
portallgpdraf.com.br
ingra.nuvemx.com.br
aprs.nuvemx.com.br
lgpdiosr.nuvemx.com.br
lgpdcarglass.nuvemx.com.br
portallgpd.pitchonimoveis.com.br
lgpdagricolaalvorada.nuvemx.com.br
pjus.nuvemx.com.br
nexusliga.nuvemx.com.br
faj.nuvemx.com.br
lgpdkinoplex.nuvemx.com.br
lgpdembol.nuvemx.com.br
lgpdclm.nuvemx.com.br
lgpdbreitener.nuvemx.com.br
alianca.nuvemx.com.br
grchect.nuvemx.com.br
grcnowcy.nuvemx.com.br
lgpdgloboaves.nuvemx.com.br
lgpddpmg.nuvemx.com.br
sd.nuvemx.com.br
lgpddemo.nuvemx.com.br
lgpdmatterhorn.nuvemx.com.br
portallgpd.emxtecnologia.com.br

Certificate

The complete raw certificate details for lgpdagricolaalvorada.nuvemx.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISA8bx34o05F0dD34phwq+bLiFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDExMjIxNTVaFw0yNDA1MzAxMjIxNTRaMC0xKzApBgNVBAMT
ImxncGRhZ3JpY29sYWFsdm9yYWRhLm51dmVteC5jb20uYnIwggGiMA0GCSqGSIb3
DQEBAQUAA4IBjwAwggGKAoIBgQC3JNlQX5iiq3W5uUmXf9jwgwBdWv4qM1272ot9
STZvJmY+RbZ7fEz+GhPTLHgpI+hUVpZMxJfVppT0bTldEv1KJQgOP5VljVjGAljR
dZyNOoBvsGFpq4UOKTf74nmYywVI50ix14V5jZ8Zpk4vMPaM9rxbSp21Gfh66LUd
P7tG4gfeEne4bukRabkoCmWwHg+gLR4yhSIv1sbrz3wL6Q8JswUANhT9W98A+ebx
krdK7lO6rIfuYmrPHV0j/l59fM9KNSSQgvzMQGptrkvBgl36/0VBnHNnPMX4g27E
DMkG79Jq+RLOw8xBDLG9Ci2v/zXuiFWEFRUCqECVOlwQpkKk2ZvS83H65LU/+nZJ
5wy5BQMml3D2pECQ1zcgzLKCHg3GuKGj70D6EKNv4xItkGkVhy2eXOyQWkGWYDQ9
rFFK7LoPkyyXC46WIESJtRasxUxUBUzBJeTvLtyQYdp2XuydplcpZ/uv7N779FGa
Sp+WlxcoW21Edv/EQ2jsrWTImj8CAwEAAaOCAkcwggJDMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQU/5e3XjX24nWLWZQymY9fK7gDUFYwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wUQYDVR0RBEowSIIibGdwZGFncmljb2xhYWx2b3JhZGEubnV2ZW14LmNv
bS5icoIicG9ydGFsbGdwZC5hZ3JpY29sYWFsdm9yYWRhLmNvbS5icjATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AKLiv9Ye3i8v
B6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjfottDEAAAQDAEcwRQIgQYOVzW7g
6ABQ6+nqUuUEAt8p/UQR/S+jfDltMufiHiwCIQCuravV+nMpfPOaTLjuQqOrcJRA
BgkO1WxSudl9jdJYOAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb
AAABjfottAQAAAQDAEYwRAIgV0PWeFv00aqIvPR3HcoixtIN+6STCRQNboGr2cep
O2MCIDVx3xtPFc5zs83PEpqAWWrljxFCSPya3BmvtAFdYpXhMA0GCSqGSIb3DQEB
CwUAA4IBAQB0BI7YKqZ4tysXxgki/aUnyDtZaTAX8Ihb5FldpJ4ISdp6pj/AN2LJ
p8S8L5qSffUgdKb3Fn5bLZyh7QCR7Jf1QhAeq0sL8FxHFZTGKz59vvGaC6eD7oyh
jZnEiGOj7wxcv44JFH5crSPC523ymXZeAhp/kR+sg04XLNJdttKFBwfTMxtrP/nP
552Mb+yQHYMCbPUv0iiHY+KsiO0iAcdvcfGRyUwFWXuEWbGlggPN8l8LBFQ2RTED
fPv64ErZT6oeLGt1Gl1HMnP7SN9WFNQ1oncwx1OA1oQE4wy764yTCTpD9Om5RPle
SQK/JtilhS/LjqCsrstLLG8soLumY4C8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAtyTZUF+Yoqt1ublJl3/Y
8IMAXVr+KjNdu9qLfUk2byZmPkW2e3xM/hoT0yx4KSPoVFaWTMSX1aaU9G05XRL9
SiUIDj+VZY1YxgJY0XWcjTqAb7BhaauFDik3++J5mMsFSOdIsdeFeY2fGaZOLzD2
jPa8W0qdtRn4eui1HT+7RuIH3hJ3uG7pEWm5KAplsB4PoC0eMoUiL9bG6898C+kP
CbMFADYU/VvfAPnm8ZK3Su5TuqyH7mJqzx1dI/5efXzPSjUkkIL8zEBqba5LwYJd
+v9FQZxzZzzF+INuxAzJBu/SavkSzsPMQQyxvQotr/817ohVhBUVAqhAlTpcEKZC
pNmb0vNx+uS1P/p2SecMuQUDJpdw9qRAkNc3IMyygh4Nxriho+9A+hCjb+MSLZBp
FYctnlzskFpBlmA0PaxRSuy6D5MslwuOliBEibUWrMVMVAVMwSXk7y7ckGHadl7s
naZXKWf7r+ze+/RRmkqflpcXKFttRHb/xENo7K1kyJo/AgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329034271077973238601798025587192924780677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 12:21:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 12:21:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgpdagricolaalvorada.nuvemx.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4156227099009160397754306947603870828380000310864979992370108714934783938440721784040549003085797371310774962508934948283692461847692120641319227151666474578416924636347548637715482965587365241854187096919139155792722714195356601286518903043417119384531841148309828905517872207943180298081456791682853925172816517544631179495124599450017864554565938691684149013345372007602460714843979868743472129450701560746617075488391368153921670736339088175467525891869771202389025690150131846152498416251644756296993863173766429707577885085655598380224221363911851499368910983873578759610798972397563919646831667091516748100698908482498944230014797545479840318027847768257244794070301115896190751015363048727789411312397493332210552965791929995364096616761521555081539699037734480007464377239744655138734921582929783605550914963002695227749407224067615666914521507258421291910557325892925388326125541840452498273371792155892610710936127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff97b75e35f6e2758b599432998f5f2bb8035056
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgpdagricolaalvorada.nuvemx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portallgpd.agricolaalvorada.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dfa2db43100000403004730450220418395cd6ee0e80050ebe9ea52e50402df29fd4411fd2fa37c396d32e7e21e2c022100aeadabd5fa73297cf39a4cb8ee42a3ab70944006090ed56c52b9d97d8dd25838007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dfa2db404000004030046304402205743d6785bf4d1aa88bcf4771dca22c6d20dfba49309140d6e81abd9c7a93b6302203571df1b4f15ce73b3cdcf129a80596ae58f114248fc9adc19afb4015d6295e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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