litigation.abreuadvogados.com

- ABREU ADVOGADOS -

Issued by MULTICERT SSL Certification Authority 001

About this certificate

This digital certificate with serial number 40:68:4f:b9:a1:0b:f5:5d:b3:d5:ca:2e:10:27:6d:f4 was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ABREU ADVOGADOS

Organization: ABREU ADVOGADOS
Organization unit: Website Authentication Certificate
Locality: Lisboa
Country: PT

MULTICERT - Serviços de Certificação Electrónica S.A.

Organization: MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Certification Authority
Country: PT

This certificate has expire since

Certificate Details

Serial Number (hex): 40:68:4f:b9:a1:0b:f5:5d:b3:d5:ca:2e:10:27:6d:f4
Serial Number (int): 85612207620932535033623074820357320180
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c2:5c:70:59:d6:c8:6e:c8:19:b2:2c:68:a0:6f:2b:08:cd:1f:42:98
AuthorityKeyId: b0:02:39:52:0a:4f:73:9a:c8:d9:81:45:36:5d:11:9d:5f:23:39:97

Fingerprint (sha1): fd:2b:24:87:15:c6:fb:77:fe:6e:83:36:25:c4:44:60:56:16:db:81
Fingerprint (sha256): cd:a5:91:90:ed:56:10:60:82:21:c9:75:49:91:22:03:b1:07:df:49:fa:10:b1:d2:f9:a0:ff:2f:b0:7c:46:a0

Issuing Certificate URL: http://pki.multicert.com/cert/SSL_CA01.cer

Revocation information

OCSP Server: http://ocsp.multicert.com/ocsp
CRL Distribution Point: http://pki.multicert.com/crl/crl_ssl001.crl

Check the revocation status for certificate litigation.abreuadvogados.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for litigation.abreuadvogados.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

litigation.abreuadvogados.com

Other certificates including the domain name abreuadvogados.com

(limited to 100 certificates)
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
webmail2010.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
webmail2010.abreuadvogados.com
remoto.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
marketing.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
webmail2010.abreuadvogados.com
mkt.valorcar.pt

Certificate

The complete raw certificate details for litigation.abreuadvogados.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20OSUjq+Cim6YZt657kg
K26iwQLHwpx2ev8VRLyoJIsLxSnDwB+375eAdSBPoQTL/BL+rY8Kvv1XW1Mwf3DO
nYlrFHcOVw5ldWH8p4gwWKOz4ayZGinrYjBbcWoujc2HkyHRKPhKgZW1EtvM9hmm
IPrado1O6vG1VHXA+o8edU91KDWRhBhQTNTScMolIG/XSp+BQvjD9KP5FKhpgybV
0aYMe9eQYhf4WtINkCQXptzOEYU76AIcPjze3EorOqBGQXvIyh1u2I4zlfjTQZGS
C0kLkijNF+I5GleIC9VsgMtcYJkMTRpvafxQrqdeGM8fQbGwhrgDFCFjFQlgmZHq
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85612207620932535033623074820357320180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT SSL Certification Authority 001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 12:10:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lisboa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ABREU ADVOGADOS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Website Authentication Certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'litigation.abreuadvogados.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27679509569246556399091907970058420237742599285890257739072530665581698863998442199401153386722208239615984900682823207292652100464803211049288268025766024507727570321606723373642666318185764717671226351916835563237064180046619440728409092856073632416120343627802225255497435437108001730118881091969020975455106542092980031044644441550210224587815545155014571499717132573999599413176317020874978515352184834491585037130545360925606359401348265567126316294841568449299279076538956895674399044428847596546178121466644705081089529385016316049429628294137942319694581567823651207358053089051807448245429299070071251003979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b00239520a4f739ac8d98145365d119d5f233997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/cert/SSL_CA01.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001_delta.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litigation.abreuadvogados.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.1.17
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.multicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c25c7059d6c86ec819b22c68a06f2b08cd1f4298
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170a05769af000004030047304502206fe63e140095de0371cecd777b4771c54bd5c647d7db3b20db197e182feeb087022100bf8f7356fdcd6d1bf6b6f33981bc71514aa55663abad8bfec2b0ccb7f3fd766b007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000170a0576c9c0000040300473045022100b778c8636e30947710120c2803caeafc0c857418b5419a2b673a87d7e68d60a00220521df3abf2edd924b943d9e2b8fcfbcfc4f0cf946b9b95ac2bcc35d32bc993920076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000170a0576fdd0000040300473045022038b9834599be86defe9a25fda4f0745897e5654534eb2d8f1fc604b2266f7e44022100cbf8b973cb9fa6e21d8bb4cce34a2f551a26ed777f2f8265d8c265ed3c68d69a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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