www.megapratas.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:7c:25:51:34:fe:9e:19:3f:66:be:c5:b9:a7:9e:a5:dc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.megapratas.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:7c:25:51:34:fe:9e:19:3f:66:be:c5:b9:a7:9e:a5:dc
Serial Number (int): 311183101399272693630916600070555874272732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:35:90:2f:c3:5d:24:d7:ad:4a:68:2d:db:4c:6f:31:48:da:39:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:ed:a8:cb:31:8c:cd:78:9e:c5:1e:e2:5b:af:ca:a8:0c:89:85:00
Fingerprint (sha256): d0:5e:c2:dc:d2:78:44:9c:bc:d6:e4:fe:a7:0c:2d:5a:18:4a:1a:f1:e8:39:e6:83:c7:99:f0:6f:51:d8:b6:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.megapratas.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.megapratas.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.megapratas.com.br

Other certificates including the domain name megapratas.com.br

(limited to 100 certificates)
www.test.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
megapratas.com.br
www.megapratas.com.br
www.megapratas.com.br
megapratas.com.br
www.megapratas.com.br

Certificate

The complete raw certificate details for www.megapratas.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgISA5J8JVE0/p4ZP2a+xbmnnqXcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDgwNDU4MjBaFw0x
OTAyMDYwNDU4MjBaMCAxHjAcBgNVBAMTFXd3dy5tZWdhcHJhdGFzLmNvbS5icjCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL5zfniVnNpsi9lpewsu1Yyr
8jt83CUT+WoW2wS4Qz8qXWJ5910Uch4CRRoppc7Gp9lO4SR/Cz3n2SasrA+OYHVG
r29C0uWOYMF7B+Zj22e4w6FzuQ8d3lS9OyCkVh/i6+2ufwkYay1jNfVG8TH7buOT
Fy6lRsH+f+tZEwmJBI6EfXa7/Ajyd/x5sxEANN/36EubxT7ap+qxBoKKbXLfiUVv
TpVcqcgF46hXkw58EEbEuZvA5dar4AUIy2cTrA+W4ASWWh5wEVRHqgZFllenvsCs
HjBNF0ckAfz8tpYdECd7Fh4i8BiOS+X4tIE3g53/m2N8OaEIQxqK73/fow+K/cSc
hHHTpQwZPxhXzNtnjBxYGBdGUWy55zkQ1T6Ft24ApfFRseRKOhLb5GPUaQBbO4la
+PJb7zeCb4gIWFtvbcMLt4L42zV0bOyd9pA8P4o6rBzZizTCuY/8/sPdXkU/9Njn
XTtbs6qglswlUqLXfecW+5eQBsAT6lsnB15Y/E1N/37L/swAtQbc0USVRN067euZ
qUE/csdF4c7dCMwiEoDTUzT2fTGYDtZp6W9vHkRzNooqiTJ7wTH3oJZNwg8UUCiq
XAe3TCa6gp2TZ+r9OcIS0ftHl26kwfmF4UGcDeNAm3zyZ0a2QyJGw9/x8hMr63l+
A5p8oVZxnrCWourkziRdAgMBAAGjggMcMIIDGDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFJo1kC/DXSTXrUpoLdtMbzFI2jmqMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3Lm1lZ2Fw
cmF0YXMuY29tLmJyMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf
EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy
ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk
YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6
Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0
BIHxAO8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWbx5mS9
AAAEAwBHMEUCIApxsmjTudONfztxZDXbFP3l20SdAeOdqSjYNUDu3S8BAiEA1UqT
pu7sy5BjbwhhQtyuhBQtjiR0K8x9jtlvVWRCa/UAdQB0ftqDMa0zEJEhnM4lT0Jw
wr/9XkIgCMY3NXnmEHvMVgAAAWbx5maiAAAEAwBGMEQCIEyp8/4pk4BxUXG7OmGY
Pp89awpMBgSqAOUUtE9Gj40aAiBvnNxkcFLFBTpNWK2gt+p8O7AKANzrWsv+Q7mU
Ro/eozANBgkqhkiG9w0BAQsFAAOCAQEAHXgeWsF8chS7C4h76MBQxtAFIaHuSBQY
DvG/naI8Aa+pk5B3HJy5OJnfPo1kCEXFB9qNO3EXpQDx4o8rM/FQxh8M0zoUOWIX
XzHGSlJ31V2cYv1DfSWnWl36ZzUZQmsPtaxtNK+I9f4izqu+uCHhsOR/7Ae86tG1
zdLM+YTYpDbG0K/HSN1fIRwe28G4HzWm4icQPSeysPycS8arsiTuWtpfr1BAaF25
hL6qbJ3tLgUmyTjiomXNZGUYUgdcmd60kw+GA93FpAZjhcy+BeqbAm/5GCvmqj+u
vm60aDKve3SdqGuc/OdxKaUR0Ogxj8B3xIkFVpml5bPBwDmH3Rww1w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311183101399272693630916600070555874272732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 04:58:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 04:58:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.megapratas.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776972898408469131878891126053185682542474356254211877125941376226627501884652816779166253782047595796762505886304965260481132295342800526647191930144091995497820064936663814352005999436347215626623189526844181520746942319178683735225668234295769905641098581652247173544146110591152295286122571100484349919363398286437351516247904081896872585864480677344619070259148808168712399459378793328582745634973214118802014243864367980302431728961953470559051562864413791898152075546651412497903806982417359113812916831611165113825145168946704391924343338923613121302182050040210345323305423166675035121596029107968981629857570063588414614655805380650332781788939152464505021998710999622548059947626672546716715753701682262460600698726112194018050789003163479721720360949187488879487938808678906788938566492334412643818600731153191962903274818281032028062184573530502890889609863778899760161376691069813903673149341607688521067627554605227703274486315777954461578270569586157160635570736486383570999688665326123664799329473485485551013259803552471826212610278867659330587285334452456861838775640341459992275242587427827683888845123109372638965792495346801925829802910700655148089823783433749160741348538529827675878088232035768698753155736669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a35902fc35d24d7ad4a682ddb4c6f3148da39aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megapratas.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f1e664bd000004030047304502200a71b268d3b9d38d7f3b716435db14fde5db449d01e39da928d83540eedd2f01022100d54a93a6eeeccb90636f086142dcae84142d8e24742bcc7d8ed96f5564426bf5007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166f1e666a2000004030046304402204ca9f3fe299380715171bb3a61983e9f3d6b0a4c0604aa00e514b44f468f8d1a02206f9cdc647052c5053a4d58ada0b7ea7c3bb00a00dceb5acbfe43b994468fdea3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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