wwws.banestes.com.br

- BANESTES SA BANCO DO ESTADO DO ESPIRITO SANTO -

Issued by GeoTrust EV RSA CA G2

About this certificate

This digital certificate with serial number 0c:9a:f5:b0:81:29:29:d9:9b:27:22:73:ac:46:65:78 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BANESTES SA BANCO DO ESTADO DO ESPIRITO SANTO

Company registration number: 28.127.603/0001-78
Organization: BANESTES SA BANCO DO ESTADO DO ESPIRITO SANTO
State / Province: Espírito Santo
Locality: Vitória
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:9a:f5:b0:81:29:29:d9:9b:27:22:73:ac:46:65:78
Serial Number (int): 16755332840116180956123582490627958136
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:ac:d7:7c:1e:76:67:ed:a9:29:95:83:01:de:eb:24:23:ba:76:b4
AuthorityKeyId: 28:d2:cf:ee:09:84:75:dd:b5:b2:b5:bf:3c:d5:a0:c6:73:88:5d:1f

Fingerprint (sha1): 5d:75:4b:51:b5:9d:48:19:b4:01:07:03:d6:d9:0e:25:0d:0a:0e:4c
Fingerprint (sha256): dc:70:ff:05:82:7f:d6:77:51:51:51:ea:61:98:2f:2e:33:e9:47:5a:59:3d:f9:8e:09:df:92:6d:29:35:ee:25

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl

Check the revocation status for certificate wwws.banestes.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwws.banestes.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwws.banestes.com.br

Other certificates including the domain name banestes.com.br

(limited to 100 certificates)
portalinternet.banestes.com.br
www.banestes.com.br
mail.banestes.com.br
*.banestes.com.br
www.banestes.com.br
gerenciador.banestes.com.br
av.banestes.com.br
portal.pix.banestes.com.br
www.banestes.com.br
wwws.banestes.com.br
av.u.banestes.com.br
seg.banestes.com.br
portalinternet.banestes.com.br
svcpiprapl01.banestes.com.br
banestescorp.banestes.com.br
www.banestes.com.br
seg.banestes.com.br
ws.u.banestes.com.br
wwws.banestes.com.br
wwws.u.banestes.com.br
wwws.banestes.com.br
seg.banestes.com.br
seg.banestes.com.br
wwws.banestes.com.br
banestescorp.banestes.com.br
misp.banestes.com.br
portalinternet.banestes.com.br
seg.banestes.com.br
seg.banestes.com.br
wwws.banestes.com.br
misp.h.banestes.com.br
ws.banestes.com.br
www.banestes.com.br
*.banestes.com.br
www.banestes.com.br
wwws.banestes.com.br
portalinternet.banestes.com.br
depositojudicial.banestes.com.br
wwws.banestes.com.br
seg.banestes.com.br
chat.banestes.com.br
wwws.banestes.com.br
ws.h.banestes.com.br
seg.banestes.com.br
www.banestes.com.br
portalinternet.banestes.com.br
banestescorp.banestes.com.br
depositojudicial.h.banestes.com.br
wwws.banestes.com.br
*.banestes.com.br
portalinternet.banestes.com.br
sisjur.banestes.com.br
wwws.banestes.com.br
chat.banestes.com.br
*.banestes.com.br
seg.banestes.com.br

Certificate

The complete raw certificate details for wwws.banestes.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoZD0DLprGwq1haQXRa1
YSNb4BOjZNMHtRWcJojCTBkH149XnBGMuikpv0Ec+Oovgfehc0rbMtRQeRBJmjum
MB3meMEV2eMLfscJMbNBKnglC4SjDSv75v0uS8HYYrCnkL0mKp/xzT8YqJ+MVxvf
knPqdg/u0OVFVAwGhxtXBKFeVVIECfYP1gNWLFg/qFWrkgJ4G/vk3RIOHCJtOl1t
r+MELEsZxpHkJx+u2DQRX0s5dyJfSi9waBb5aSmjVhDO8+gGVes8HkSNaRD+ACu8
S1FiyjgH+HNp8E2pjKbSp3q+os10730wPROnhUM9MppUz4/AQ2PMG3cZpg0S40kq
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16755332840116180956123582490627958136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '28.127.603/0001-78'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Espírito Santo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vitória'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BANESTES SA BANCO DO ESTADO DO ESPIRITO SANTO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwws.banestes.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23546533211337685293493807954163418204096991714550332418809931527310883981119317701813924784450648574795059886022791601591268010196696330905904857224749133938882367654098625019350021277454803562971366690278876223246437947320788388954172403868724393386008215516319170808725491163561742695950419714917495670713816106919110532019575791879729761041705933694718099939206074887864789650107918034133872348338855099867046455440011164457703558308893156100219917879582296486427763234169831979546089033228484501743733066633036359239298614478367058706519144861129263588889071146733676390237131059006170332536421130872928279800409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28d2cfee098475ddb5b2b5bf3cd5a0c673885d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8acd77c1e7667eda929958301deeb2423ba76b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.banestes.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188734f169a0000040300473045022100d4d24b647196d157c2240cdab4a76b994af8a7c5673816827c337e575238a2d802207662b514f6b07f3867261b2b7ce790ceb84084f356e6df565e795380acdbe89400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000188734f1680000004030048304602210091c4bd5e480ab98d10bcf6efe125496d1e6f31cb6408ea9fcac53474b42adc8b022100b8095a32d1a13594ce71b841ee5f9b27fbe4cf9a8fc2426185ca7ec05d76833c007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188734f165e000004030048304602210083f3eb9872a1ecd69fb6cbacf9a2d9521af2aa54b49617996691d8f9542cd13d0221009dc63fb789c1fb63b794123fb6fea207450a2a54b866d7b398ebe1e88ccfb13f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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