piwik.lepidus.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:06:95:14:ff:34:49:81:35:d2:c8:5f:a9:82:87:ae:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.lepidus.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:06:95:14:ff:34:49:81:35:d2:c8:5f:a9:82:87:ae:fe
Serial Number (int): 339270269266249834853983056093605607747326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:2c:b5:d1:80:bf:b9:de:f3:db:c6:06:4e:df:11:57:af:b4:8c:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:16:73:b4:5e:72:80:9d:15:70:fe:bf:c7:12:45:eb:f3:41:b5:b9
Fingerprint (sha256): e5:ba:72:8a:2b:29:24:81:3e:39:e4:2b:5c:b8:b8:cb:04:62:5b:d2:e7:85:19:3d:97:d6:10:01:00:d7:7f:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.lepidus.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.lepidus.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.lepidus.com.br

Other certificates including the domain name lepidus.com.br

(limited to 100 certificates)
maven.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
wiki.lepidus.com.br
domus.lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
redmine.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
maven.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
oc.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
wiki.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
domus.lepidus.com.br
crm.lepidus.com.br
nc.lepidus.com.br
redmine.lepidus.com.br
jenkins.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
www.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
git.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br

Certificate

The complete raw certificate details for piwik.lepidus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISA+UGlRT/NEmBNdLIX6mCh67+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDgwMzU3MzFaFw0x
OTExMDYwMzU3MzFaMB8xHTAbBgNVBAMTFHBpd2lrLmxlcGlkdXMuY29tLmJyMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxXV6OH9De2Iob2vFmQmTFvQO
p9RhyfuQHwkU71WWj4lVj/07o72f6IdWS5te1dzJSpPF8uMopzvDV6bQvYdep4Lr
dBc3tTKuUrAr4w54ikRNifxnL4/h9Vk2+i47dekPiPDp06ZcZgql7LwoFLtwK7CB
Ce0eaww9n6yGTqnuT+yP3BIaD++nSoMg1BpEzfUAdhtvnuHMQDRd7MPffWu4od6u
6aBh7tf+leYDnFVrdTpQjFR3b2axT/cbFb6rzfl052fCQqAGZO8zCLoa62LNSffG
JGii14Y8FTNBkOyNaUw+TEmnQzmShlYBp+TuiWG9Rj7Tnt15p5glY9GRoOYCD1BR
jHY9SAM27Ja+xTWRJh5F/YcCnHvuk37Vr726FQ05TalEskcTzHpr6jNb0Mzh9T9b
+mJ1dDUF1kM6kYmOu54N56cdmsnYCxcsn+w886Y1CZHVcqDrd177nccCXHSeD16q
AQczdlDRDv5c6RHLZnHRF7F6ip3g3g4CYRsALqJ10XPNmJyuo9Q2ai+8M1jyE0Bz
Fp6cSG62UowB+VAGa6YKEi4CJbIq7idEyIODWUmFzpbV+oKmK/ot41gS3WXoBQSv
YBWcVs87aoDfZF2T1Fv07flwgRs5AtsR7JsEwEVH9pEFqrKbmZvZuOrdRqvtFUeF
dQ/tNZtoqiCcXHP+CXsCAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUQCy10YC/ud7z28YGTt8RV6+0jAAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRwaXdpay5sZXBp
ZHVzLmNvbS5icjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d
8dv+AAABbG+W1YsAAAQDAEcwRQIgK8Lj5U2ky2e4uVkRLNUuarafOQchneD43fdK
LLM/6UUCIQDzQXSCBp/Nv8HjRN3TN23rHH0a4A3B/0R1naPQqzYr+wB1AGPy283o
O8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbG+W1akAAAQDAEYwRAIgcv5A
kYu8CjGLvn+0vStF1V6Y4f8LNU3BdGcOWMmtx2UCIG1SZSwa/vM0PaUE8aS+lkv3
MUsVs3PxJ349gNJyliy8MA0GCSqGSIb3DQEBCwUAA4IBAQBKKLevp3lVFaF/V5qt
gNf8owS99SvyksqpAVfxPzD8pL7QRyhZ61mF2Sa3Kwm2usA7ws3TZX1aAxJ4bqoL
pPLP6W2w0Cqff+7KAcOEg8yeQ9wG744jMSpmy+boLWifkUfZp6Bos1/JtYeKj/MU
pEN6lbCsVCKuspFKcS2qsL5en0KSOFF/RXzxBTcrN+dxyGYu93E19iNfmLa87OSb
wOe4rcf2zkm4M2kDwB2RmyAZ9NkRsopHE5Puoq+ntO1fcGYF7/pfQAjZLDWcywa5
V9RunYxw5pqrc11lR7hiosxEkAOii3f4hq61L0LJ4IsON8lI34gEYcQqVh+eab0f
jhNj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339270269266249834853983056093605607747326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 03:57:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 03:57:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.lepidus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805562014518342561183846866227477569982674458322885280018620237580003261905379092739251007123125667928394290082303685970266917268866904286976979245621817997463938717289091030771170926267924532469590103287346798444537504063765079133576331918996374351435382720854871140835348003492183000744289014837606999114868608420274466604320096517338536409836268232034294826831638383511151387020419881246020153121764817889871199994341827647229610653128702887476032730992257074826810683795018684739018622433190509405759653500347859941616411901234200740115869366192274948647633938368357857168134683782181126396399108199534228282871570779065872943759481001699464066092925620960763115431901490021727591615517194731149550862281892439857748273769571312312948229017168525010865853547249477960332354646993261653407442590475444013097458935926573919684754448754186740779460438126231881636568146144877045209375608367242711463588827101150645023607458664901231266698815760735541007761623075710531193324422733254312987650683023897826529360457352155640374447472253364186950224307329068440058545441145411535137188794545574944331941872938344912376922721289047294632555855839274835201497162728354204845067521364730372488481834645805905192615108286529849995529423227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							402cb5d180bfb9def3dbc6064edf1157afb48c00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.lepidus.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6f96d58b000004030047304502202bc2e3e54da4cb67b8b959112cd52e6ab69f3907219de0f8ddf74a2cb33fe945022100f3417482069fcdbfc1e344ddd3376deb1c7d1ae00dc1ff44759da3d0ab362bfb00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c6f96d5a90000040300463044022072fe40918bbc0a318bbe7fb4bd2b45d55e98e1ff0b354dc174670e58c9adc76502206d52652c1afef3343da504f1a4be964bf7314b15b373f1277e3d80d272962cbc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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