*.altolonga.pi.gov.br
Issued by R3
About this certificate
This digital certificate with serial number 04:54:ed:57:2e:ed:e1:ff:83:e0:55:82:d5:66:43:e2:ab:90 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.altolonga.pi.gov.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:54:ed:57:2e:ed:e1:ff:83:e0:55:82:d5:66:43:e2:ab:90Serial Number (int): 377348342265065394419220482993322224429968
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 16:55:69:c7:f5:4a:71:e9:53:57:01:5e:35:9a:94:ba:bd:53:53:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 90:3b:9f:75:a0:1f:56:77:5d:b8:a5:d1:9d:ba:0a:b0:f4:a4:f2:11
Fingerprint (sha256): ef:ad:aa:6c:ba:b6:7e:58:a4:65:4e:4d:ff:46:36:7d:16:b0:af:f3:34:bc:52:e0:d2:88:ff:82:06:f7:8a:3b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.altolonga.pi.gov.br
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.altolonga.pi.gov.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br.itransparencia.com
applive.com.br.itransparencia.com
avantitracker.itransparencia.com
suportcentersistemas.itransparencia.com
www.altolonga.pi.gov.br.itransparencia.com
www.applive.com.br.itransparencia.com
www.avantitracker.itransparencia.com
www.suportcentersistemas.itransparencia.com
altolonga.pi.gov.br
altolonga.pi.gov.br.itransparencia.com
applive.com.br.itransparencia.com
avantitracker.itransparencia.com
suportcentersistemas.itransparencia.com
www.altolonga.pi.gov.br.itransparencia.com
www.applive.com.br.itransparencia.com
www.avantitracker.itransparencia.com
www.suportcentersistemas.itransparencia.com
Other certificates including the domain name altolonga.pi.gov.br
(limited to 100 certificates)
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
*.pi.gov.br.itransparencia.com
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
*.altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
*.pi.gov.br.itransparencia.com
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
altolonga.pi.gov.br
*.altolonga.pi.gov.br
Certificate
The complete raw certificate details for *.altolonga.pi.gov.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgISBFTtVy7t4f+D4FWC1WZD4quQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDQyMjM1MjZaFw0yMzA4MDIyMjM1MjVaMCAxHjAcBgNVBAMM FSouYWx0b2xvbmdhLnBpLmdvdi5icjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALlia/v/EsO2vdwdehFBKLbHuWIuB1TPZHQwBYSPQPBmNyicvynWjCOc /G7ZAiBPGDeI67dj/Ai8db0E6lCNNjzU2uyGx1G7BnB4xY6Iv68gO4h5qNbEuXOH e07jfz41qP5zRPQdtQHYZixOKySw/kRmVDZeD2Kc44Ok2xBUDls6TCe4xkjol7Uq fFMhIIFWbB4lSwqRRMSOamDzS9CwsyjdGnne3eA/pVLjWyNWrvq131CX5FlYKsvk iS5MbXca4RIXuUEhymSqv77mpd1R3IPBGHeJvslc3QHjRDARTysvVBO3Qvsabx3U bFTliwJU1P83WiYu0reAPWKNPYG3/TMCAwEAAaOCA6YwggOiMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUFlVpx/VKcelTVwFeNZqUur1TU/kwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggF1BgNVHREEggFsMIIBaIIVKi5hbHRvbG9uZ2EucGkuZ292LmJy ghNhbHRvbG9uZ2EucGkuZ292LmJygiZhbHRvbG9uZ2EucGkuZ292LmJyLml0cmFu c3BhcmVuY2lhLmNvbYIhYXBwbGl2ZS5jb20uYnIuaXRyYW5zcGFyZW5jaWEuY29t giBhdmFudGl0cmFja2VyLml0cmFuc3BhcmVuY2lhLmNvbYInc3Vwb3J0Y2VudGVy c2lzdGVtYXMuaXRyYW5zcGFyZW5jaWEuY29tgip3d3cuYWx0b2xvbmdhLnBpLmdv di5ici5pdHJhbnNwYXJlbmNpYS5jb22CJXd3dy5hcHBsaXZlLmNvbS5ici5pdHJh bnNwYXJlbmNpYS5jb22CJHd3dy5hdmFudGl0cmFja2VyLml0cmFuc3BhcmVuY2lh LmNvbYIrd3d3LnN1cG9ydGNlbnRlcnNpc3RlbWFzLml0cmFuc3BhcmVuY2lhLmNv bTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABh+ke 274AAAQDAEYwRAIgcwfStji7qLVFVeNejpXHHbCG0+FSRFufeCbiRZA+iegCIBhn vdcXkR+VnStje2afyrS3ZufDAZZYAnkHVwPBH+inAHYA6D7Q2j71BjUy51covIlr yQPTy9ERa+zraeF3fW0GvW4AAAGH6R7cLAAABAMARzBFAiA2OXkn29X4TrjTobL6 zFg2cw4u6MJsm0nqZ8eydV3ingIhAPV2VQ4TRws2PvTOdVxlH3xSmGnCBhUyGZCt 7sD72GLwMA0GCSqGSIb3DQEBCwUAA4IBAQBceoa05nkLPF8gohffkRA+kdO+RafG JBumHYd6JENl9/Edvg/B684tJGbYSChXhKzgh0WYts4WjURdwKUpd+Vlnpt7l9az ga9q2l2q09GHffCrGaij5MFyqVTtj3PgyimRvvU7sAzddNreguqh+Kk1V4bmdyjk A8keOkMOqK17nMIOGaood4OaGvfaHS+6qkr+kL8Q0ifRVd1oLsXQT7FI/XQJbcQk RTM9trGcvHc+DbMUOJ+kz8ImtY04TJbHUM7uc5DcyaUb3bl+0D+gPZhO1KuVqlyN AwlC1M1ganzspBfgXNL9duojzTQjqvxOZyTcMLqRfG5V63dIdRwstk9d -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWJr+/8Sw7a93B16EUEo tse5Yi4HVM9kdDAFhI9A8GY3KJy/KdaMI5z8btkCIE8YN4jrt2P8CLx1vQTqUI02 PNTa7IbHUbsGcHjFjoi/ryA7iHmo1sS5c4d7TuN/PjWo/nNE9B21AdhmLE4rJLD+ RGZUNl4PYpzjg6TbEFQOWzpMJ7jGSOiXtSp8UyEggVZsHiVLCpFExI5qYPNL0LCz KN0aed7d4D+lUuNbI1au+rXfUJfkWVgqy+SJLkxtdxrhEhe5QSHKZKq/vual3VHc g8EYd4m+yVzdAeNEMBFPKy9UE7dC+xpvHdRsVOWLAlTU/zdaJi7St4A9Yo09gbf9 MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 377348342265065394419220482993322224429968 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 22:35:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 22:35:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.altolonga.pi.gov.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23402620024031914543215672436599973735805070641306662059333901680758962069854083611517763287717053597669130938500854304889523502343267196652919189207933473919980213135706545137890239271879464634420690904863766068992837413274769700426855012522246834541763708793705047344442921830828703988956505461548962801794641860158425497736133925237752021824437141780683082923028496443624642731563800874912426026682786563794626700408488837190875315341899675444388310788303348777205648423330526635328536082785877834083297176328704342134730277871965118546032122551703250332037622628160269027905348859471595045621449179329288253996339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 165569c7f54a71e95357015e359a94babd5353f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altolonga.pi.gov.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altolonga.pi.gov.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altolonga.pi.gov.br.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applive.com.br.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantitracker.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suportcentersistemas.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altolonga.pi.gov.br.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applive.com.br.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantitracker.itransparencia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suportcentersistemas.itransparencia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e91edbbe000004030046304402207307d2b638bba8b54555e35e8e95c71db086d3e152445b9f7826e245903e89e802201867bdd717911f959d2b637b669fcab4b766e7c30196580279075703c11fe8a7007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187e91edc2c0000040300473045022036397927dbd5f84eb8d3a1b2facc5836730e2ee8c26c9b49ea67c7b2755de29e022100f576550e13470b363ef4ce755c651f7c529869c20615321990adeec0fbd862f0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005c7a86b4e6790b3c5f20a217df91103e91d3be45a7c6241ba61d877a244365f7f11dbe0fc1ebce2d2466d848285784ace0874598b6ce168d445dc0a52977e5659e9b7b97d6b381af6ada5daad3d1877df0ab19a8a3e4c172a954ed8f73e0ca2991bef53bb00cdd74dade82eaa1f8a9355786e67728e403c91e3a430ea8ad7b9cc20e19aa2877839a1af7da1d2fbaaa4afe90bf10d227d155dd682ec5d04fb148fd74096dc42445333db6b19cbc773e0db314389fa4cfc226b58d384c96c750ceee7390dcc9a51bddb97ed03fa03d984ed4ab95aa5c8d030942d4cd606a7ceca417e05cd2fd76ea23cd3423aafc4e6724dc30ba917c6e55eb7748751c2cb64f5d