pnwco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 38:65:e0:62:61:bb:83:f5 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pnwco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 38:65:e0:62:61:bb:83:f5Serial Number (int): 4063900951922836469
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: f6:54:fe:ab:d9:95:84:4c:3c:ba:f8:cf:2b:a1:7b:b8:f8:b5:26:20
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): df:15:c8:eb:4b:81:6a:cf:21:ee:65:ca:f7:b7:08:59:50:91:c6:f2
Fingerprint (sha256): 22:06:89:28:71:1f:9b:3f:82:e0:33:50:52:e8:30:69:87:07:31:d2:7b:26:dd:07:8a:b8:d6:d7:d4:54:24:0b
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6974.crl
Check the revocation status for certificate pnwco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pnwco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pnwco.com
Other certificates including the domain name pnwco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for pnwco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIIOGXgYmG7g/UwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzE3MTgxOTU0WhcN MjQwNzE3MTgxOTU0WjAUMRIwEAYDVQQDEwlwbndjby5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCjMJg8abkVX1W5uYM3X3us9M5Dyr4gK9StTLON ZOZOnbaKMBYYbjTJHINnGhj8JeTH0hcs6HkP4JdvPMMEsM2nr1aJ/DMIOzK/n/JU 4by2uzw1cMQkHG1sOJVc2UKjUkWnPRJU9fRqoLhypJ/h/8pLqJGL634KvtPlXOsc 6nEiuUEkLe/hP5pBVGEE7me2/w2rLKcm3ccIAcr3lC2qYZIERPidbn6RN5AdtoS4 U5TaScThYj7i4euckCUqh9EHbwm9ULv1ESblWv2VwUP75LEXhx75ojDdZASyPyuA fNU1OeX67L6q50xDD2tRWEMedsbbkrRrRlEpL2/DmQ3DRpS0d3ygo1EeiC6vybfd DBGlNRa/v8cznvdcn3r26r+G/zXT2+EJ5ZUPTXbijP8TrMKkkUHUbBwJT6Ca/iBQ IDQNfmSdqyo6129KU2N7qYgyqTl8zikUg9A8TEbODWKSm+Hizi3YrNYJ4nIh00Sr yyBfxRsfzhoBTG2kfnviAHY6ox3DNHlMjGe8yuswDDA1yYmSmzGWqlZ/fyDyYVdp PqhQfszAb6DV/SJz/i5jRGdTiS0zJPsPyhMjVLblzlE/6RPTjeqJWDk2t3zyCbLO LSgnyolR0aErRU0l2D2tTIVO0Ldy6oy0w0JKXUBSDZtwI/mHqnYZsSUFh7wGzNqE KrlOXwIDAQABo4IDKDCCAyQwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmG J2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02OTc0LmNybDBdBgNVHSAE VjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZp Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAG CCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z aXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDO MBQGA1UdEQQNMAuCCXBud2NvLmNvbTAdBgNVHQ4EFgQU9lT+q9mVhEw8uvjPK6F7 uPi1JiAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABiWUUllsAAAQDAEcwRQIgSM+W7vrsoA05DLUR fFGc+gC3QSAbrJMK+K5k6+0mE74CIQDXreWGhiw9Tfxi/BqOCVrqUiJmdMmcArfQ zl51+SA6RQB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiWUU lykAAAQDAEYwRAIgTnrp6XLwCQsJFKIVgb6E6ILKJA3ppeH25G2+vB3FtZsCIBfW b0uaFD8bDg6+/+HcgWCClRUQTrlcvn6vg/uBGMMSAHUA2ra/az+1tiKfm8K7XGvo cJFxbLtRhIU0vaQ9MEjX+6sAAAGJZRSXigAABAMARjBEAiAWgeec2hwXu3E9K+Bx FNO+OR18B3gA5VScK9lsA1FkqgIgYFonuH1oHS2Xz3a4nLEr7L6um+MavjwDV7/X 8c22tb8wDQYJKoZIhvcNAQELBQADggEBAJOYZ0wnhikfcLfJy/P9imQ1T4TCAC1L 65MER6VOkXRmRKeKNiFeL0x6OGXTDjsjYSR9QdPMrD0iBxwHAd/J1f0qwfRMUvCV xzPfL0szzYWROOA/Djq4vUujYyyBIEYF9SrCjHSEH4ovSs0W+JBVPrE6hyC97Nrg /ESnUZDJFkRTNMPNUQqCo+jRH5rTnas5goQ+RAtjyFWh/LkUDW+gHHW9b/BUZjVc AjThRjuh8E66l9uM81DnsgjlPqDGWbmvE63i5j6HKRxRdGCHC44ngGfmIXRWjYKu IbIqLtPuwraW4RzHCi4/ut4nXqBe48xep+N47F52zW+bU0vT13JYoJk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAozCYPGm5FV9VubmDN197 rPTOQ8q+ICvUrUyzjWTmTp22ijAWGG40yRyDZxoY/CXkx9IXLOh5D+CXbzzDBLDN p69WifwzCDsyv5/yVOG8trs8NXDEJBxtbDiVXNlCo1JFpz0SVPX0aqC4cqSf4f/K S6iRi+t+Cr7T5VzrHOpxIrlBJC3v4T+aQVRhBO5ntv8NqyynJt3HCAHK95QtqmGS BET4nW5+kTeQHbaEuFOU2knE4WI+4uHrnJAlKofRB28JvVC79REm5Vr9lcFD++Sx F4ce+aIw3WQEsj8rgHzVNTnl+uy+qudMQw9rUVhDHnbG25K0a0ZRKS9vw5kNw0aU tHd8oKNRHogur8m33QwRpTUWv7/HM573XJ969uq/hv8109vhCeWVD0124oz/E6zC pJFB1GwcCU+gmv4gUCA0DX5knasqOtdvSlNje6mIMqk5fM4pFIPQPExGzg1ikpvh 4s4t2KzWCeJyIdNEq8sgX8UbH84aAUxtpH574gB2OqMdwzR5TIxnvMrrMAwwNcmJ kpsxlqpWf38g8mFXaT6oUH7MwG+g1f0ic/4uY0RnU4ktMyT7D8oTI1S25c5RP+kT 043qiVg5Nrd88gmyzi0oJ8qJUdGhK0VNJdg9rUyFTtC3cuqMtMNCSl1AUg2bcCP5 h6p2GbElBYe8BszahCq5Tl8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4063900951922836469 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 18:19:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 18:19:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pnwco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665756393105500450941136839450740788297492255134127325755683095847141882227617715050868996659555951464606271836256163127464573255317640701182649110339148463009149455342707833946291967900011394711893056615374104356449210177703225244856937932259605333948720769245307272720385025196692131603415419824628352107107635647412953444435959418365291556828418595285953514797253218735454102437081523171905934648976313852095374674875272460287546573974565754245971027496727769626256647896792411874722518632478476866217405020273310509002717182312543791031410760919276723889565887246561986154467521580525068646278038496128299379537634151310692770338859164931054028197199639505193575645465053558957584137731309391720435518681947028395889525069580884054523502345529231094589218346949342414588905559174172778498922098904830790105099205108199674815619923947686684359246770796368922373895362339724164966248542963482992322421303786070614941108187113884590021706281608313721039973562263122977918994246741500097356803620576472085982977646888220663062910157025050674758192448944688844528794668417660302816097683757659289551583062063707007872183419000604673942581211390253059464199589501067846429178901442857467308879329849552486292184351380057089330701225567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6974.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnwco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f654feabd995844c3cbaf8cf2ba17bb8f8b52620 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001896514965b0000040300473045022048cf96eefaeca00d390cb5117c519cfa00b741201bac930af8ae64ebed2613be022100d7ade586862c3d4dfc62fc1a8e095aea52226674c99c02b7d0ce5e75f9203a4500750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018965149729000004030046304402204e7ae9e972f0090b0914a21581be84e882ca240de9a5e1f6e46dbebc1dc5b59b022017d66f4b9a143f1b0e0ebeffe1dc8160829515104eb95cbe7eaf83fb8118c312007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001896514978a000004030046304402201681e79cda1c17bb713d2be07114d3be391d7c077800e5549c2bd96c035164aa0220605a27b87d681d2d97cf76b89cb12becbeae9be31abe3c0357bfd7f1cdb6b5bf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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