zcanna.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number cb:6e:23:e8:39:ae:82:44 was issued on by GoDaddy.com, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zcanna.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): cb:6e:23:e8:39:ae:82:44Serial Number (int): 14658693317444665924
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 4a:ae:d2:67:2e:f8:d5:bf:35:d3:bf:b7:35:05:f7:f7:5d:61:37:98
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): e6:94:61:03:d1:14:c1:b6:78:3f:bc:14:6d:69:b6:bf:d9:6d:1c:dd
Fingerprint (sha256): 23:09:4e:60:d3:9a:c5:6d:78:0b:d7:21:4e:16:65:4c:6a:e6:dc:fb:88:da:2a:0a:8e:9b:fa:11:9f:b7:a5:6f
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6445.crl
Check the revocation status for certificate zcanna.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zcanna.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zcanna.com
Other certificates including the domain name zcanna.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for zcanna.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHeTCCBmGgAwIBAgIJAMtuI+g5roJEMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDYzMDIwMTY1M1oX DTI0MDYzMDIwMTY1M1owFTETMBEGA1UEAxMKemNhbm5hLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAPIQ6AhqdVkKJIojCHOYVbRdhXezqFcj2mt+ DMvYMzPuDYmvI5Px2NVnUOUJGCBgOBeSA3QHLVfOYtGAMcXWEIjwfx2+MhUeid/H sFJWwtvBZVyXUaWP/tnffZz6Hsz1U96slW8dMrEG+EArLUQ0P0iuAsNq8xjBRoPj +3JSTWAT8qB72FVolmZH0xbQuIQa/foZP9p/d6eZxBdXnQoVpJjlNY/duW8E4pgc 5VuozYrYwE8P3oDbyOxcRTB6slqFfy5jhCmwLhKLhgOjhrJiORTTyH5TeMN/pYch wOELKZPzbFeejMGJ++EyckZ5aW8vyg7kAMsnmuEC31YSv7lHs0tckS2y365g4UJ5 MfPdUUclk2MT8+4F110UDd74XC313+Uyx0HKCNFQM3cB+bkRVPeku0Kp3StInvdj JlcTL7ALY9akARCutpUk0huwHk61lYnyvV4fbFUTeYhdw/oXoXDQOtEMcQDwqwsk lBw/x+RDuxjWC3VoZHvu5wVdjjVlmw+qANrE2av1Gy4ynNtuCpGumQlh13stQjem VxtP9rh4YX9jtAlUz+Sw6CT98yN/OdB6sMCK0gb0ov5gSETFrYiPmFNuuYL153Mc X/iGaIdzUcvXQa84LVaNCzV1uWcXhlNamt+e8vqC1eHdO4kknQhcWB/6Ilc2SusD pQ03VVBtAgMBAAGjggMqMIIDJjAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCug KYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY0NDUuY3JsMF0GA1Ud IARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRp ZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYB BQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8w QAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVw b3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQs gM4wFQYDVR0RBA4wDIIKemNhbm5hLmNvbTAdBgNVHQ4EFgQUSq7SZy741b8107+3 NQX3911hN5gwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiQ3zla8AAAQDAEcwRQIhAPwAcJSWQKth 9wDrZWC+nlHYLMOr+BuaWbf/QSHsmmLNAiA59t4eF970ymi4Bx72xXPDq4l4jfdC Y6DJwcsiJhOs3QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB iQ3zln4AAAQDAEcwRQIgUv/oaDvXlxjYbIG3zlqfpMR0jXE+H1dfZgXRUKzBk/8C IQDLJ/qpiu7+Q4keAcGCShE9+by9vIccD5KcRc56ZztAsAB1ANq2v2s/tbYin5vC u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiQ3zlu0AAAQDAEYwRAIgUEE2uIDzQupJ C4ln0EUVYAS5UGtJqmmLGPeLbBCBeLoCIFU7H+NneKm+kDSU8P/yMez4DePgsHbq bGtrC6OwVippMA0GCSqGSIb3DQEBCwUAA4IBAQC3dWdTYHdi9ynWO/VHoVmLpwP6 9J8EhuSnEr+dQIWB2QyF/tcX/pdNCabfPnqJcDAF143L4rtn/eBubohC4NEZRaLD E/TE1BS6BrSBlszVWYZHggKjBPPTvIokvIaimm+t93dbwrKM1igs8xEzsCyXf+Zd 4y8zja9EsUcWbwXu6lxog+5di9Y5rIeljh81jvthuiKm5uD2N1VKPifTJiytsKBV l3pPBJpH7dV8LsCKFqlLHnCdXDLRmn283QuuGwsSP2PMZ+XXSaVWgQz1PSxodZTA /pqh2PfxFIxHr6kwPNR+LF2UYwOR41hXJRKplFun3VmR7GCPxoJ+bxy2wcip -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8hDoCGp1WQokiiMIc5hV tF2Fd7OoVyPaa34My9gzM+4Nia8jk/HY1WdQ5QkYIGA4F5IDdActV85i0YAxxdYQ iPB/Hb4yFR6J38ewUlbC28FlXJdRpY/+2d99nPoezPVT3qyVbx0ysQb4QCstRDQ/ SK4Cw2rzGMFGg+P7clJNYBPyoHvYVWiWZkfTFtC4hBr9+hk/2n93p5nEF1edChWk mOU1j925bwTimBzlW6jNitjATw/egNvI7FxFMHqyWoV/LmOEKbAuEouGA6OGsmI5 FNPIflN4w3+lhyHA4Qspk/NsV56MwYn74TJyRnlpby/KDuQAyyea4QLfVhK/uUez S1yRLbLfrmDhQnkx891RRyWTYxPz7gXXXRQN3vhcLfXf5TLHQcoI0VAzdwH5uRFU 96S7QqndK0ie92MmVxMvsAtj1qQBEK62lSTSG7AeTrWVifK9Xh9sVRN5iF3D+heh cNA60QxxAPCrCySUHD/H5EO7GNYLdWhke+7nBV2ONWWbD6oA2sTZq/UbLjKc224K ka6ZCWHXey1CN6ZXG0/2uHhhf2O0CVTP5LDoJP3zI3850HqwwIrSBvSi/mBIRMWt iI+YU265gvXncxxf+IZoh3NRy9dBrzgtVo0LNXW5ZxeGU1qa357y+oLV4d07iSSd CFxYH/oiVzZK6wOlDTdVUG0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14658693317444665924 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 20:16:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 20:16:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zcanna.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 987543286360930979837641529392276909773470154516260059520801664577055149799083267888216586036965159244922661643793163156026599918507631348679692021113772391837078729608829653874475804503471584564369757311872887839122541947622064992122734832432746473353400956979139632361954602259606849148461802104515783659493884659550562652354955588711722281383187984857108371693271657902750671933990963038302747055723702041169990070372540873248155428586476738740543980958317492095127088388105307799867876676968666656481444855156071579440633856949188371412153880997174196393549047059764463936324991078375016838912558053091566984479802080388106695680378026174435829835157154278590711554743666233698522080327100650396106778751699321752739055792875091286415239865461425374511326216691979983798657888332161061763968016405019946543424036969498748131932996410762614568977624508028097363334531279794968438269753928758419606240893694310998101952532256157181816377260352858633232128617634697788470671609055382339474017129008934472410677989278746198322299847249003876332855405430135743841595321232508094892044474128172885480799792676946462638813319034583194834548723179773469562119759587536941162046002246952108721360625998164579757348277273745925344947687533 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6445.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zcanna.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4aaed2672ef8d5bf35d3bfb73505f7f75d613798 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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