kkfco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number c0:e0:c1:77:6d:2d:74:d0 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kkfco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): c0:e0:c1:77:6d:2d:74:d0Serial Number (int): 13898321168742315216
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 34:2f:01:30:e5:1c:5d:b7:1a:7a:65:54:ea:65:95:1d:89:e5:5b:d0
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): ff:e9:77:c0:e7:26:65:02:41:d8:44:e9:cd:6f:ce:90:03:28:12:ab
Fingerprint (sha256): 25:35:a4:51:a6:82:d8:b3:a0:1a:b3:c0:02:52:21:95:4d:66:5d:2a:71:68:a5:ad:96:70:64:01:aa:c7:83:4a
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7218.crl
Check the revocation status for certificate kkfco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kkfco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kkfco.com
Other certificates including the domain name kkfco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for kkfco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIJAMDgwXdtLXTQMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyNDA0MDg1MloX DTI0MDcyNDA0MDg1MlowFDESMBAGA1UEAxMJa2tmY28uY29tMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAs1fk6LJhTceSp8qtyxmpLCYnY72UNZKunAXN 3QvHFGJNEwSd2eQeNVXl3STXwDPgs6quMenq02Nw0XtUkdy8yKEbVbvdlCCIF/wM CXZMycEFADIRAiFLLjp4Dt6EoKs7C4lMBFTgEqhGsqkEWO6Fb1biAlA2ddcdW2m6 AIn4OuFgaX7rPOV2sVpL2W8cPrkZx75TXi+oQk8cLG9pjhNYehZ3EG0JpaFXJukr Olg0TDH0qpu91PClK9iTV55zY4Trl5bzSZj7pQKvuHC+m9afOMbhaugjSdd7nCpE KF3p3cJwsSpusbUT396JamXyKLlKo3cLFjnqPk69MQmKpVdJw4vGRhggdjiEJ1Yx EI7VKwhnFuYdAou13nCGkwJ8iRI3ATeEZE7taDPCgu7QiEeOWNP43iotSozKMB3i hhPkqbMbxz3DHseldk/sI/S0a1gnSsg0H9Ruu8A3L7gUmWC8ET5lPkm4yUof0ugO RHtmwy+icl9KC3r1xYzKmsHxcq4/do9TUsRK+ARNwVDiVNMd5mJd5lIaQAl49aPH fxxaHAvvzyCYzUPwZ5aHfq5usMoyqXd7+T6f8ucVdvKM4BhXYZunZFMIYAljxcKe ynP+s5/AKpd8/wtqhuLuLdjIVHxx/m69DqSX1G7RnCfnPkTV1gqnzV5ofAvXmbGB gwHKAh0CAwEAAaOCAykwggMlMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6Ap hidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzIxOC5jcmwwXQYDVR0g BFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEF BQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBA BggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBv c2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyA zjAUBgNVHREEDTALgglra2Zjby5jb20wHQYDVR0OBBYEFDQvATDlHF23GnplVOpl lR2J5VvQMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAYmGFfRnAAAEAwBGMEQCIEd65IXCEU3Ca9sm b+5ZI48rfuBKgxftqKYWuAq7ZKdxAiBOrnDBlb8Xo+BglGuTNID8FTkA0clY/BD1 Rv0n7t6PhgB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiYYV 9TwAAAQDAEYwRAIgfHxkcvW6yfnfiCG6wlOP4s5rDiJNyNkEdMnvOV1K40gCIAMJ J3ZqKv62nkivERJMmXj8BBboI5ZNF2JX0mbHN9EdAHcA2ra/az+1tiKfm8K7XGvo cJFxbLtRhIU0vaQ9MEjX+6sAAAGJhhX14QAABAMASDBGAiEA16cfEyp9CVTziq+J lZGHM+BriP+dgl3zr5ZvUzDH1z0CIQDGfjxGjP4+PQfcP7zzGt7IMTYu3na6gkYf rwoStjCgazANBgkqhkiG9w0BAQsFAAOCAQEAKkZahIsDSraF6vChACoulSDtL5Bi HW5oFXTRYat9ZwzvrBbdceuOpmoA4JjjXW3z5TAHQjW03pUU/DuYfKpyMAP3cubn OvDqGccXhGH6gXs8amIzxcG6eQz39qJ85FpTnJSf5cVUZ/Q22EcqsZy78rj5DQqR gmfVcRuizPTJBcK3Gu9o5lLvmp5p49zIkKKcw2Cylr8pBNYQ35cxOwrgA8d8H0TL z8UvrGrU67ZH1TMNa0Soti5Mz1kjHZX6iB2xTE0hV3WEXq5fHo2E7QZ6dkPZa1q5 fqUdRxmym6ZH5tuNeZ219KhXgudz5+6Q8KP9wNMkzmyzZQv8QAkYn1TnZg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs1fk6LJhTceSp8qtyxmp LCYnY72UNZKunAXN3QvHFGJNEwSd2eQeNVXl3STXwDPgs6quMenq02Nw0XtUkdy8 yKEbVbvdlCCIF/wMCXZMycEFADIRAiFLLjp4Dt6EoKs7C4lMBFTgEqhGsqkEWO6F b1biAlA2ddcdW2m6AIn4OuFgaX7rPOV2sVpL2W8cPrkZx75TXi+oQk8cLG9pjhNY ehZ3EG0JpaFXJukrOlg0TDH0qpu91PClK9iTV55zY4Trl5bzSZj7pQKvuHC+m9af OMbhaugjSdd7nCpEKF3p3cJwsSpusbUT396JamXyKLlKo3cLFjnqPk69MQmKpVdJ w4vGRhggdjiEJ1YxEI7VKwhnFuYdAou13nCGkwJ8iRI3ATeEZE7taDPCgu7QiEeO WNP43iotSozKMB3ihhPkqbMbxz3DHseldk/sI/S0a1gnSsg0H9Ruu8A3L7gUmWC8 ET5lPkm4yUof0ugORHtmwy+icl9KC3r1xYzKmsHxcq4/do9TUsRK+ARNwVDiVNMd 5mJd5lIaQAl49aPHfxxaHAvvzyCYzUPwZ5aHfq5usMoyqXd7+T6f8ucVdvKM4BhX YZunZFMIYAljxcKeynP+s5/AKpd8/wtqhuLuLdjIVHxx/m69DqSX1G7RnCfnPkTV 1gqnzV5ofAvXmbGBgwHKAh0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13898321168742315216 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 04:08:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 04:08:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kkfco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731656979395880541351350653442348856557159791201587972867654183838168403385572878780386693465231203484463830689394725565218013789960817565362198072850203121823793094569490841413790976265217337524818410228791450264957797729376200984473359814438600226753391609601021507561418039163371282402493998280412384999481487712242931377656564745094404955641732157367265958077670824189877708308605430505218374560118102027881190256365859165490822729496414179605996586257202574623955119117005957856538707305331893083579350887496779040218736443206324872489428671057152479889691897263679917374775590589583075645746184592867557830727278368633110145047223727309573724108133242957944430981798880874135507301778920583646999958037275883138098047101461443062631766729543641086515877480194784197099738925032198614770353737581155514102886326545161474292671234335849271995346993402308711601439015918244209854401418702624642220829143887554646003275316885451582793671857467690199493412395522340885880209519873829512618002665269850106339367608050995561661926930238094012439415660561279324764091948722347653472018078476964718204205524857999870220667100338039619290809194595126539400404781927825177242697791662555882568230606819789222526758505536827685017949438493 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7218.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkfco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 342f0130e51c5db71a7a6554ea65951d89e55bd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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