pkmc.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number cd:18:26:01:0b:b7:ff was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pkmc.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): cd:18:26:01:0b:b7:ffSerial Number (int): 57728921731053567
Serial Number lenght: 56 bits, 7 octets
SubjectKeyId: 96:4a:23:5d:c3:1e:a6:0c:34:c5:57:80:4d:ed:53:6f:6a:af:70:35
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 3c:a2:6a:fd:a0:4e:dd:3d:63:c9:59:a3:c7:eb:3a:78:88:62:63:70
Fingerprint (sha256): 25:5d:ab:13:25:b3:96:aa:7e:62:8b:e2:5b:ba:c1:dc:8c:84:be:07:ef:48:b7:ee:f7:e1:61:49:47:0b:b5:25
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6964.crl
Check the revocation status for certificate pkmc.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pkmc.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pkmc.com
Other certificates including the domain name pkmc.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for pkmc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIIAM0YJgELt/8wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzE3MTE1MzQ0WhcN MjQwNzE3MTE1MzQ0WjATMREwDwYDVQQDEwhwa21jLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMHN3DgYMvj7BvJZ1LFg7Vd5Gvp7ydjI3+BeqJW4 ATufG6gDfsaB3UBgJey8RFsUB05Az5yl/wCoj5XkvzRzs09o53L3dAmcZhl2MGGX YTW1W/xXxTDsI6Sw8nnrx4TeDQBid08K69RU7Se0Q9a3WGKyCiXk4kDzKY3BUoyw 18RYencAeMgqnU+pQbg5T0ubuEcUDWOrn3Eddyufab2FXUY/DBNfhnhckiqOl79X nL1jPypqVmuoYFI/UOCsCFDu2DFOdWzLLkPLOCpEbnf/+MYf0sydtWEuPRgHeYyN N2NEK4jYYvbXUXZkyhj5FcrIzouwQVQ4tBLpCCMnQE+Ku9An4lonnaHZlluAvFrd YMg0GwIK86Vudaj4feM5WYokxA95+DxeO1aBLXMeEkA3vePJyDdUl3xTNgywMn2j OU0WCQdv/H/FbprfrtdfyZkViwV/uj62RTQkxZn1NEa4D003CTXyGFVlhCh4XZZy 1b+agZe58lTNAKcy1J76h+uLSQGSxAq2d88DaLCkgj9sS+SRxZJkgVV4LtWvpexZ nVRab5Lr+FiawIFqFQO8W/WzVpUu3LYQaxft92mCLZiB9A3unEVSzka0GKv969W+ bfaZ40jhJRq1ZEnHMn1KyHxQasD/DcjExDE/T4byaBv8w9mFlbKvUqGqc906AZGE Z6ipAgMBAAGjggMrMIIDJzAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCugKYYn aHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY5NjQuY3JsMF0GA1UdIARW MFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmlj YXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUH AQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYI KwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3Np dG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4w EwYDVR0RBAwwCoIIcGttYy5jb20wHQYDVR0OBBYEFJZKI13DHqYMNMVXgE3tU29q r3A1MIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYljswuxAAAEAwBIMEYCIQCx82bXK+gYaKab3ooO awqWOWgXZ+AB7yYjmtJoIgeFHQIhAJc3l+RSwPEbvyk5d3hRQtHw2KsnoUrZWZt9 G+QW8qleAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGJY7MM hAAABAMARzBFAiBHmNmqFJSEHWqfcpNIpGnm3sHyL9+5NHxcLRqjgUldWwIhAN06 POBhphDvmnBX3mjzgMgJgJqL49ZQPrBOBk+GfETlAHcA2ra/az+1tiKfm8K7XGvo cJFxbLtRhIU0vaQ9MEjX+6sAAAGJY7MM+wAABAMASDBGAiEArZ5z/MMN6cJKIaEU 9YzmqyPpGgXhveIp5Kljbnu1xI0CIQCkhoBqd+Uo6jVgaRwVujBoMUwrWoRlv2kC SBX9b8AFQjANBgkqhkiG9w0BAQsFAAOCAQEAoJRr5Z4YCk3/SwNS2pmcT5pFKmji TChtVJN78D47mVyVcf/qcTLe3njDcsDW/UDqu7Pvg9kFDhP3oCr435WEc0mG2fiH 8ltpPlaXSp7PKRgLzj06EoliuFCQqHKbz5bC3paUjD0N4jugu40lmN4FSIv3imSO DFIcTJcI1ZmWZut0O/rp/oJChj0vrlmaPn3n2jaF7eX/U3pPoiNGN959rruQyFzp epMD8Dzl4RgUvdF6LJCpaT3oCBdBn7KMjQGGM4zgdqU+vbLOZg+bni5ChgJm2X+X fFLEx/aqnsWcUioh2iKbQnbqgDL/7/RgKLpSfj8QeG32pQiyGgc9nOhN2Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwc3cOBgy+PsG8lnUsWDt V3ka+nvJ2Mjf4F6olbgBO58bqAN+xoHdQGAl7LxEWxQHTkDPnKX/AKiPleS/NHOz T2jncvd0CZxmGXYwYZdhNbVb/FfFMOwjpLDyeevHhN4NAGJ3Twrr1FTtJ7RD1rdY YrIKJeTiQPMpjcFSjLDXxFh6dwB4yCqdT6lBuDlPS5u4RxQNY6ufcR13K59pvYVd Rj8ME1+GeFySKo6Xv1ecvWM/KmpWa6hgUj9Q4KwIUO7YMU51bMsuQ8s4KkRud//4 xh/SzJ21YS49GAd5jI03Y0QriNhi9tdRdmTKGPkVysjOi7BBVDi0EukIIydAT4q7 0CfiWiedodmWW4C8Wt1gyDQbAgrzpW51qPh94zlZiiTED3n4PF47VoEtcx4SQDe9 48nIN1SXfFM2DLAyfaM5TRYJB2/8f8Vumt+u11/JmRWLBX+6PrZFNCTFmfU0RrgP TTcJNfIYVWWEKHhdlnLVv5qBl7nyVM0ApzLUnvqH64tJAZLECrZ3zwNosKSCP2xL 5JHFkmSBVXgu1a+l7FmdVFpvkuv4WJrAgWoVA7xb9bNWlS7cthBrF+33aYItmIH0 De6cRVLORrQYq/3r1b5t9pnjSOElGrVkSccyfUrIfFBqwP8NyMTEMT9PhvJoG/zD 2YWVsq9Soapz3ToBkYRnqKkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 57728921731053567 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 11:53:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 11:53:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pkmc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790651916338718333216054388244708370806636583486745040957431115049024631035579873855841559513912485359555028357558687167293338793821316125487476819325929927331895642566098181522078136362380176781081284281825671320082879323152514793804631467265571831719770451700888516786438420565463768857921672610013721858633077212100464694035352155121393044361044979343965238297278705961064457589127857037653012469274891059912909253774521067315367560878284115538664884293711994571981699993502840956633063800910832105886081168253444246878480478807604743906933762952398159916086197222264836231370037376021664666980595655715848002124243722901520006304679042858986670616333045931633814322738459321975362114253650457435169878629892622898910418216423026524634621722703886971687449168530782375840353018468479406534665920003901261975935487650426379407320318111704193886328207448849413486949141664755355524560911086749702034611518315253312272999871842347730631178393928399817043990428770071903450243899402047778376264154880854352911360408858666131131092337166744705188126870132699615472346748902574291178710938167658789389238694521565438423072110578081714064916763526338466029306155495582510074496807988317632001293154100064119885246350446217799522576738473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6964.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkmc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 964a235dc31ea60c34c557804ded536f6aaf7035 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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