ugonnafish.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 0c:d4:4a:3c:17:4a:cd:e0:77:c6:c8:27:b5:46:63:ff was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ugonnafish.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d4:4a:3c:17:4a:cd:e0:77:c6:c8:27:b5:46:63:ff
Serial Number (int): 17053008542637382973938663390970274815
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:15:6b:06:12:d7:b7:83:1f:82:39:d7:37:d0:18:24:41:eb:dd:34
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): a6:82:6d:1b:44:7c:0b:72:95:12:f4:8d:00:2f:bd:01:34:8b:85:5e
Fingerprint (sha256): 40:e6:66:7e:07:1d:fd:f5:84:44:8b:2d:d9:2f:2b:5c:67:d2:26:50:68:24:69:8d:6f:d2:e2:64:e8:c9:cb:fb

Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate ugonnafish.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ugonnafish.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ugonnafish.com

Other certificates including the domain name ugonnafish.com

(limited to 100 certificates)
ugonnafish.com
support.areca.co.in
sni.cloudflaressl.com
dev.ugonnafish.com
sni.cloudflaressl.com
sni.cloudflaressl.com
support.areca.co.in
ugonnafish.com
support.areca.co.in
support.cweaindoor.org
support.sil.mobilewaretech.com
sni.cloudflaressl.com
support.areca.co.in
sni.cloudflaressl.com
mytripfi.mywhc.ca
testsupport.strongboxdata.com
support.areca.co.in
support.covaya.com
support.areca.co.in
support.areca.co.in
ugonnafish.com
ugonnafish.com
sni.cloudflaressl.com
www.ugonnafish.com
*.ugonnafish.com
ugonnafish.com
support.areca.co.in
sni.cloudflaressl.com
support.proarch.com
sni.cloudflaressl.com
sni.cloudflaressl.com
support.areca.co.in
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ugonnafish.com
sni.cloudflaressl.com
sni.cloudflaressl.com
support.areca.co.in
support.areca.co.in
ugonnafish.com
ugonnafish.com
ugonnafish.com
www.ugonnafish.com
dev.ugonnafish.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ugonnafish.com
support.areca.co.in
sni.cloudflaressl.com
support.areca.co.in
sni.cloudflaressl.com
support.ugonnafish.com
dev.ugonnafish.com
support.areca.co.in
support.areca.co.in
support.areca.co.in
www.ugonnafish.com
support.ugonnafish.com
www.dev.ugonnafish.com
sni.cloudflaressl.com
help.destination.one
*.ugonnafish.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ugonnafish.com
www.ugonnafish.com
www.ugonnafish.com
support.areca.co.in
dev.ugonnafish.com
sni.cloudflaressl.com
support.areca.co.in
dev.ugonnafish.com

Certificate

The complete raw certificate details for ugonnafish.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHKzCCBROgAwIBAgIQDNRKPBdKzeB3xsgntUZj/zANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTE5MTAwNjIwMjkzOVoXDTIwMTAwMTIwMjkzOVowGTEXMBUG
A1UEAwwOdWdvbm5hZmlzaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuTbk6VifvDPMax4AcYOk4CuKFwXMhmcN20pykdRhUG3ceRK5uGUNnHhm3
LMJZbs0TnLVQ/rXpdiL6CeJBFTNFEoBQSIW8s6100TXK2qyKMb1FSzOU18P7BMmI
O9q614d8ivWXBXfYNTnX1yU7NrD3QVIkIWh5B3CzSH5qQ0KujQRZk0yCCy+LTuDf
mlbrHYpjKY1xHvHQjHNCB0nEY6VwSd68vX4SQ4hPv+oiCs0ClEtkRpEOoy2aGGrG
rJbwSCHKC8WSNoD568ed7z9LXz+fB+LyZ+C2gQvkHIG5Gc/0+fOCTCZDPb1+A0en
+7W5Zb3e6hl9Sg1Y0zivfiD76M39AgMBAAGjggMdMIIDGTAfBgNVHSMEGDAWgBQm
FH7g3Nem9+LUBCffYfHC7OcyyjB8BggrBgEFBQcBAQRwMG4wSgYIKwYBBQUHMAKG
Pmh0dHA6Ly93d3cuc3NsLmNvbS9yZXBvc2l0b3J5L1NTTGNvbS1TdWJDQS1TU0wt
UlNBLTQwOTYtUjEuY3J0MCAGCCsGAQUFBzABhhRodHRwOi8vb2NzcHMuc3NsLmNv
bTAZBgNVHREEEjAQgg51Z29ubmFmaXNoLmNvbTBRBgNVHSAESjBIMAgGBmeBDAEC
ATA8BgwrBgEEAYKpMAEDAQEwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cuc3Ns
LmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6
BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3Jscy5zc2wuY29tL1NTTGNvbVJTQVNT
THN1YkNBLmNybDAdBgNVHQ4EFgQUVBVrBhLXt4MfgjnXN9AYJEHr3TQwDgYDVR0P
AQH/BAQDAgWgMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgBep3P531bA57U2
SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW2izJyNAAAEAwBHMEUCIQC3Dz/U6TX6
5spJ8mnK7upGbUemHFihLI/tUS5pG23DugIgPE3NvtL2wjIx4D1d3TeBTC7vT5Fl
jEu6zDzqRjKji94AdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA
AW2izJvPAAAEAwBHMEUCIDSmDKBtSzgZRbBTCP3mhdNC+8z+vPhhaZYpvm2DqYiO
AiEAxbkJISPatAEMDi74bhgL9OzCALXfsqtT0qeyOMM7VxIAdgBVgdTCFpA2AUrq
C5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW2izJxIAAAEAwBHMEUCIEHK7tpwesX7
H6rYC0wuzJTb5kWvH70t05WF7SIKikEPAiEAyb2iDujshohqmj0abW9cAnLBWPj6
BoIOdssO/NgHuuQwDQYJKoZIhvcNAQELBQADggIBAFi+Rchnb7gnCNTXElx5Dozg
+ji+wYIly6OtapxE641geY8I1muADXudgTPmf4u4JayuNxvrholDbktpkLtAhlQK
MGYFqne1yOd35YuObBRzEcPskKe3C/NgxB/qm3G3TiGnwIYJKHFsKcyukvjt18Y6
Q9Ft4Si8j3rOM2MR9q7Q6HwaG4iOzZa33t6Bt3UfJlaA454AUMOOgnh/kx98UwK6
TK/UdPVpmEF8SlXCJFO0qEkAVaYlUlCeSA0YupkfDpQ/nAGvg5Hf4bG0VZ9PVaUg
J3xSoea2R0HgFTegAjLo+ykRNHUp1OBCsqaNoCTVFLIWgf0pUsNW3/LgJIlgqUJu
1I4dVEmcjpWY2yI3InFUUnIz7WGc+yt0MYDBscaUIAL9fL2BvI/Aav9AqZHX5+TJ
dCwNvfGZynJbqMr2uYJWU+Co34CV3Br20mveY3yYzoyaSXKycaxW3uBNk4ivKfO/
gpmuYK++ljYGfZ+yGuDYS19XmSH04yecqBqaOkz+IMgxhEEQR+MB7JJImxDzdcoS
nJXGhedvC0I+xPxAOBvzyxlSxpd2ewJXo23LR7AvPCoVyNEEeq7l4tqe2H8D8zHF
7QBKO7dhRyWXrscAJsx8+G1pzoLXqoeXXmq4Mz9eR0eDPmUtSstgJ76WJrZCZovO
b4xTcZPMbuNW3lI05qpp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk25OlYn7wzzGseAHGDp
OArihcFzIZnDdtKcpHUYVBt3HkSubhlDZx4ZtyzCWW7NE5y1UP616XYi+gniQRUz
RRKAUEiFvLOtdNE1ytqsijG9RUszlNfD+wTJiDvauteHfIr1lwV32DU519clOzaw
90FSJCFoeQdws0h+akNCro0EWZNMggsvi07g35pW6x2KYymNcR7x0IxzQgdJxGOl
cEnevL1+EkOIT7/qIgrNApRLZEaRDqMtmhhqxqyW8EghygvFkjaA+evHne8/S18/
nwfi8mfgtoEL5ByBuRnP9PnzgkwmQz29fgNHp/u1uWW93uoZfUoNWNM4r34g++jN
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17053008542637382973938663390970274815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 20:29:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-01 20:29:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ugonnafish.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22003791973285073535851184441992791556454813874789058129989266465441712044154201084617083539928671917434057567493628767430429668017691833756608002985304921926589193488074805442580633886371286429094292607114330043619752595873551326004357311571920541168621292407183073587097529029941169417636473180369784003365356080074789888345869470339676814744811069660654752689598627465873943852217756506182780223572553486641992914188075473109647464113415076638238500348960798754144504522028975886140090611190229401009667982664421186009976218629707565577090822267003891921169862042432903671290385477188745926901693474938307337571837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugonnafish.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54156b0612d7b7831f8239d737d0182441ebdd34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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