lititz.org
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number c9:16:e7:d4:4c:33:f0:cc was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lititz.org
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): c9:16:e7:d4:4c:33:f0:ccSerial Number (int): 14490023750108704972
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 2c:e5:7f:a9:6b:fb:0b:8e:6a:91:79:14:58:d9:d8:0e:c5:d3:71:9d
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 10:69:a0:ef:37:44:ce:3a:32:1f:fe:b4:63:60:16:86:f4:c8:53:f1
Fingerprint (sha256): 53:d2:96:50:f4:ff:71:5a:ad:1f:fa:ff:87:4e:af:6d:2b:f1:6a:40:7b:1c:3e:80:6a:03:a6:88:d4:8c:4d:2c
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7062.crl
Check the revocation status for certificate lititz.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lititz.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lititz.org
Other certificates including the domain name lititz.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for lititz.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHeTCCBmGgAwIBAgIJAMkW59RMM/DMMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyMDAwNTMxMVoX DTI0MDcyMDAwNTMxMVowFTETMBEGA1UEAxMKbGl0aXR6Lm9yZzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAJU9gcYeKBrsYoA8tkvCQSLYjPF8tnSd4ad+ aMzEcH8NFmx/4EbcKoYz1ofbaozczsm/D0GOvYlKN+u8lXEVqVoEyQExlKsxxFNi ShJHlfd0leezRNUfqWkFxVZ+2O5kM9Jx+edGKRyGdSHg1Ahsk0eYRYtZWLJUc1rb vtsFl65PG2V5m+Pa2YZe8cWtm4nthWi/9qK5GI8a2eSe4+Eh60fYjAD6J0cdc4Y+ OXouoaJZlNg9mhDYpbP+ikwpCigpMt0Gzd8TrBZecScP26Eos/GWcxqlRSMc9EXd Kvb6CGs07efC8O8dBVzQ0EEr/jNyPkz8lzDYiinq9Du24Kblig6HKxhtnGt77Sri 2wL2sZJuNR4x0ygrgVNujglhQ026wWNsaflLDJ4QwslELYZZx3WyfpUpiQ5QxSdO S8LvWJv+6TYCohWUS44FRNtVC5J2I4fWVZuKMqvQBDVjYrZcRijOGhpw/3lEiNLM YxcQ5oP4LuAMMCufjKFEheJhtEuJkqhXnYnXoBHq34G05WU5cVVcDbHlmmL7aN4S 3hN/Xq2o01XRmciHiSX6wtSlTeBqkn9XpeZw3jXMgbx6C9MDlxE2yOX1xw7iNJ7Y 4vKh1IV1jDqo43u/rBnAPZNeqNz25TIm3S0chlF/zMb4UvXWnBHKtIrA/b0p4RYD X77WUKr/AgMBAAGjggMqMIIDJjAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCug KYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTcwNjIuY3JsMF0GA1Ud IARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRp ZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYB BQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8w QAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVw b3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQs gM4wFQYDVR0RBA4wDIIKbGl0aXR6Lm9yZzAdBgNVHQ4EFgQULOV/qWv7C45qkXkU WNnYDsXTcZ0wggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiXDJYIcAAAQDAEcwRQIhAK1t52QAv2T9 gTRWogFRciIv1cHhge4svLoj009N1QlEAiAm9N6V9kiAkocUyqN15U7HF0YosGAP yZ/lq8y5pnW6KQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB iXDJYVAAAAQDAEcwRQIgDMApY0wtWCtbajcgs1gFosmAuVEVBtlNDVkosFEsiw0C IQD+pYpSF/Bjf5N5M8D+1TbnRvgvz55RirTjAmOP8oI9qQB1ANq2v2s/tbYin5vC u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiXDJYgUAAAQDAEYwRAIgXQF8BWxdPOp1 KyZNkkqjk4NT0ozywBi5kWNZyJNzOPUCIEltgVqfe3EUwkvq/1Na1Pr2AnmQWyiz AFIwxqFbdVn4MA0GCSqGSIb3DQEBCwUAA4IBAQAZ6p3maE+HNffVjdThpxGRusQL BbovUR+duVV4II1Bdd2HOfm39hAEyfK7SReYrOsRMuJe8kjMmpgWz9qSgU+ayi3H NOb/q4gAklxG3HS2QAYYHCKmx8QMA5CBUOAXYnOxmjI7M4ioRi1jPJIasnvaBWcn OHcNww5Vd0SGOjy+k8zRZ1lFxDcn0gtrX/zRljIqioB++OolZj+RsQmuxXIOnnoA yt6/lOUq5woa/+2X5vYYx3RO8eVAKsvk6XguNsB4jI0J+NhTF/2DnFvMysbpck4o liZ0rgApYDShphYi7aUKFk12HbDr1pEeXYoetnkf9wLt17/flsKvvpK05mYR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlT2Bxh4oGuxigDy2S8JB ItiM8Xy2dJ3hp35ozMRwfw0WbH/gRtwqhjPWh9tqjNzOyb8PQY69iUo367yVcRWp WgTJATGUqzHEU2JKEkeV93SV57NE1R+paQXFVn7Y7mQz0nH550YpHIZ1IeDUCGyT R5hFi1lYslRzWtu+2wWXrk8bZXmb49rZhl7xxa2bie2FaL/2orkYjxrZ5J7j4SHr R9iMAPonRx1zhj45ei6holmU2D2aENils/6KTCkKKCky3QbN3xOsFl5xJw/boSiz 8ZZzGqVFIxz0Rd0q9voIazTt58Lw7x0FXNDQQSv+M3I+TPyXMNiKKer0O7bgpuWK DocrGG2ca3vtKuLbAvaxkm41HjHTKCuBU26OCWFDTbrBY2xp+UsMnhDCyUQthlnH dbJ+lSmJDlDFJ05Lwu9Ym/7pNgKiFZRLjgVE21ULknYjh9ZVm4oyq9AENWNitlxG KM4aGnD/eUSI0sxjFxDmg/gu4AwwK5+MoUSF4mG0S4mSqFedidegEerfgbTlZTlx VVwNseWaYvto3hLeE39erajTVdGZyIeJJfrC1KVN4GqSf1el5nDeNcyBvHoL0wOX ETbI5fXHDuI0ntji8qHUhXWMOqjje7+sGcA9k16o3PblMibdLRyGUX/MxvhS9dac Ecq0isD9vSnhFgNfvtZQqv8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14490023750108704972 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 00:53:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 00:53:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lititz.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 608847147303790893942269177963340544358514113748365709136654605200497759780349285781012266491913071206986736393931086649255982811315136271119264740030545286514960124223571584662781875538634358707768294125447325588477891311724922584837985823250463090507988430075191091495577439324668293266898556282203616301986498368353894271677477777662494525842016096981701164081002249278770519748650261250132148465449899630862980108677824323719114187049757196558035319723085667047239868800442846694626644234786482555552981349511625405049038968165519028444145664868134081185549426386856776923296148302494007819439357105021507438021090789181538888761713321646679321185529359966664946119680919188958246236581494926549653569533063878223738397431217201061679043248749600579650877902745892167841595504719648161871720574263504669557505372721129573391497834283710132471314422559220961405727193854328563552307919983049081858842165531325643140676671647071839974506966099293762976146199929888390106504982418023465169899422042331956844831194114601292808699574283548608322736426854765594245084458857336557945248806374706555763646369420952095176155046190240433700612946985042995691794346054679792169982154726723937521148107491583073356368209658318108932585859839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7062.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lititz.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ce57fa96bfb0b8e6a91791458d9d80ec5d3719d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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