aimchat.aiministry.org
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 1b:c1:20:27:03:d7:d8:83 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
Certificate Subject
CN=aimchat.aiministry.org
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:c1:20:27:03:d7:d8:83Serial Number (int): 1999915061469501571
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: fd:6c:59:45:36:90:d5:e6:4b:a4:6f:fb:3e:35:18:65:72:6a:85:2d
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): fd:e1:0f:85:d9:37:3c:25:bd:25:84:b4:dc:b5:39:d3:46:d7:82:95
Fingerprint (sha256): 55:79:c3:76:e1:fc:a2:4d:e7:d7:50:d3:cf:3e:da:96:cf:f4:da:5a:96:8a:12:0c:b4:6d:f9:88:72:fe:c8:a2
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-3652.crl
Check the revocation status for certificate aimchat.aiministry.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aimchat.aiministry.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aimchat.aiministry.org
www.aimchat.aiministry.org
www.aimchat.aiministry.org
Other certificates including the domain name aiministry.org
(limited to 100 certificates)
chat.aiministry.org
mail.aiministry.org
mail.aiministry.org
aimchat.aiministry.org
chat.aiministry.org
aiministry.org
mail.aiministry.org
mail.aiministry.org
aiministry.org
mail.aiministry.org
aimchat.aiministry.org
www.aiministry.org
frog.aiministry.org
aiministry.org
chat.aiministry.org
mail.aiministry.org
mail.aiministry.org
mail.aiministry.org
aimchat.aiministry.org
chat.aiministry.org
aiministry.org
mail.aiministry.org
mail.aiministry.org
aiministry.org
mail.aiministry.org
aimchat.aiministry.org
www.aiministry.org
frog.aiministry.org
aiministry.org
chat.aiministry.org
mail.aiministry.org
Certificate
The complete raw certificate details for aimchat.aiministry.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgIIG8EgJwPX2IMwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjExMjE1MjEwMTIwWhcN MjMwMTE2MjEwMTIwWjAhMR8wHQYDVQQDExZhaW1jaGF0LmFpbWluaXN0cnkub3Jn MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuEmbeneiCGQ9fuzIvH/G PoJgyAK1tSgW6OX3mqnXpFOeBheLBuV2v3gwfuJiDowhi1jVbVPan5H+PWGT97vY omHf1UIMYNhxKdp2z+0jvS6A7tUt3hvm/syQ5/Byg2AloWD9z1FTiRiEqikWM/MI qjkCaU5aVDppcjw5uTzzTvPAkVwgGQVjrpg8nVq+4EZMBWQCDNBXaTUIRRAzpJp1 vCdafwZuXxzUAoD8Uru6KiA4vDoK55V3LUIXFxUVolgc+UPiHaW/9Qf4Rm4lM2IT pAH6O51KR6eK4QzX+pCvS4uX2dVHnRMu2+FnT1SkvBilPNAx8J3XOJCyzbhAXJIt PSBqTnM5wttOFc6D4H1Y62jSN0bRmCnbKCro54/e7SkMiJS72et3Ish+lFDUs9M7 5BpmzOdBntmNZ7BogmakzWLsPymMPX3mBzOA71CqAnoHDYSB2Zn/hk2dfMu7Qq8x b2EICIgNQz86FDXZQZQv0V8OoD0niHLi3HyLuS3jXhG69e6VAPgugDNyVAzMDBTY szXEPKQLWhlHkByA9oFAtM9vtnTFn/F9o40hy19U8Cd1+pJOqOB6W7vhtzDY9emt W9Rzl/MOiDVkU5Ssajc4YBQcS3OqQREIcJGU0lYGNTu6udOR/MJdT3qVsSz65IMU OvIUSVRfvtTwa80FLcf3+60CAwEAAaOCAeYwggHiMAwGA1UdEwEB/wQCMAAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNV HR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMzY1 Mi5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFito dHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeB DAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0 gzCiM9f7bLPwtCyAzjA9BgNVHREENjA0ghZhaW1jaGF0LmFpbWluaXN0cnkub3Jn ghp3d3cuYWltY2hhdC5haW1pbmlzdHJ5Lm9yZzAdBgNVHQ4EFgQU/WxZRTaQ1eZL pG/7PjUYZXJqhS0wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAKkC1u3VCxsqld3R2SPvGsdJaRWFfSk9fEqDtGzN8MArWdW/15mGKBKwKREg jgehYp/Vz6fXnxNrYUW2U8ktm0stOp2bIKnh88ReHBtsxefX4h2weqiFzT2I2pRh l2PqH8kPlOfDKgzveGzy9WvXFA/SGHtD0Vmr5s1HLYN7BfjLTe8kzJ2oqDulXjXG GjXvXBh99ucl9i+SvRhf8VAG38CXHoAXwj1CrcCTMvQAjm7LP5gqXHDKHwFaOLSd ng9B/Yw/BdNxij3bIz9Vqaf9lUCFTMSCA2TWqXIfUDV/2ZIy2NKAYGYPX6viCJYc reoAfSGcgyz0/TzIsjJU2ZtIJSk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuEmbeneiCGQ9fuzIvH/G PoJgyAK1tSgW6OX3mqnXpFOeBheLBuV2v3gwfuJiDowhi1jVbVPan5H+PWGT97vY omHf1UIMYNhxKdp2z+0jvS6A7tUt3hvm/syQ5/Byg2AloWD9z1FTiRiEqikWM/MI qjkCaU5aVDppcjw5uTzzTvPAkVwgGQVjrpg8nVq+4EZMBWQCDNBXaTUIRRAzpJp1 vCdafwZuXxzUAoD8Uru6KiA4vDoK55V3LUIXFxUVolgc+UPiHaW/9Qf4Rm4lM2IT pAH6O51KR6eK4QzX+pCvS4uX2dVHnRMu2+FnT1SkvBilPNAx8J3XOJCyzbhAXJIt PSBqTnM5wttOFc6D4H1Y62jSN0bRmCnbKCro54/e7SkMiJS72et3Ish+lFDUs9M7 5BpmzOdBntmNZ7BogmakzWLsPymMPX3mBzOA71CqAnoHDYSB2Zn/hk2dfMu7Qq8x b2EICIgNQz86FDXZQZQv0V8OoD0niHLi3HyLuS3jXhG69e6VAPgugDNyVAzMDBTY szXEPKQLWhlHkByA9oFAtM9vtnTFn/F9o40hy19U8Cd1+pJOqOB6W7vhtzDY9emt W9Rzl/MOiDVkU5Ssajc4YBQcS3OqQREIcJGU0lYGNTu6udOR/MJdT3qVsSz65IMU OvIUSVRfvtTwa80FLcf3+60CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1999915061469501571 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 21:01:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 21:01:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aimchat.aiministry.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751827523115713758537699394554440933483568265191490802146713032111073569302624402697826877651245190365290801969753052013431765230713091393611024107565814425400180449130746774204099528454982933995093080321202574918662420075371183456843796369764749627430510001396703630626571687101608233186890025093424931810379002047336945280734054588434388899920770594885492849617047446912275719079755945280000855963255647779384427337128028518162461710269865385554323123979381771017206438100740016671037422604387384565228964818265098019278056522949083688370073288672744943095557001935088515419164575559402849465137407934140319722649263400583496546918183277109994883230448808922733145402542548607057241374344503331687489592412530724897399905247082451037615040274654106224558324923176828137025030799135971117310726748846030716762293586693981941687159676381563223170139980530753071007138759041321162890530535880643558165916682020440131562941840304614584322057380392653084925518952456625790637597506658958351288158259140803877136100392266759416671552261491176164488648495748957458534737830007506012393908736488180546742315251917775738403247353201837735519083459678049871881140370872223390305517603169494652910791614073668317389217712871536860642007317421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-3652.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimchat.aiministry.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimchat.aiministry.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fd6c59453690d5e64ba46ffb3e351865726a852d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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