jhyco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number a7:8f:26:14:d2:9e:fc:f9 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=jhyco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): a7:8f:26:14:d2:9e:fc:f9Serial Number (int): 12073910996878425337
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 3a:72:56:80:d4:20:b5:a9:aa:da:38:16:2a:aa:82:0d:87:1d:74:b2
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 4e:ce:79:64:f3:ef:e7:36:d8:fa:b1:3b:9f:a0:fd:67:88:d3:03:07
Fingerprint (sha256): 5d:81:65:3c:b9:83:4e:53:69:3e:2a:2c:33:05:d4:d8:8f:27:aa:60:ba:2e:02:92:26:3e:d5:4f:41:5a:2a:5e
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6562.crl
Check the revocation status for certificate jhyco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jhyco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jhyco.com
Other certificates including the domain name jhyco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for jhyco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIJAKePJhTSnvz5MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcwMzE5MzgwOVoX DTI0MDcwMzE5MzgwOVowFDESMBAGA1UEAxMJamh5Y28uY29tMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAtWfx2OAL2de6ACMh+AtBtZnvZmwXTXbUKiAy aztn3XnmLC7oO86q1xgjZab5/obA6gK+1v6p+anOj9BiGDyzqAuiOyr3TbCQBHKa fx25tHYvvh36rpAFThpow1qtXPGLni+PZJohI4vFAqepvBSqY3ZofYBp1A/IIU+a UqYURoke7HXQ2LRoQrgFIDdcTqQSWlbeXvI7Yz4yIUuz1NzMbqUBNVCjj5MGXOgA ISj33Tj6EzFjncWBnDc3Ii++XRofZtKfEdUE90+ow+O0fNSfh4WD5Qdw6Awy0tf1 jZe/XEYQqW72HUTIo5HmDBdpeP581VlReHjFyn4OkGE3kmLfB5eieUt6vzZtQ26X mDcPKkeCjO7si5Pvms1g//JlIwazu9aKG71o1UEOJZ2j9V3uVMqn8ofjWV6cJSSm kG1XkCBZ9t+ljQPOEFqPrxHYAda3i5U5KqHYPxJ48CaW1XjihS5QqjAPK5wy55K9 9kl1imo7uPsnMb7/PPs7fnT57zG64kz5zh6jow8AIDtV+K0HNNquagM5B0AfwXn+ P/8LSCFEXxh4rG20/StBs1SLzRMrGdTAXcihLwCOICFlrLrNkvp0DI3MP+aN4xgK Hu0scOi0sxoHUTJhZFu5gLGxbVr3V0Ew6AsCDOv/4UbbIqX8dFBwR0IIEYdYExcA +VbS+bsCAwEAAaOCAykwggMlMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6Ap hidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNjU2Mi5jcmwwXQYDVR0g BFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEF BQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBA BggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBv c2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyA zjAUBgNVHREEDTALgglqaHljby5jb20wHQYDVR0OBBYEFDpyVoDUILWpqto4Fiqq gg2HHXSyMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAYkdQzCkAAAEAwBGMEQCIFlfya4nFbgcnczm HY0m1NHKrlv5zInkN1fPehNuZ9D+AiAhoco0b+Kbubbck/G4coyYcHBKzYnrLBem +bSe7fMG/wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiR1D MXkAAAQDAEcwRQIhAJ/8lDJ6DGDeJAIoyN4MP89xNN4IIR7v8wxeV5PSo1tmAiAi 68NDEWvRRO4OBLGZKI84Zz2XAppE2ZebiECaeqi7egB2ANq2v2s/tbYin5vCu1xr 6HCRcWy7UYSFNL2kPTBI1/urAAABiR1DMeIAAAQDAEcwRQIga6OeuANXlvvhcdwI n+wsOiNbWqPHp8Vm09xmiaEhe0ICIQDLvxNzFeF9mZ+cSiMOVtGcq96Yot8Otxxd eBqHOqIuHjANBgkqhkiG9w0BAQsFAAOCAQEAUIS3aK/J1PyuPpaSQOnlyjukVJeE dQ8FdpE3Dc57wjxWv4IUvwVEk08sgjt2bx+YvahXEWWuc7D3bJ1PdEFz4T1ARtD/ 3Nnn7Telwd+5sD0Zke07L2BoktbD76kfaO3R9rr7/ro00EQEa9yDPquh1fYUtHMj 8olJfwBGcQ7aPhm2+59nb5QiAH7IOEreXtvd60B58sjxfFT36r3xVnllZrq8JXpI X+e1sDOUMhsxxy3XD4+AJBALWvv1dp8PhNgJpDR/mgHptJXix9+fRE8L97MxaC0v TQqnEVr4QKcf/Q8FbPvqR9wEQ46fLC5gvEyMss8iWQ3hUiyWDwvwiUBjNQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtWfx2OAL2de6ACMh+AtB tZnvZmwXTXbUKiAyaztn3XnmLC7oO86q1xgjZab5/obA6gK+1v6p+anOj9BiGDyz qAuiOyr3TbCQBHKafx25tHYvvh36rpAFThpow1qtXPGLni+PZJohI4vFAqepvBSq Y3ZofYBp1A/IIU+aUqYURoke7HXQ2LRoQrgFIDdcTqQSWlbeXvI7Yz4yIUuz1NzM bqUBNVCjj5MGXOgAISj33Tj6EzFjncWBnDc3Ii++XRofZtKfEdUE90+ow+O0fNSf h4WD5Qdw6Awy0tf1jZe/XEYQqW72HUTIo5HmDBdpeP581VlReHjFyn4OkGE3kmLf B5eieUt6vzZtQ26XmDcPKkeCjO7si5Pvms1g//JlIwazu9aKG71o1UEOJZ2j9V3u VMqn8ofjWV6cJSSmkG1XkCBZ9t+ljQPOEFqPrxHYAda3i5U5KqHYPxJ48CaW1Xji hS5QqjAPK5wy55K99kl1imo7uPsnMb7/PPs7fnT57zG64kz5zh6jow8AIDtV+K0H NNquagM5B0AfwXn+P/8LSCFEXxh4rG20/StBs1SLzRMrGdTAXcihLwCOICFlrLrN kvp0DI3MP+aN4xgKHu0scOi0sxoHUTJhZFu5gLGxbVr3V0Ew6AsCDOv/4UbbIqX8 dFBwR0IIEYdYExcA+VbS+bsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12073910996878425337 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 19:38:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 19:38:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jhyco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740072050694464754958174441324308077564572961818763526718077456239569316608031985085853425853277220273981018160682438229335655932353979191243520198350916543179101429397475418699334384359241077754490986863174811084657650517122698982722538369712300564773708486512666042610183246567188858129453034296715372800445152388380876984089647155772380869442763564536450416708174513791678791891668487084080708707626276251815010529740244782511862359195818049777215083297718904755214407113064043253975834487133988676309397580900260882263426500565674405079641954240037299422299659807347390821557318124468569795956427495161634032837296951661499998480028785125386425958785063104847104803151703954763296667635360078423593794479698238273234180866236603849731002378640450503911762585598384665250182081881777805516362605532493081425908759361525772754770662095695433431467466191864612065910919068955589463591507430936542001561636384175743336359849340763571667300943772139488978949397061408352382102490798521607498802575651164341962142714552414530607468192385842235308057447637284005113812062902427249593125296893013068252710382851649858116463542737536484049951964207570480349122332671203510939747701661150550655281918270864359017259255372525821903766747579 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6562.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhyco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a725680d420b5a9aada38162aaa820d871d74b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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