picardyshepherds.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ce:1e:b7:e1:97:9d:c1:03 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=picardyshepherds.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): ce:1e:b7:e1:97:9d:c1:03
Serial Number (int): 14852510800653697283
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: ee:ac:a2:e8:f0:8c:c2:8d:5f:56:73:b2:d3:9f:de:f1:b9:c0:c3:eb
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): a1:af:1a:88:f2:35:07:b4:82:2c:78:b7:0f:b5:cb:fa:1d:a0:c4:3b
Fingerprint (sha256): 60:70:b1:da:0d:92:b4:8d:7a:0d:b1:33:cd:b2:0d:6b:59:17:5c:80:37:10:f7:8c:f9:d2:db:e3:9d:40:e3:5f

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7243.crl

Check the revocation status for certificate picardyshepherds.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for picardyshepherds.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

picardyshepherds.com

Other certificates including the domain name picardyshepherds.com

(limited to 100 certificates)
shewfelt.com
picardyshepherds.com
www.picardyshepherds.com
lumala.com
picardyshepherds.com
ozarkhempseeds.com
picardyshepherds.com
estpak.com
rv-ads.com
www.lasvegassportsdoctors.com
www.picardyshepherds.com
picardyshepherds.com
www.thermies.com
antonella.org
www.picardyshepherds.com
www.picardyshepherds.com

Certificate

The complete raw certificate details for picardyshepherds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjTCCBnWgAwIBAgIJAM4et+GXncEDMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyNDE5MDY0MloX
DTI0MDcyNDE5MDY0MlowHzEdMBsGA1UEAxMUcGljYXJkeXNoZXBoZXJkcy5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQChjWVPxDlAWohN5SD2g+uI
Mmm0OkBxGpbvnIsyoEntO7I3qwKWVE5J4ZcKDHxzgfOicr9GBa5IvvLhAXUzEzda
7Qv6cuNCA8tgr/u6GA1xX73BnEKD+MhI2plaNbb+8NqxRX+jjL6+YVgRcBo4IcaA
/SeH6r8t0TzWxCqb0Jo8e7niBq1dEkRvFnqfCCvjBYjRHNHSSIr3K9rNbAW1z4Tg
saNNEUYaYxzZ70daFAoqSN4YfGfJEWwbcXIHd3X7dv9pYJOpkHFX9W4ieVCiZ6dx
r0gVDPzWNqCa/Ko/fB73rHk50APzHWGe6u/XT5gbVYiQ/8w37Qvok88frJt8E9JB
m7PzrUI/KmERNFTuMrDFYWU4T5AOf7OOhhpKQQDIhniCCumA+l4OOiSlb/B5MZo7
+8ACVOhqM9zimquc7QzFUvjbK+PbvTXFYtKjwUVSvO/pU1zte7Oqxykf4btORjkq
BSuseclKjhcd/3Zvg71N5YRzjygWgDSfyDkXZ5lHPkYbRLHJzzV5/1lz1CPLDY+H
I/ent1EceoAJNWcOjvnf6JAUAgWLwKPaP/+JNcQjYzKpckz/3s7kM8YhwuOj3yGn
MPCwVDqdXmRz9yFsLm7PWtADgSq/w6Do5bfZZhZuTjuCmAXSvrmwpy5yY0IBcdqn
mpqLVIJx+JFrOkhmnnhcRQIDAQABo4IDNDCCAzAwDAYDVR0TAQH/BAIwADAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1Ud
HwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS03MjQz
LmNybDBdBgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0
dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM
AQIBMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29k
YWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFk
ZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSD
MKIz1/tss/C0LIDOMB8GA1UdEQQYMBaCFHBpY2FyZHlzaGVwaGVyZHMuY29tMB0G
A1UdDgQWBBTurKLo8IzCjV9Wc7LTn97xucDD6zCCAX0GCisGAQQB1nkCBAIEggFt
BIIBaQFnAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJiUvz
7wAABAMARzBFAiBTwyHc6zhEzfMHAjgTmqbsZmUECbnlenMEN+84M7QYaQIhAM8Z
ZXWxv6J9Ik6NIt33SoSWb29R4B8vqsIovZhX+a1/AHUASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGJiUv1FAAABAMARjBEAiBu7ZVkDm+4NPagPTvc
4qmX6hMilNYcGAGfGt81s26ghgIgAa8UBqJmBNfl0UFQyy3BMnnvBtcKfszHqFKo
vnZomDkAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYmJS/W+
AAAEAwBHMEUCIQCPGsH9o5tV7cyCiKNenH+duPEBqD0+rmh3qm+EZHIUcgIgHing
KuyrQtiMmBYrLO4xhCvxTtLzU0kME1sCAOQynZcwDQYJKoZIhvcNAQELBQADggEB
ADGbfm0cyrTMey8NnT9ZzctOFLJtZvnW6GNYhoqYN0idPOWDgSrc1Mhi1QJLpFOy
Q2UEcCUAG4ESPKI+n+mDTsZSrBPGNnH6jVEFsra6XhHCOdGDbR1SSgcQ/maf/1yB
Wjs+W2EXCOEVup1V6/gksENyj1R31X7D0Vsu8fAH49VCiwIOoimQKge1bV/QvdsS
9yy3/FMJ/1Eqo+aGmQXAKTudd/DkIej0ZwOOssGt+Bodlk95MbiP81MkKpWgWHg0
BeMKVgnNNM8cqDAV1WEjAf/BekRLZEEhULjtAJVfbB0+Vm9CbXoPRpzxoYBX6Xvk
9IYkG6FpFU9j68jnpb0ALaw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14852510800653697283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 19:06:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 19:06:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'picardyshepherds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659075993100315633935468450151247896540945356474971077047035773063797036977121347286670838010965845130184769171914183198961179197528210878301699379676906206635360079258174821456615339242085636289605762605371374213252081138598578607971633000089240896196394017605653394477901222764582150031098731397501298257812331226447491264322040076561681347619744420285920638575479660204021389368051043064881903042868678138580092174789668861734412992669139561333316543575906004214663352260803578663866931979376070628014845117657643785824039962212259991365563094457601212623311295546633317191766885197503182691388879954301575880237981364902606613405091154322564535748948078233307432591479972429380808346455505271255824126193010193637554066254072421605243133763553196156913492127715260053700259528404471754833676044102238177137628103816919530253013584376982814005060251005829836392995072203114503970965848048462334553886211423700823708906331307096810804496578179650675160768370474448974505833141592822225555027980169188289093440636132040053227742686965749708401287880871708904577163845305938541806473333157383950782137401750680619603373627638210053299895009820615906425534345300944751925833444403839334789785812895863800570099743868573805200230865989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7243.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picardyshepherds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eeaca2e8f08cc28d5f5673b2d39fdef1b9c0c3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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