bridewater.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number fd:58:72:87:7a:ad:19:a5 was issued on by GoDaddy.com, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bridewater.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): fd:58:72:87:7a:ad:19:a5
Serial Number (int): 18255467015750621605
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: de:ee:23:22:69:db:fd:a7:ae:ed:3c:91:c5:bb:37:3f:3b:c9:93:68
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): cd:8b:11:f6:a1:2a:28:9c:79:df:56:47:b1:8f:e4:4c:49:e4:41:04
Fingerprint (sha256): 69:9d:08:de:7c:0e:ec:70:3d:9b:0e:c2:c3:e6:a5:2a:bc:4e:0d:10:47:66:c3:da:30:a7:73:bf:38:a7:6c:fa

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7203.crl

Check the revocation status for certificate bridewater.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bridewater.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bridewater.com

Other certificates including the domain name bridewater.com

(limited to 100 certificates)
bridewater.com
bridewater.com
forbridgetrade.com

Certificate

The complete raw certificate details for bridewater.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhDCCBmygAwIBAgIJAP1Ycod6rRmlMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyMzE5NDY1NloX
DTI0MDcyMzE5NDY1NlowGTEXMBUGA1UEAxMOYnJpZGV3YXRlci5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7r6oUpoow3G8UYbHUDZAs2tkwPDpi
daIq9NJQ0fZDgrd+Ga9mgjucQrqkwzCYdM8DdK5p/SVvQHtt1S6k02a7NQgRqOCy
V3uOx9L4vozMzGH0b0zZMVXd+mikaJGbA1BvPFHFzkkCjFLJ25ouN2XzrpeWNBPr
2XGqSQIJqNESxJrdr76DanXgEnhO3p8SmZgC822C+/djW7oMpzbl9xuDwyBV25Yv
rQwdjpHINqREYagIC93iDtbKZpOoGBfv084d2FquP5nFzNX4dqideO2bqtYGVPQ5
/OujLgXGF0/Gfk5RaGiMlQXIgRGEVLbZCYbjRcA1bvwk2gp/BVcRAvFXSbeJBQCN
yUMISprASpSgwsmcyKRxz9/R7qsldlexJYrY669TpphvoGFbGvF7gWKRAa0hDzDR
9+WtJPWh9PAJy/7dsj9MjJjQugcL+JBIdyLoNhzxyNh5BOaNN+eZOP53fJlu3ITt
GC2Vrsz2y0sut/qeS70aZw9FNHkqKlK5qQpWa8TipIZZz52RLuxL1DdQr0MtsEkM
b8QBkRIJ7k9jPspnMakjhiZpFp0hRSLng8Xb4q2avWJE0a4Wb7O+GV0bCL1aAZPU
KPEGPwRs86//rcN15sEwze12D9t39piIvX3Fh1x0Euy+02bxrLHV8b/S/Y/ba9ER
AMfD/jdRWrFHfwIDAQABo4IDMTCCAy0wDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w
LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS03MjAzLmNybDBd
BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j
ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG
CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j
b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t
L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts
s/C0LIDOMBkGA1UdEQQSMBCCDmJyaWRld2F0ZXIuY29tMB0GA1UdDgQWBBTe7iMi
adv9p67tPJHFuzc/O8mTaDCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJhEptqwAABAMARzBFAiEA
3paU092G3lLfwfG10c5o/JizNYrg+zMqVQLpHM0o63YCIAwKuBviAGJvsgo+6J9X
ixqVLPTSRHpY3mzDA4tX1BDRAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGJhEpulAAABAMASDBGAiEAsfDqbyCKbOaByfIoK9bzRSx7SGKqV0x5
BLzQV3rm4I8CIQDD9pJ1lbRKmrgWNj+BNe0/yTOpQBXBFeez0Lgu0jI04QB3ANq2
v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiYRKbyIAAAQDAEgwRgIh
APA0xNtHJOyJmMaescrghRF9M9qdEVvvc4c2VGBTlskLAiEA51+3vro7BU8A+Q0i
noLZr7gjugkSlTWCOEG6hL1c3GswDQYJKoZIhvcNAQELBQADggEBAAQ5zbHBqSTp
xyqKdZYdjQIhsEFZW4YZeEq7t627p1m57SqyJne8Plgr6YxdP1S25rUmRf5TGTtk
xspwtE7nix1m0ABRJoCehAzsYLFKbSSnVXit8hGJekTyCSHGehkPT3XZEVKWOBIJ
pwVkD8rpMKoq8Hj4iesWCfosNcRd+O7DbivYCnC3SKPtYnpIk6q4qTGqzWiA4dGh
d52HZAQmOfDTdLCZHGS84UUDSTT3/lj2OQyBWx+TKp+MGUN/1ppib+iCJSU8qk6w
07brtUV+1xKMQFA6ao7p7dW9KOCB5oQ3WMlKMz080dweB/xvBtxPPAV8M7sjfckf
8o9Fz4tcPMk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18255467015750621605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 19:46:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 19:46:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bridewater.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765692847501200395245280931094751401294476435112477238196721092398717941675360410859986276623543965342824767674758171287786543187604831921957739509228634735131104462736652059149848576066245655205227197071996159648952832646780122971589422669302188656866096805773600704530348864457811784292698852692256044226129664647628194601940611361244383777057951661584374327646347703481976708298903807265407337623297928640753184364980910231906672687640657294305735784163545245645831424929390545290156346407889871539034417061714385818206903704041453680573363981970704656033724345825992538794297259187763463010978397595323787968865049901850960630980746490692430179193923088439057848132785492052332030769483269048610195483768187981508838182624706445161452805546519892454260544994073113168070042142752579866215838217795418951180911408836383253831604131080414007767353288347155372729462714703918031297305932990098613933234259503238264834066022928137044945627878311080785692866953883151990974547154063755841786532657572546346555794827197653346223473594305484524304504250227407196772951331365633451806076016010169760578905149462433997161352859436034202980232019305955342341851133938320631890618882130194480846643826098566122432789211076562578172296644479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7203.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridewater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							deee232269dbfda7aeed3c91c5bb373f3bc99368
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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