afrimade.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 01:43:68:0f:2a:25:47:dd was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=afrimade.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:43:68:0f:2a:25:47:ddSerial Number (int): 91030831818426333
Serial Number lenght: 57 bits, 8 octets
SubjectKeyId: 5e:f3:83:74:7e:18:27:4e:81:94:a7:e5:fb:a2:b0:39:00:29:74:77
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): b0:d6:2e:cf:68:73:d5:1d:d7:90:e5:7a:4f:1c:07:03:00:b9:38:4a
Fingerprint (sha256): 83:2a:90:c4:53:64:a5:90:da:79:3c:d8:ec:5f:77:46:6f:8f:36:37:9c:3c:36:a9:7d:a5:94:11:79:8c:86:f2
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6553.crl
Check the revocation status for certificate afrimade.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for afrimade.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
afrimade.com
Other certificates including the domain name afrimade.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for afrimade.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfTCCBmWgAwIBAgIIAUNoDyolR90wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzAzMTQzNjA0WhcN MjQwNzAzMTQzNjA0WjAXMRUwEwYDVQQDEwxhZnJpbWFkZS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC9Ut3GCU11c+K/5djw4boGNSAqiQith5Ja mHVEpGObKnGTd3VIpwTws2MAiQ26aDPnQE/IL3ac8Xa73xf5ceMzNGsSwONIb/Pl nEUA9rLMNmjz6Pg09Fb2Qdakrz7cTqIyJoku1jiZq+aogk+p44Fh+koDsrpKpug/ s/R5hzEzplhWHF1hzQNUyyz272Wkp3cYJgwRTxd09dTSqjyNbAyqKvI26FmMBoWE 6N3bwoitIsISoCx5S+CIZtalVFeN9op3Hk9Y4OQLppykz04zJv9X/Gszb3qyNJhh jNDFWVobG6PuhXzmU70vfRAZdfHzFMjChK0ZaXkzfQxzo/HX6Pb1+OsdqSX0mwTm KlJh1jdYy+4OY5oronDAlR4kx1RaY2evA/lnVXl+SYfc5/QtVTBb2C5P3jhxIyVm VqmC4Dzwn+/ouT/J7shhL+oUJJgSlDsbCamZxw3uvTuNFUn3qHlDcwAACKNCR7Yb HMJuPoBAzSRi7QcPcw6UxuUU4BG56TKmj1YurcxEPr6sMNCDdfpbJivcJCewZMFL RkNx4dwa0tfj/FONu+m8pYOVP6U1pMs4yqAnUBJHh7CrbUIo5mcyuYsMDSzXDiGC 9iCywzO62l9PtpcGYyamM0pG7qruP1xUpZJOSPKA/FoNTff5tl7H0WFMLSSoG0fA OnQ1VIJLYwIDAQABo4IDLTCCAykwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAr oCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NTUzLmNybDBdBgNV HSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0 aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsG AQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20v MEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl cG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0 LIDOMBcGA1UdEQQQMA6CDGFmcmltYWRlLmNvbTAdBgNVHQ4EFgQUXvODdH4YJ06B lKfl+6KwOQApdHcwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiRwupgMAAAQDAEcwRQIgM3Y7TmDv 7ZhA93kqhy5aNwRZ+GMIEAoy6DYMBLWsvjQCIQDcvG9vPDr3oOd/13YfWNd9QdNr xvBpmdvEvnrZvEYs1wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABiRwupucAAAQDAEYwRAIgLOEgLPPIfzhn5bDw1UoYWt8IfYFiNesqoJkE3God EDoCIEsh8P07+DUIVJ+aoOYz1i6/h7tAT80cceeim/Wp51awAHcA2ra/az+1tiKf m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJHC6nWwAABAMASDBGAiEA20xxaGGQ pvVY7OOgYXvNAFZqwW+KXyqQOO8O3+RoGS0CIQC4B78udxiGI/B5mm0rSG2L+rMz e9QLsy6vrg/e7n4HfDANBgkqhkiG9w0BAQsFAAOCAQEAT87YILSVRGrhcWFdgW9f jSLKY0+wm4wK4ODgoF/cdHZDA/M0cm748k4tWSDgVS8380Xl4Ad8tw4RxDWCM6UL ApgmcTTgdjwr814am5/6WS7nhO733qKsWX2HVjAGa4cZdBp0lZDwZkfcJgvr3iLi UtVHNZRoYST2QRGIM4It6/Y7+5MdPro4MOPCeNOOJXgdjqiHLnv4X3OY94t7a76L WOKe45tRZhxX7r3XhEgbFFUAWbtf4lG/Lhir4+HvB0xg6VPbm/WaOVaVheZ6DPbN 1tq9WwvMTOLS3FtkgY868hW1RxxYF/eMiyWmBOjqkm+uv5teS805dmkyFUvgdPIc /Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvVLdxglNdXPiv+XY8OG6 BjUgKokIrYeSWph1RKRjmypxk3d1SKcE8LNjAIkNumgz50BPyC92nPF2u98X+XHj MzRrEsDjSG/z5ZxFAPayzDZo8+j4NPRW9kHWpK8+3E6iMiaJLtY4mavmqIJPqeOB YfpKA7K6SqboP7P0eYcxM6ZYVhxdYc0DVMss9u9lpKd3GCYMEU8XdPXU0qo8jWwM qiryNuhZjAaFhOjd28KIrSLCEqAseUvgiGbWpVRXjfaKdx5PWODkC6acpM9OMyb/ V/xrM296sjSYYYzQxVlaGxuj7oV85lO9L30QGXXx8xTIwoStGWl5M30Mc6Px1+j2 9fjrHakl9JsE5ipSYdY3WMvuDmOaK6JwwJUeJMdUWmNnrwP5Z1V5fkmH3Of0LVUw W9guT944cSMlZlapguA88J/v6Lk/ye7IYS/qFCSYEpQ7GwmpmccN7r07jRVJ96h5 Q3MAAAijQke2GxzCbj6AQM0kYu0HD3MOlMblFOARuekypo9WLq3MRD6+rDDQg3X6 WyYr3CQnsGTBS0ZDceHcGtLX4/xTjbvpvKWDlT+lNaTLOMqgJ1ASR4ewq21CKOZn MrmLDA0s1w4hgvYgssMzutpfT7aXBmMmpjNKRu6q7j9cVKWSTkjygPxaDU33+bZe x9FhTC0kqBtHwDp0NVSCS2MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 91030831818426333 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 14:36:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 14:36:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afrimade.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772373295346644285235814591674477473304492203915768917899434766911106908876749991457487811279765466627166571077947770950851034543563457204447226282815352934609167686799240564956459605892855135525813153429594720108574690582381644537006555961017812794669652146565089371022450025408283664163437885183229409064544247861100271028725289139666998015285116174419958686871355754582789700653227999725770803819592024271498604906346837675501831116366023971528188158104621202309792097753022314543307952482823645258775313959452990909317053868955243473440338002362176371167962355269847831873841177624449717742689612514739194653443348341784135556058008856938009012061029976905423255407623384056724806647620869174550557487949855746979133514759785641813683531344632074478879176820717949976968327745765699241917864900039944914232144420398623877804732877222282495840157598975360173203195071494177266033005827801425177646135897336490958407188283408579864082206143890879938338014126952972554628383039962341751107885813302355694182535197449981479217100518838813920064278719643341189226096689097666062216081150623342542256297667481696721689469518058085551397419841435496535356738903235974873505738184635120272179879532524403005306735991115549721078444215139 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6553.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrimade.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ef383747e18274e8194a7e5fba2b03900297477 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001891c2ea6030000040300473045022033763b4e60efed9840f7792a872e5a370459f86308100a32e8360c04b5acbe34022100dcbc6f6f3c3af7a0e77fd7761f58d77d41d36bc6f06999dbc4be7ad9bc462cd700750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001891c2ea6e7000004030046304402202ce1202cf3c87f3867e5b0f0d54a185adf087d816235eb2aa09904dc6a1d103a02204b21f0fd3bf83508549f9aa0e633d62ebf87bb404fcd1c71e7a29bf5a9e756b0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001891c2ea75b0000040300483046022100db4c71686190a6f558ece3a0617bcd00566ac16f8a5f2a9038ef0edfe468192d022100b807bf2e77188623f0799a6d2b486d8bfab3337bd40bb32eafae0fdeee7e077c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004fced820b495446ae171615d816f5f8d22ca634fb09b8c0ae0e0e0a05fdc74764303f334726ef8f24e2d5920e0552f37f345e5e0077cb70e11c4358233a50b0298267134e0763c2bf35e1a9b9ffa592ee784eef7dea2ac597d875630066b8719741a749590f06647dc260bebde22e252d5473594686124f641118833822debf63bfb931d3eba3830e3c278d38e25781d8ea8872e7bf85f7398f78b7b6bbe8b58e29ee39b51661c57eebdd784481b14550059bb5fe251bf2e18abe3e1ef074c60e953db9bf59a39569585e67a0cf6cdd6dabd5b0bcc4ce2d2dc5b64818f3af215b5471c5817f78c8b25a604e8ea926faebf9b5e4bcd39766932154be074f21cfd