aquawest.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number f8:58:25:ba:0b:3b:fb:5b was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aquawest.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): f8:58:25:ba:0b:3b:fb:5bSerial Number (int): 17895094600339290971
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: f4:c2:54:c9:b4:a5:bb:d1:a7:c3:d3:2b:42:e3:fd:0b:54:be:f1:81
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): b4:d3:da:c8:78:72:bb:e6:f3:42:4f:50:03:0d:c7:11:48:37:48:ba
Fingerprint (sha256): 84:28:91:e4:d4:72:9e:d8:08:12:dd:56:29:54:f7:25:8c:59:74:c0:10:ac:78:4e:ee:77:eb:f8:9f:99:8b:3b
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7129.crl
Check the revocation status for certificate aquawest.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aquawest.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aquawest.com
Other certificates including the domain name aquawest.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for aquawest.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfTCCBmWgAwIBAgIJAPhYJboLO/tbMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyMTIyMTk0N1oX DTI0MDcyMTIyMTk0N1owFzEVMBMGA1UEAxMMYXF1YXdlc3QuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnHkRYtKSw9/Fz9LQhPSDLDLZGpyCp1iZ TSYgdsnkE6PC4/Xm1Px3QSaI642Odg36vlS6hezkqKucll3NIURds5q73a+05Yzu PiyaDn3nlqAwYPF9G9xUpXUZogxvO9AQeBDxgwPhnWIdXnxJGALZtF87AKK06ke1 pGdH04fLP/b0d2fAOOL8X/U0XDFCc6cCejNMWWpHUridGi38nM5+7vm5l/acjn3+ K9/GeEyrtDMHJxSetKzsl+5yZEfHZeSdm1s4i10gVFItYugB1SeMtqCH/rKASS8R fVE0Ur0OqjQ0K9s9zhc3low+wFH1pQVIqoYBOUjTX2nlXmLJe3roVzE7MErDqoKz 779+El3lTSo+wfFG5ag132elVx/iJt5B1lmkynbXRLXoOZvRqT2NjQFen+yZ1KFh +fssIJhvMfnLTl0sIO/TF4oTylOUEMhd0VuJoEaXOAkoQGtnE7KiNh2/4bnZshF+ thu0CvtG1VbJK59YL4FNU/dvuB7UMh+PPSwFGBfogaVnCVFPKxBeyQk1yM0ZRNvm SiQq6nhovgS+31bepUm/z0r/gQF8G4MaGn1gSlIHM0wT+StEGF7fBZnMiFp3NLXP gwt7OK49P3Pr24TP4EXrCQ53wYxLsrRxVX1cxdw87LIlMDmqjU2L33a7qEirjxd1 ZZOplGBRDq8CAwEAAaOCAywwggMoMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2g K6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzEyOS5jcmwwXQYD VR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2Vy dGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2Bggr BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29t LzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y ZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPw tCyAzjAXBgNVHREEEDAOggxhcXVhd2VzdC5jb20wHQYDVR0OBBYEFPTCVMm0pbvR p8PTK0Lj/QtUvvGBMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYl6iacOAAAEAwBHMEUCIBnjVf5J 4WGV3s4krorK+UKTsaXuD6JekfbG/GoSfxveAiEA0SFSlOM6ew+0qhHGGeDiJQ7O T5jFHiRq25zfMVeMCoEAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYl6iaffAAAEAwBHMEUCIDUHScYSn3jP8yygSZhQ63FjqCzAh++Q3yEviPf1 gBpyAiEAyeYyTVYcx9UGqo+Ej8R32WFi7X596Gk7vNIrzk6/gd0AdQDatr9rP7W2 Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYl6iaiwAAAEAwBGMEQCIHtewI0U iicElOWA94CxekHvWBtxDTeR7ZRiPFcy6YOjAiBPOoDwCSbi0lk8f3zYfFA6/ZL0 WNmik1BQWzAxjKJnkjANBgkqhkiG9w0BAQsFAAOCAQEAYb1HenBlPu1zO7nUavbA yYjIvibqnPaoLUda3GM7LDDkn/d7iwkPX4ON239AUrz7+aJhYic6/4cd0nWDjrMt 4AC0u/qOpx4oATK9Z3aUQfbJMf1lzk9Ve2rUH2DIgKQZ8vvoWdH4ZPX8M3hX5J3O kpOuBcAs7Uo9qJ+pXeZRVT0B2aTiP5gMNDbdmpI/LUAe8O8S/XHgfO8D9tuTaVlx d0huo6bUWbZFJaW81QrMOrOOjwGjj61sQnuFYP6bohNLfX9g1Qfowd2WDYBGOX9I M1J2oCzbyRPcgk93SFEyBXUGiZZIbbOsF4UMPPSedHtZ+pa02CpnnQYa5j49lV4O Jg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnHkRYtKSw9/Fz9LQhPSD LDLZGpyCp1iZTSYgdsnkE6PC4/Xm1Px3QSaI642Odg36vlS6hezkqKucll3NIURd s5q73a+05YzuPiyaDn3nlqAwYPF9G9xUpXUZogxvO9AQeBDxgwPhnWIdXnxJGALZ tF87AKK06ke1pGdH04fLP/b0d2fAOOL8X/U0XDFCc6cCejNMWWpHUridGi38nM5+ 7vm5l/acjn3+K9/GeEyrtDMHJxSetKzsl+5yZEfHZeSdm1s4i10gVFItYugB1SeM tqCH/rKASS8RfVE0Ur0OqjQ0K9s9zhc3low+wFH1pQVIqoYBOUjTX2nlXmLJe3ro VzE7MErDqoKz779+El3lTSo+wfFG5ag132elVx/iJt5B1lmkynbXRLXoOZvRqT2N jQFen+yZ1KFh+fssIJhvMfnLTl0sIO/TF4oTylOUEMhd0VuJoEaXOAkoQGtnE7Ki Nh2/4bnZshF+thu0CvtG1VbJK59YL4FNU/dvuB7UMh+PPSwFGBfogaVnCVFPKxBe yQk1yM0ZRNvmSiQq6nhovgS+31bepUm/z0r/gQF8G4MaGn1gSlIHM0wT+StEGF7f BZnMiFp3NLXPgwt7OK49P3Pr24TP4EXrCQ53wYxLsrRxVX1cxdw87LIlMDmqjU2L 33a7qEirjxd1ZZOplGBRDq8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17895094600339290971 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 22:19:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-21 22:19:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquawest.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 638353826165204304243088449646469066357494406541800004658716178663853201296894451353485824280826178298015339043752750531802199350463310687281599557112532913599684113889925086929138096218083360579605497516768453462788528489519517963502644952743607003687772324549680861178205043582737926808401894084212505329681651544202732180574906687184050107912437411585613315507513321280199391872280484762446202235146391778256923277061939441351722462516955007223486135041859763048098654790964636683877346379982609193310462413177338174382561077594918045241635460767056192188433303479982286552769113218713724754374451274437072755601347216582133181014792636394029360042435445327739782811339165884998040161817230811027255060170287947537524228826185734212426720684439515248418274590488945935635164249553357938395427785403862193164159318066125066727471678485742546696188751173086301910048501702744828008934265718816159974738826011724141433556737534377387119816440470329118077896788435367735288453917471831672341856914745432372564005924146902924680515594438803141243153241944816581741697474820635698711991828510659960588072617461120521363656644062045248668268418433394756093830359045777658362414252577720456019970021431560806658279867243180956039888572079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7129.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquawest.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f4c254c9b4a5bbd1a7c3d32b42e3fd0b54bef181 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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