puriflex.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number df:45:c4:46:e9:aa:0c:52 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=puriflex.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): df:45:c4:46:e9:aa:0c:52Serial Number (int): 16088481052697955410
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 29:60:d9:8c:c3:bf:6c:45:09:56:32:7c:92:41:42:af:4e:9f:37:6d
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): e8:2e:e2:6d:b8:a1:42:59:5f:09:9d:44:71:35:92:9f:97:c8:50:f8
Fingerprint (sha256): 9a:51:c1:5b:15:c9:e9:26:92:6f:94:03:20:0c:9d:ac:14:66:cb:d1:b5:35:72:a7:29:75:4c:cc:96:82:b1:37
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6459.crl
Check the revocation status for certificate puriflex.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for puriflex.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
puriflex.com
Other certificates including the domain name puriflex.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for puriflex.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfTCCBmWgAwIBAgIJAN9FxEbpqgxSMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcwMTA0NTUxNloX DTI0MDcwMTA0NTUxNlowFzEVMBMGA1UEAxMMcHVyaWZsZXguY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqNMKLX29Y6fmiyG5QCRixDDTH+DEGJz7 CTdTtmkYKLL5WgdIvDsMsC4KW4qI1iBa2LIxyNIs0nJ9gn4cLwAmm1hgTVjVEY3C hTFBK/p+rOjlqLpUIoD8H7Clo/9N4O3jQYatJJhYPsk1u8XMaES67kSxrdd5lcg9 YKqJfRkG3UBbKMQguy+RfrgL4Wf+bwn8wWaBVpDhFGpL7l5/5oMDgGSj2zzCh4js 15qsV94UahXlYZtD1052XoUSyFtnFCpwO/npLzv5gqy0GQcV2i140PIkQeXR1s2/ dJudcxJ6/uCst6eIFAc4dvTWkRwyymUjg7fNb07iFXzM81ZqCnac/f3oGWPqJkhH CxoWFdGTDpaUYOlQCSpE8mZZARmsrK0Nsp5Ap3Gm6uwE86Prhyiw3SKDYbRUVIgg UxFcrnCpeWGGWBwAJ8hguwvNxHMoSaIhUx5d98Jwkc86OUm8tcnw0jcB7r6KALP5 CZ4aoocAkiRI5HCakWq920n9Grozl+ApUdsCCA3/dsWXvbboIoAiXSSmokt3rebI ubS++EQ0LQp1Z02xURkAsmIeiZPaxgqJR9wu5zOBzC8zq4nOr1H2hIB4CUFxgx26 wflPyzZP9ER+7NjJG/hO09YDhwqpQzlKIq63ln5smGrcxZyduYd3ojKKyEHLTxgO LDIIETPZlh8CAwEAAaOCAywwggMoMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2g K6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNjQ1OS5jcmwwXQYD VR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2Vy dGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2Bggr BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29t LzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y ZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPw tCyAzjAXBgNVHREEEDAOggxwdXJpZmxleC5jb20wHQYDVR0OBBYEFClg2YzDv2xF CVYyfJJBQq9OnzdtMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYkPziuoAAAEAwBHMEUCIQCsGRmQ cqvKptw0UY23xlv7JNLbo+GUtx3prEm6nxeSuAIgJX+BLD68lRR7xV5pEQKmcLmC G0KRiOBHJ2SwidCsv8AAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYkPzixvAAAEAwBGMEQCIFPGtZ5p4zW/Jb/1WCk32WWWG24PWAeUsAEy+rCu L3zEAiAv0wEOIcnSiBhqkiNW5VWbFb47N9RtXwRJL4kPkdfb2wB2ANq2v2s/tbYi n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiQ/OLOUAAAQDAEcwRQIhANPoaXpr cj3J9wFr6ScbFjya6pyXh4XYTVNEj0TrNhgPAiARQSSKRV400lt4exl07eMTCrJ5 zpjY9aie4Z8JSvuykjANBgkqhkiG9w0BAQsFAAOCAQEAKF6Dry+EqQftCqjljZYA ZeXhaP7z4U4d7JRm9kDMkpwagZl6D+8M1Rj5SkHVq4S02i75DcWtl5Hn9943VHdo htzG/tZThsQ2piT/aSDUnEBeLS7CKCs0zwb3r25EJgfUeCdX/TSQi5eff1hRq/Jj X8J9zSslQdlEFa57nSlSItuqjc1GundfDWvwn0CxBJwJLplG1LS3DwyaYBhloYwd /K7Gc2sIcvfKvh20RGfLG0C1l40X1i0qGLKTVwMg2FEVfDKFK6o7zny6DY3JOZje 3oV37uNGS7GuNTESNjLLFuNSdipKgblAgov7HR/LkURnDpaMgUKevKRlM22Hna4h kQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqNMKLX29Y6fmiyG5QCRi xDDTH+DEGJz7CTdTtmkYKLL5WgdIvDsMsC4KW4qI1iBa2LIxyNIs0nJ9gn4cLwAm m1hgTVjVEY3ChTFBK/p+rOjlqLpUIoD8H7Clo/9N4O3jQYatJJhYPsk1u8XMaES6 7kSxrdd5lcg9YKqJfRkG3UBbKMQguy+RfrgL4Wf+bwn8wWaBVpDhFGpL7l5/5oMD gGSj2zzCh4js15qsV94UahXlYZtD1052XoUSyFtnFCpwO/npLzv5gqy0GQcV2i14 0PIkQeXR1s2/dJudcxJ6/uCst6eIFAc4dvTWkRwyymUjg7fNb07iFXzM81ZqCnac /f3oGWPqJkhHCxoWFdGTDpaUYOlQCSpE8mZZARmsrK0Nsp5Ap3Gm6uwE86Prhyiw 3SKDYbRUVIggUxFcrnCpeWGGWBwAJ8hguwvNxHMoSaIhUx5d98Jwkc86OUm8tcnw 0jcB7r6KALP5CZ4aoocAkiRI5HCakWq920n9Grozl+ApUdsCCA3/dsWXvbboIoAi XSSmokt3rebIubS++EQ0LQp1Z02xURkAsmIeiZPaxgqJR9wu5zOBzC8zq4nOr1H2 hIB4CUFxgx26wflPyzZP9ER+7NjJG/hO09YDhwqpQzlKIq63ln5smGrcxZyduYd3 ojKKyEHLTxgOLDIIETPZlh8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16088481052697955410 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 04:55:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 04:55:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'puriflex.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688743356127746715375975503097694995821065067378672196519115567871806185214365812029222902144925388383785315606837177089569266026226272581045218539408425943858591442091268227248461708885395275050017381502079052751229270994003352116428979074962576190491364432259227760565357818306744586355173356309960297273627248158982792868201712666103740701699777899968128896973736902594689521901229804237373651783484344191256848998115484935921110004640295430583081011363019400039455793959836976986816326362969069893093357776060482705346003300047594981173320068216658331175568216335759983295762995200007904871749962015721662819461994067537827861682252680599057107169218616413568577142427798408588253168895063565853820435011842438508779551470187172758064495252767066281299880122163639636283219913606143305904073139785204446264566666849376274785254990550468934240778706572187416459433686593926438121920297761639940372916970406048135891293409738873495058689533374528374849296943768624644075168274551047499156308975500934331925610136138548278162549521518991849277543878503271730487745493487069263904720268707387808132839090046823756024867632313312263612662399176710008752619209295469603227150385482564524537958330045571127927924829463170701184181311007 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6459.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puriflex.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2960d98cc3bf6c450956327c924142af4e9f376d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001890fce2ba80000040300473045022100ac19199072abcaa6dc34518db7c65bfb24d2dba3e194b71de9ac49ba9f1792b80220257f812c3ebc95147bc55e691102a670b9821b429188e0472764b089d0acbfc000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001890fce2c6f0000040300463044022053c6b59e69e335bf25bff5582937d965961b6e0f580794b00132fab0ae2f7cc402202fd3010e21c9d288186a922356e5559b15be3b37d46d5f04492f890f91d7dbdb007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001890fce2ce50000040300473045022100d3e8697a6b723dc9f7016be9271b163c9aea9c978785d84d53448f44eb36180f02201141248a455e34d25b787b1974ede3130ab279ce98d8f5a89ee19f094afbb292 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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