www.cpaiii.com

Issued by Network Solutions DV Server CA 2

About this certificate

This digital certificate with serial number 37:d8:f4:15:a0:f1:53:0f:55:dc:01:90:c6:5e:3f:8c was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cpaiii.com,OU=Domain Control Validated+OU=nsProtect Secure Xpress

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
State / Province: VA
Locality: Herndon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:d8:f4:15:a0:f1:53:0f:55:dc:01:90:c6:5e:3f:8c
Serial Number (int): 74234026511157944517854905738947608460
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e0:b1:c8:ff:c3:00:fa:a1:2b:58:28:6c:7f:6b:42:b1:11:df:b4:e0
AuthorityKeyId: 51:ce:df:54:1d:b7:2c:57:ab:68:61:48:02:1a:d3:b2:85:ec:40:aa

Fingerprint (sha1): 15:d8:f1:92:d1:91:fe:65:c1:87:bd:4d:60:22:e2:0a:ce:12:d9:ef
Fingerprint (sha256): aa:55:3b:2c:7e:20:01:53:a4:a0:c6:8c:d6:6f:b3:77:fb:78:d2:56:77:62:94:55:69:7b:9b:7e:7c:f9:f4:ce

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl

Check the revocation status for certificate www.cpaiii.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cpaiii.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cpaiii.com
cpaiii.com

Other certificates including the domain name cpaiii.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cpaiii.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzzCCBbegAwIBAgIQN9j0FaDxUw9V3AGQxl4/jDANBgkqhkiG9w0BAQsFADB6
MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVkExEDAOBgNVBAcTB0hlcm5kb24xITAf
BgNVBAoTGE5ldHdvcmsgU29sdXRpb25zIEwuTC5DLjEpMCcGA1UEAxMgTmV0d29y
ayBTb2x1dGlvbnMgRFYgU2VydmVyIENBIDIwHhcNMTgwODA3MDAwMDAwWhcNMjAw
ODA3MjM1OTU5WjBeMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQx
IDAeBgNVBAsTF25zUHJvdGVjdCBTZWN1cmUgWHByZXNzMRcwFQYDVQQDEw53d3cu
Y3BhaWlpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSJ5GZ7
I50lAsmXZ61kzXcge1ijJ29lePZvw17up0cDWf6mz9xPbb17JLgyMjw8ncgL5IcM
PntRTqhtOEkYOv8kdIxuBBn+MoplAuboC3Y+dWIh/hA6LdPKwiPT8NINqGLaKUIz
NCMGZVrhTVU1JnWWr4ASrNF3VJeROryIDeuKQfs1IijbAhE/AyqpER2ggj+pGXDa
tKq/3bw6SgxO7/6MPDSa5Q+H3JzwEi/RDSq+CvZFz8rORlLc2YfO7fgWPUGBnxeR
YhyEbGFa1KeFTdq7P9kvW/G9lRce/weqEoY3D3YmpfngVhWDZ4kYXW77Zw7C1Jcb
9dfTPFrre7x1EzMCAwEAAaOCA2swggNnMB8GA1UdIwQYMBaAFFHO31QdtyxXq2hh
SAIa07KF7ECqMB0GA1UdDgQWBBTgscj/wwD6oStYKGx/a0KxEd+04DAOBgNVHQ8B
Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwdQYDVR0gBG4wbDBgBgwrBgEEAYYOAQIBCQEwUDBOBggrBgEFBQcCARZC
aHR0cDovL3d3dy5uZXR3b3Jrc29sdXRpb25zLmNvbS9sZWdhbC9TU0wtbGVnYWwt
cmVwb3NpdG9yeS1jcHMuanNwMAgGBmeBDAECATBJBgNVHR8EQjBAMD6gPKA6hjho
dHRwOi8vY3JsLm5ldHNvbHNzbC5jb20vTmV0d29ya1NvbHV0aW9uc0RWU2VydmVy
Q0EyLmNybDB7BggrBgEFBQcBAQRvMG0wRAYIKwYBBQUHMAKGOGh0dHA6Ly9jcnQu
bmV0c29sc3NsLmNvbS9OZXR3b3JrU29sdXRpb25zRFZTZXJ2ZXJDQTIuY3J0MCUG
CCsGAQUFBzABhhlodHRwOi8vb2NzcC5uZXRzb2xzc2wuY29tMCUGA1UdEQQeMByC
Dnd3dy5jcGFpaWkuY29tggpjcGFpaWkuY29tMIIBgAYKKwYBBAHWeQIEAgSCAXAE
ggFsAWoAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWUVgmCt
AAAEAwBIMEYCIQCXd8Z616Sg7FKKWgH6Vnv7GteIU9ZHkEWBSFgF8vqZlQIhAObQ
vP9yKReI57VP+TG5FjAOuWZbnZzLTTLM4KV6skNZAHcAXqdz+d9WwOe1Nkh90Eng
MnqRmgyEoRIShBh1loFxRVgAAAFlFYJg8wAABAMASDBGAiEAzJ5WGj2iroR5JcNu
dY9YJn7xnBpM3hSIyTPXUJgGETcCIQDT/614L7mUOzidnGv8HYFG289pm6Hr0LDs
9I73kyIRYQB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZRWC
YNIAAAQDAEcwRQIgDVMbl4y9Y2vk8kmH4/jmEh5mxhETwkjYT4kBrgj3HKcCIQCj
Go1W7id7MCy0Wd/+GtOhdWJZIEhXZGK2sHqMzlFlkTANBgkqhkiG9w0BAQsFAAOC
AQEAfmrEwUr2sE2HRdQ/JQdNh2st2iXxMbE1tqa+uAt0yRwnFGkptxeMeQKdzxTG
yBd1T/kBFkJ9l+fQ+XZ5RhQkVoVUpBNJ7PdAq91tbjJfbKIESTH7BtUkkAC3YpE3
79xwcngE5Rh5k+wNOxxGfeJw26IV1CP9UekM210NzY/cqzDCL4uBCeET5oByPJGD
nz27hX2+CXgJ/78B+ou96tsGu7vhJ+dT53z84DKkXOZQRaJunu829mnfh8MR/hqW
ZGqmG0eV9aX4QoKJ+h8i/fY0/i2XZ9filVmGInxQtTF6R3HYzaj0Yjiw9zcFISm7
LLnPTqzsc0Y8cf3aUay8U7e4Qg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5InkZnsjnSUCyZdnrWTN
dyB7WKMnb2V49m/DXu6nRwNZ/qbP3E9tvXskuDIyPDydyAvkhww+e1FOqG04SRg6
/yR0jG4EGf4yimUC5ugLdj51YiH+EDot08rCI9Pw0g2oYtopQjM0IwZlWuFNVTUm
dZavgBKs0XdUl5E6vIgN64pB+zUiKNsCET8DKqkRHaCCP6kZcNq0qr/dvDpKDE7v
/ow8NJrlD4fcnPASL9ENKr4K9kXPys5GUtzZh87t+BY9QYGfF5FiHIRsYVrUp4VN
2rs/2S9b8b2VFx7/B6oShjcPdial+eBWFYNniRhdbvtnDsLUlxv119M8Wut7vHUT
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74234026511157944517854905738947608460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsProtect Secure Xpress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cpaiii.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28850330704816487455782727598209688209341241860589925939066705581809595839905574210681843495476088391334217497386134792852611036781797769107193553825349336394640591647061832736516569433962623873526260904381434480459806871495207377447397526280211410853984826827920491055286148253221751637631989702773146497315965329696548455095842655626645221485949713794412595849162952525999545678815687458051875609414616387105472353376745486978821835098990659709329624190557068980318616181017955965689630888820520407975470365941457656543734268759643795086762725097756567468702541165601893237489276731015156451814294697372086898594611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51cedf541db72c57ab686148021ad3b285ec40aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0b1c8ffc300faa12b58286c7f6b42b111dfb4e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpaiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpaiii.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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