bktco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 19:fa:70:e1:b0:a4:4b:5a was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bktco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 19:fa:70:e1:b0:a4:4b:5aSerial Number (int): 1871932709759372122
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: c2:96:47:86:3b:a9:d4:8f:78:88:dd:ae:4b:b0:69:c8:cf:0c:c4:e5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 66:cc:fd:bd:8d:26:83:dd:b4:c6:81:92:86:d3:66:76:00:1b:e2:e4
Fingerprint (sha256): ba:1c:28:e2:a0:d9:c7:9b:83:5c:ad:b4:50:fb:be:3e:4a:0b:e7:85:4a:95:0e:86:03:be:01:50:73:51:4b:e7
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6707.crl
Check the revocation status for certificate bktco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bktco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bktco.com
Other certificates including the domain name bktco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for bktco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdjCCBl6gAwIBAgIIGfpw4bCkS1owDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzA3MDcwNjM2WhcN MjQwNzA3MDcwNjM2WjAUMRIwEAYDVQQDEwlia3Rjby5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDHst+lyG5yF5i1pm84H80psp9sv0/uDXAoZ6gP 5T24ImHB0fw2ZMKGZaWbZGtNA8tWt8bOReNqmArZDvziafYqvjHGvCQzig2f+mDb bqU3/Tswj3Zd8WmUpslT8/IKWKPUYiWsvxUsJxorx7VafmaruDhrUVxLIGzp1jrQ mfKsvzlD+PCoUmKbNjPhYXLcvN39hDinFE16kNtHpIOX3nXQ1dmvk4E3RQ/mzOGz T1H1EgI5dr0xIU8XI6UYQk14iHXPIC0+GEH++6Tzg8vy5faB2r7jwMotDrrDapX4 eyYVX4B4wvweqYrHKjgFjH4ZTFg4j+st0JXiNUZ1EH8LBtzxadbFIRAg4uGsrc+O vzjQm2S7Puvqy1VMc0OdBfuFt0bOSPvVCjAL7dvutzKod1WYEE+H05N3Xn4fynmQ sge13U9c1c+7wxAuZ23hgSSMpx7cWTILKd45ZitU39AdLqj50XlIm28FVPynC8pO pD5USWUgTc7mHoX7+p29rCkLzeh4mJu5aTkoV8pdcWR9BjI3AxubHX/o/SabDnGe Oud1DapXIZQ0uCoU36GaaxLGWt/k8rZMk8+Cm11uV9Imoohx3k5/0c/8Prnd2GFA rANG4nWKRhzhhWNSnMiQ3+6PEKjzyUKTg3mzSOy8joPuxvzrWPsX26oYxHlM8P27 hCeM4QIDAQABo4IDKTCCAyUwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmG J2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NzA3LmNybDBdBgNVHSAE VjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZp Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAG CCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z aXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDO MBQGA1UdEQQNMAuCCWJrdGNvLmNvbTAdBgNVHQ4EFgQUwpZHhjup1I94iN2uS7Bp yM8MxOUwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABiS8sk6cAAAQDAEcwRQIgBgC4PJwtyBvPZdxt DMsT6X+LAg7MIyyYP70ULSn+3K0CIQCRt8QqgRj6qrFE4Q7nr7SGlBGX2TC1Yhpw P/IyyCapUQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiS8s lGkAAAQDAEcwRQIhAOR+Xr8DlnDNBgqLEbsxoZHX5riD4xmp4i9MIiAUf7aJAiAx dD9kFTBaxjE9YTs7g7oFsMKyni0oe9renLYgB+xRugB1ANq2v2s/tbYin5vCu1xr 6HCRcWy7UYSFNL2kPTBI1/urAAABiS8slPsAAAQDAEYwRAIgHh4qE4vCR1RLeKz4 pjZ410vrJcgxlIu+IgbfcrxawbkCIEjOtlzDSR4VTkfecUbLgo+OUc/44Km8l6Pp /YVMp+w7MA0GCSqGSIb3DQEBCwUAA4IBAQCvbcPCXpDhCwEzx7soFA/OsnSvzeVx lTSOP1OFXROuM//v42SGef5JISusyJkAckAHDrCm7HV9wAG/vD9zVnJDRrrmc6o1 0c9dtRQva5vuhMPJSSXatAUQqpER4T+OcvSmWE03ihrgA5JNeMFfegJ5XT0skBAX HBOy03eVNan19BtWpazZ0dnZasR1mZ/Xw412I+hB5jzA7f+qNEFZ0tY0NiTDXMXq rpBXqjyl0nZL4WajzcDdk4ZXMTkm4J5+eKkws/n7782n68tZCjEwEYhkzjBY7Pj1 aKhyK4HUvHtTPMCURs//KLoWYvcBLNuk5AkCXfMQQVYr8ReOPgrrU2sx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx7LfpchucheYtaZvOB/N KbKfbL9P7g1wKGeoD+U9uCJhwdH8NmTChmWlm2RrTQPLVrfGzkXjapgK2Q784mn2 Kr4xxrwkM4oNn/pg226lN/07MI92XfFplKbJU/PyClij1GIlrL8VLCcaK8e1Wn5m q7g4a1FcSyBs6dY60JnyrL85Q/jwqFJimzYz4WFy3Lzd/YQ4pxRNepDbR6SDl951 0NXZr5OBN0UP5szhs09R9RICOXa9MSFPFyOlGEJNeIh1zyAtPhhB/vuk84PL8uX2 gdq+48DKLQ66w2qV+HsmFV+AeML8HqmKxyo4BYx+GUxYOI/rLdCV4jVGdRB/Cwbc 8WnWxSEQIOLhrK3Pjr840Jtkuz7r6stVTHNDnQX7hbdGzkj71QowC+3b7rcyqHdV mBBPh9OTd15+H8p5kLIHtd1PXNXPu8MQLmdt4YEkjKce3FkyCyneOWYrVN/QHS6o +dF5SJtvBVT8pwvKTqQ+VEllIE3O5h6F+/qdvawpC83oeJibuWk5KFfKXXFkfQYy NwMbmx1/6P0mmw5xnjrndQ2qVyGUNLgqFN+hmmsSxlrf5PK2TJPPgptdblfSJqKI cd5Of9HP/D653dhhQKwDRuJ1ikYc4YVjUpzIkN/ujxCo88lCk4N5s0jsvI6D7sb8 61j7F9uqGMR5TPD9u4QnjOECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1871932709759372122 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 07:06:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 07:06:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bktco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814699719210287230095017593362382410330248028650545619511018798189516864860845391773691950367453600187769954687340590212620358499164609696845760168407609798909050328333959561144620169112686053639510605731658636450365588945945354301593031713254019194533285942491539359384731132936733187300054574058785322250294839664243280589184103309104076374119388654137913503192913438539529266082322204350148518001449393667230696055938277913431123660852655076966863267666708577011148373019188068299417643200018648632180111085921070076981578765689951048709171410714683895134873421943127537400852339825921184586136731007823674448155389206447174618223006626931569304422523838869739455276949123767534025875398293743496788765968916197130119180787518903886252225170164692996952231756568951789354160474439427968340085674380664233186997679160901785349267817018931854294557387780889923646570173229155376822453278657420881055526961388776546392669152553944235817120194661767025669591146761869652361243954781153499469379156637711561894431152938553755489513949728382056693930775556240424342457657166610234955743532550142684879176203836068396859626048731545556934377546464236763893344592782189004062379155138792500804183117950630442005256861819972074644743621857 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6707.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bktco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c29647863ba9d48f7888ddae4bb069c8cf0cc4e5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00af6dc3c25e90e10b0133c7bb28140fceb274afcde57195348e3f53855d13ae33ffefe3648679fe49212bacc899007240070eb0a6ec757dc001bfbc3f7356724346bae673aa35d1cf5db5142f6b9bee84c3c94925dab40510aa9111e13f8e72f4a6584d378a1ae003924d78c15f7a02795d3d2c9010171c13b2d3779535a9f5f41b56a5acd9d1d9d96ac475999fd7c38d7623e841e63cc0edffaa344159d2d6343624c35cc5eaae9057aa3ca5d2764be166a3cdc0dd938657313926e09e7e78a930b3f9fbefcda7ebcb590a3130118864ce3058ecf8f568a8722b81d4bc7b533cc09446cfff28ba1662f7012cdba4e409025df31041562bf1178e3e0aeb536b31