waterkeg.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number b5:56:5b:8e:b8:cc:8e:91 was issued on by GoDaddy.com, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=waterkeg.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b5:56:5b:8e:b8:cc:8e:91
Serial Number (int): 13066732037405970065
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 12:89:37:7d:44:a7:56:cd:15:fc:7d:ab:44:3d:05:63:2d:24:77:8b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): d1:fc:66:b0:34:97:ab:f6:2f:57:db:47:be:8a:47:6e:0a:7d:96:f1
Fingerprint (sha256): c0:95:6e:d0:25:b3:04:82:12:4c:98:11:b2:b1:aa:78:77:a8:b9:fe:1c:11:49:7f:9c:c0:c7:5b:c4:83:f7:20

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6451.crl

Check the revocation status for certificate waterkeg.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waterkeg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

waterkeg.com

Other certificates including the domain name waterkeg.com

(limited to 100 certificates)
ringappraisals.com
teletrue.com
purejoyrhythm.com
www.childlite.com
www.amopia.com
www.royal-crown.com
talkcycling.com
waterkeg.com
www.writerswisdom.com
www.guychaddock.com
802.me
xinyasheng.com
713leaf.com
waterproof-backpack.com
aikendentistry.com
www.estrose.com
stemcellalbuquerque.com
waterkeg.com
www.202leaf.com
hangmate.com
www.polysleeve.com
sportsmedicinesavannah.com
tractorshipping.com
58.org

Certificate

The complete raw certificate details for waterkeg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHfjCCBmagAwIBAgIJALVWW464zI6RMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcwMTAwMDAwNFoX
DTI0MDcwMTAwMDAwNFowFzEVMBMGA1UEAxMMd2F0ZXJrZWcuY29tMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy4XMCJ41sXn0txgglG4X3Qj6zudWXK0x
psQNItL+f7sHxpG7GjtM43S1yiQKBJN9ru6+yGlhgwyA3GfjIMJV+RD/VbDUPGlv
ku775KDMuqeQV4cUmFUB6ojBBI7ow2q+SJlKoOcuf6NVD9Rf8sKgZAJIQitGeDCK
lPmPmetofcJhLpfs1Z0lCDaYnq0DspBXDqJnJc218NrLvw6gqQ3meKxge+mDibcO
yh0/G/XStVsmq8fnKKI6tQ6fmIsxvtcwkB8tEwi+U6E3LjfiOevoDPCEPJelaK6A
TKlB+wvgYWrHHR7MBfTpODLQBhdORtzAtdWYmJCs/3qGvUkuoBwL/WpQYsiVFuHp
XLMbTwOIUgmC6s668kipMtHKqzX0ruI1iYHampqJMtixc0wxsBUDkYJds+jUsiqR
06XLPRWQGXtyCAj8YB3CEQlsP9xKh4cLkUePvtL5QwP5iud9u9zD4wkmtP7U+80i
VcwCl0VmkAdsAeCpRRK8I8uTM2TTM9I7xVDdf8YOPt89mGMVl3EOvRV/5fcG3hCa
pOWtUEwaKbBJwAwihY+7DNj1MWv3DpNqZvCgUdiC45I9GBzOSRweRoErWcEs81mF
1NR+gqb2Fy5S0hmtbY4X3Kf+DlnSz81rQw/ctCR2tC9vSHfIYt/JbBWOXNot03VA
di7sUsy6568CAwEAAaOCAy0wggMpMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2g
K6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNjQ1MS5jcmwwXQYD
VR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2Vy
dGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2Bggr
BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29t
LzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y
ZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPw
tCyAzjAXBgNVHREEEDAOggx3YXRlcmtlZy5jb20wHQYDVR0OBBYEFBKJN31Ep1bN
Ffx9q0Q9BWMtJHeLMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYkOv+t+AAAEAwBHMEUCIHXRVrI7
1HgbsHiDMt8SoErBgd9a+4UVXBnTZlFgMqkjAiEA4ABKInh6KD6/pAJVUmoGZf4/
mxtcJAxY4n7D0h0OrgwAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAYkOv+xUAAAEAwBHMEUCIAuVdt2FlnozDykSkGjOEkCodm9ZZbSyjVuH97nR
S1piAiEAkW7KXfhT209gnvZQn7Joy8xNNg//D22O/IS8ITArQowAdgDatr9rP7W2
Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYkOv+zBAAAEAwBHMEUCIDUewZLn
ujevY8Y8SM+6gYicX53g1SOla/lKBfUoD9ipAiEAwnRnk07LsK/s3km3cI+V3FS6
BbrboXEzq1BFRODXauIwDQYJKoZIhvcNAQELBQADggEBACW+js4ArtYDmXrsANBu
ZEbdZTuu9eubZdiO1Fq/Wbzne0KLCi77hr+2GAyaQS/MeOJX9OyUmN3HCjs8hHte
Ad34lbFYIGzrkMYWvwFotuHNRKCPzCH32+RmZ8Vr6/RdfrPmJD4ytsq3zzfzy4//
oZX8USYSPehC98VV6PdIR2mycqgT8Zr7ps+OTDmcOH+8Qjutc/+gBzpH4i2WA9zz
/IcjllVradrL8HkpWWHYgDzL87gwlolmB78sikSS3JGiA5abm3V7BfTK3QSenSSY
FnM33z76t+awccsJA1zcBAyGHhQxqJ9a8+i9Rt7Jq45e/XMJll2hWhI5yLCy03Vd
/GM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13066732037405970065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 00:00:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 00:00:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waterkeg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830299949573273254613472184136222140682928408459028537892800485821427314499948198069525484493327315919804892814048428276762716386604502579311540710991051843040970197583404400849044627226736517423202584271221868758597761201261648511684323290700969444067622296799508503928977287251992126978037880408724627001542269858549637136178768340415506773549508379108595691342750886734569988525339474212796508881430897650218397114071692583018809129822022775158965516604586121099474998242735155672829145881058775913773401027496847567583134130953220618233590829391812828053110591479447390064020742931379392987265656456791827207555067442002388345360134649721481023802394758356007119015925094410331400568830212519863395473854604825254926052620081281837606083087071163056729081864642877341804524932542140528282622184552607020151883780361668772534001739052766984720873793869780876523119201995375132777498662824882384775468427190193859154578758031697177956151713358429424792050028018957055913601479805212314336199651474293863346861718627699351346478111263370061357916150790087710932416906010033242178623354780114442254319629473659779283387439323727563169571543279966578406708084784060936010655446722134510623379316664767069612434001207167301937354434479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6451.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterkeg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1289377d44a756cd15fc7dab443d05632d24778b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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