aigmedia.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 4f:29:f2:da:8f:c6:29:7d was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aigmedia.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 4f:29:f2:da:8f:c6:29:7dSerial Number (int): 5704357423570364797
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 3f:aa:73:c1:b4:3f:5c:6d:c5:f9:b3:0e:9b:03:c1:c7:45:78:54:f5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 67:c4:9f:d5:61:59:6f:8e:e0:b3:7d:ae:48:8e:89:04:8c:cb:3c:c4
Fingerprint (sha256): c3:1a:a1:81:74:7d:8a:86:85:f4:ec:1f:26:24:4b:4d:f2:ae:67:2d:47:b5:c7:19:a3:ef:d0:f3:4a:96:2d:74
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6830.crl
Check the revocation status for certificate aigmedia.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aigmedia.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aigmedia.com
Other certificates including the domain name aigmedia.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for aigmedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgIITyny2o/GKX0wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzEzMTUwNjMxWhcN MjQwNzEzMTUwNjMxWjAXMRUwEwYDVQQDEwxhaWdtZWRpYS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDE7Cy9OdQXpgClc19tySTjLV9NrRmDghI9 98b7Dk2rMM4gpMbCbLjFvrqJDJaZy3uuWK3+BHEpv+R4bE3rONoICrcBXvRYXbs2 uZD72dJ//6itXkJM9w+zYgCUSWUIGajnR+gsU9uUZM+xMcuJiv+sxe+6VEk6BvGI iZnS9809STnC3TCuNbI1BeLowY7g01E3qYYeIS+Nb9N9w5kEei0RVYhyI0PafMYX AP7j3aPFkZPX34De7A09/L2lFkU5g01bzvOMTTiyl5rPw2GPeTqI2llNSjfoXXt1 x4LTrhegat57WJJWWxjGyB7Qz1V5B2o2/t03xaFQe/AJtfXEFrfgtrYSEwRzC8PQ BY0GXJVryRAJ4DI94YU6E03B8AjVGB0jzZ3cpCOFFAWaeLP1VEGxtJCN14d97n+X TjuOxE0q0UGd0qTwDOVl9eI1P6rviYHm1d2d1ArROPC1I8c8et+OGmHirWbzyK79 ldduiJCwBd2wJCeTKi8lySnoa5Yo0+V8QqBl7hKw5RVJUCXyc44NhKpbR7A0mInW 5K+m0D3VBOgrNDbyP6yBvsO8FRAWU+9CcJ1S8wtjdVbT0AWGhsNyA0a7/2U0bWmG dS2bS1YXGe9l9pu/41jMFrO7lMP5D2gqymCH8stW8ZJpxp0PhFQ3/vnNNTmEiV2T +8g/0QD0KwIDAQABo4IDLDCCAygwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAr oCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02ODMwLmNybDBdBgNV HSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0 aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsG AQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20v MEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl cG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0 LIDOMBcGA1UdEQQQMA6CDGFpZ21lZGlhLmNvbTAdBgNVHQ4EFgQUP6pzwbQ/XG3F +bMOmwPBx0V4VPUwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiU/KGusAAAQDAEYwRAIgUqnLbYqO iWti97+vx0WZxkNhU0sTopBGE1kjPqx92mACIBCivSydPyKDiRPIni0wpMhFbVaC Li61gmNmZNLgxTW8AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGJT8ocBgAABAMARzBFAiEAjhs/Xy76Lkl7jds329FvnP2pShZ09Qo8jsvoQAVq XlMCIElnWaawVZTotO4Wzy56PT4+eID69ctOOMs5MZfzz6VKAHYA2ra/az+1tiKf m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJT8occAAABAMARzBFAiEA648NaIw1 9yp37IK9z04g1MhKQVvMYeMkceojfpQx9qcCICOMK8xKgmOIky27DeDsnhZvbKlr 3waWAuKD6naNIOs8MA0GCSqGSIb3DQEBCwUAA4IBAQBmcENBTqRS770LsW0u5G7t n/taag/DRs2EKLwMXbFhsn8Ej30b7yCwcSzWEek1yx+NsXK/ZYBdjdyqd/X2PEYZ 33iCMyiUKESU4qvNEjCwOk3Q1TxFO0/stnq/sjX0TxmDULr0TpMOjPUA/iLDujUc slw4SvHtVZDmE/SsoVM9zI0BNfB7+HA1jk8hxzc9VcrRmDqoOkgVqzu2sCX63Ny4 kakGIvll98IiHXHDD2Ey0LWZUDP2SkU5bMRuxv7aIMuU/zFuk1Zc0oe21ci1Y5Fs 4ULyIx09fI2Xd4CqKpjXseHuODGwLlQym7QgtagA5J05UsAkqVQFdon4WgHTAI8K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxOwsvTnUF6YApXNfbckk 4y1fTa0Zg4ISPffG+w5NqzDOIKTGwmy4xb66iQyWmct7rlit/gRxKb/keGxN6zja CAq3AV70WF27NrmQ+9nSf/+orV5CTPcPs2IAlEllCBmo50foLFPblGTPsTHLiYr/ rMXvulRJOgbxiImZ0vfNPUk5wt0wrjWyNQXi6MGO4NNRN6mGHiEvjW/TfcOZBHot EVWIciND2nzGFwD+492jxZGT19+A3uwNPfy9pRZFOYNNW87zjE04speaz8Nhj3k6 iNpZTUo36F17dceC064XoGree1iSVlsYxsge0M9VeQdqNv7dN8WhUHvwCbX1xBa3 4La2EhMEcwvD0AWNBlyVa8kQCeAyPeGFOhNNwfAI1RgdI82d3KQjhRQFmniz9VRB sbSQjdeHfe5/l047jsRNKtFBndKk8AzlZfXiNT+q74mB5tXdndQK0TjwtSPHPHrf jhph4q1m88iu/ZXXboiQsAXdsCQnkyovJckp6GuWKNPlfEKgZe4SsOUVSVAl8nOO DYSqW0ewNJiJ1uSvptA91QToKzQ28j+sgb7DvBUQFlPvQnCdUvMLY3VW09AFhobD cgNGu/9lNG1phnUtm0tWFxnvZfabv+NYzBazu5TD+Q9oKspgh/LLVvGSacadD4RU N/75zTU5hIldk/vIP9EA9CsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5704357423570364797 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 15:06:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 15:06:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aigmedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803373944239248766431983148749467375635259627750105063459426553185619269991014789022212837848967789336345757774325445499716883863779103450908443086677349874465821008019877096236152746238737566512479479980678091048635271201353011060909712877364573591786836578473674892759899094807794828429839940292541959944598852512735596103667320545218889372019378283053430471323258969706878320044863595546724215579711013563121402214683261600629991252653204539548956681363208593280761459796740666842375784413280422329890649655416812452821214695659426705130529193846865047827170110360214821641320658852388065594639009413444007305578320372678187253249293370159038610976864877842310746133641960735256771297789667777219297730271211212334359015577707580259200960544728966945039828902633252184537008161216140088341078373219089914959522887817088289479165108826699906662497476645202576388201237968251940489399426593674179752493696885030916654155285180463867348087395603795292338236660991664558949237059854049900992109950621513731992551334899409834224344967136609695743416131637756599294247656731013682702920210692027435930474802148348742287848757826326007031681123159118250277175998672386987913986725586268065325065599236524084393437520226339844754130400299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6830.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigmedia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3faa73c1b43f5c6dc5f9b30e9b03c1c7457854f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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