flexless.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number c9:c1:6b:57:70:89:0a:f7 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=flexless.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): c9:c1:6b:57:70:89:0a:f7Serial Number (int): 14538019095423027959
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 03:b1:88:5d:10:69:63:02:a7:b6:c3:f3:f3:1d:60:fc:2a:85:af:f3
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): f2:62:44:9a:8c:bf:8a:62:03:9e:e1:61:75:64:8d:26:41:d5:2f:a3
Fingerprint (sha256): ca:f7:bf:5e:9e:08:0e:ef:29:4a:46:b2:93:08:ff:47:90:50:29:bb:68:d1:b2:ea:1b:5b:4b:43:16:75:c8:d9
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7195.crl
Check the revocation status for certificate flexless.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flexless.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flexless.com
Other certificates including the domain name flexless.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for flexless.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfjCCBmagAwIBAgIJAMnBa1dwiQr3MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyMzE1MDczN1oX DTI0MDcyMzE1MDczNlowFzEVMBMGA1UEAxMMZmxleGxlc3MuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw97j4GK6rnrfJFjyy3YATxEiVXxxP7TU wWxOY2fOCkHZinrtPOjqTDYgleBqqvHpSG36hLCl9Sq3max1Zkw7jAXKfQaIgmj9 2DcTP2TPm/5IOeZb1+EQLpgp8mv4DXCYJCSC2cAPW8KOiMEFwVd//Q+jqyjBTPDl z+9I5SX0sraLZCX+5gFsIz3muAzzRLzglKq6otPKVDVyQMo/8e80mh9wQq+6DPAz 6sc6KvF9t6Wc4I2AL/eG750IylTsZ5viFdBPr48M6nIaqx6wCVQE/QrolRH46Y8l c8XwJvf/R5l5yivlvDiP8Rg8TA/ENbF6M7ZU6C83rDqubjN63G8ABlVKc66iVSZZ 37vDC8SLWZWx+obYDiCZGwmtU9pdEmd1j9x+dEez7D482sbl4GF6u02Os+MlNa27 7VERQsGNY0hyjaUIjlvsVlBNV17Drs7nwUYDAg+JupGHaVFU4lIVL2UHBYFTXm3J gAKFQ0jYv3QWJagpOUJ7dmmp9F0nXitx9oRd81jDcxNiCG0yiP+Mx//FjiafgDWa JGa9LiJFVLjfzuJ8GDF5fdsBUTvxi3qEpUi0jhQNW48M8wWW2DgFKY9Z/RALifrm 1ewPZIulHUrVMe3V29Qupkqhuo3MzUklyBPEkgIBJCfn2b6NV48JxuE3AHdIU92z 3Wkn6TRwup8CAwEAAaOCAy0wggMpMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2g K6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzE5NS5jcmwwXQYD VR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2Vy dGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2Bggr BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29t LzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y ZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPw tCyAzjAXBgNVHREEEDAOggxmbGV4bGVzcy5jb20wHQYDVR0OBBYEFAOxiF0QaWMC p7bD8/MdYPwqha/zMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYmDSrGrAAAEAwBHMEUCICku8T7c igEQfG7bzFpHLxy+Q59l8FnUxffwa0bE2wbNAiEAz4RK47FglmqsRiNlGi98yJrU u8JxiioMC50HtMgdZD0AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYmDSrKFAAAEAwBHMEUCIQCbepRw9n8TB7vDxcvZKsv6UrlzcmCgRbhCCTZM 639KgQIgVEwf+t53IJqmLIhkOYv5AekoUMcmeq5ythHvFlrA0Y4AdgDatr9rP7W2 Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYmDSrLxAAAEAwBHMEUCIQDi4lmo XwJvnFb3XxE1JTCaG/ZwXxKwrfSaWDztmPN24QIgc20MaOvx9FNPA76nExdY7/+A PhKbEekizfPDWEN1EwAwDQYJKoZIhvcNAQELBQADggEBAA2LetztuSIVUOC1TGUv b/TrXe1gZ5CzS6R99ITMXvn5Yjj11xXEyw6U/XaYATt2G4AbvbPzmTFbgcj3CdYe dUej7wh4KI12m4bZJYVEOvZg8k30t4o1sCzVR1GzYvxoInlilrCGjms+AFhBzT6o CwknzEQEplvGTRxEHq5PlBRK40uTvua7LMMp2jpdMb2RVJ7P/5O85A9xxuxALbFM Me5MbTpVJMWUB5lHI3FOisvheQ+kobUMXlpne8QQ4cUh6aawEW2t43ryeCxNO/p0 bm6IQUH6V5e3732PnPx0xYzdNTqZQINAfXrZcv8yFoBAP73NsZRJz0TG3kq7JWk6 0kY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw97j4GK6rnrfJFjyy3YA TxEiVXxxP7TUwWxOY2fOCkHZinrtPOjqTDYgleBqqvHpSG36hLCl9Sq3max1Zkw7 jAXKfQaIgmj92DcTP2TPm/5IOeZb1+EQLpgp8mv4DXCYJCSC2cAPW8KOiMEFwVd/ /Q+jqyjBTPDlz+9I5SX0sraLZCX+5gFsIz3muAzzRLzglKq6otPKVDVyQMo/8e80 mh9wQq+6DPAz6sc6KvF9t6Wc4I2AL/eG750IylTsZ5viFdBPr48M6nIaqx6wCVQE /QrolRH46Y8lc8XwJvf/R5l5yivlvDiP8Rg8TA/ENbF6M7ZU6C83rDqubjN63G8A BlVKc66iVSZZ37vDC8SLWZWx+obYDiCZGwmtU9pdEmd1j9x+dEez7D482sbl4GF6 u02Os+MlNa277VERQsGNY0hyjaUIjlvsVlBNV17Drs7nwUYDAg+JupGHaVFU4lIV L2UHBYFTXm3JgAKFQ0jYv3QWJagpOUJ7dmmp9F0nXitx9oRd81jDcxNiCG0yiP+M x//FjiafgDWaJGa9LiJFVLjfzuJ8GDF5fdsBUTvxi3qEpUi0jhQNW48M8wWW2DgF KY9Z/RALifrm1ewPZIulHUrVMe3V29Qupkqhuo3MzUklyBPEkgIBJCfn2b6NV48J xuE3AHdIU92z3Wkn6TRwup8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14538019095423027959 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 15:07:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 15:07:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexless.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799082595014285730105908431950980275043492444690973092687400210483677140345640112541277933711492750611779524512128305778119843233596913803001496948022801149779231142376844723695241615749831782755724040126761093260716246356411983113569348640501199421805510352646632601282351818545009687679108637722112877978908188036938455906617574652916005553150975196909641507776184000033604117555355564056220763230805620847641406549980662168595659545392128176999225741713745691977043233926271732102399544027110884763755416624829052310215411499503797946076096875315298450503166560869226224297007326243441887617480547605214752330512265438108720800703079721659879490453385551151574454872757337193915073549019951618785681082872427190631488606582316511485421674395184667808503359825549996637411184558985575186315244755214188888107774151431441039345728589817112119332980578025204856662134948900815468498939347586079956023836852806145146679205559503424928857521579897953432788002841143479654945313959025873205086463225983322959896644852255476360783094183902413093696167897708974530914091167012906426002614837338088133652046258427541151505782209808350641408188745000799538375102054518595859095085080516981899635888036107109279876265619965183769756264610463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7195.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexless.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03b1885d10696302a7b6c3f3f31d60fc2a85aff3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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