*.nextplane.net
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 9a:72:f6:bc:4b:77:fc:c0 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
Certificate Subject
CN=*.nextplane.net
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 9a:72:f6:bc:4b:77:fc:c0Serial Number (int): 11129228917766356160
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: aa:d2:bf:92:2f:22:68:1f:70:33:cc:9f:8f:10:be:3c:8a:d5:db:71
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 92:c6:db:f4:79:a3:94:d4:0e:5b:a0:e1:e5:78:86:04:26:e3:fb:4c
Fingerprint (sha256): ce:c0:46:be:c0:1f:05:c0:83:ce:6a:c7:29:5a:20:ea:02:f0:83:4e:04:ce:e9:75:66:69:8b:d4:dc:30:fe:09
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-5197.crl
Check the revocation status for certificate *.nextplane.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nextplane.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nextplane.net
nextplane.net
nextplane.net
Other certificates including the domain name nextplane.net
(limited to 100 certificates)
go.nextplane.net
go.nextplane.net
*.nextplane.net
*.nextplane.net
info.nextplane.net
*.nextplane.net
*.nextplane.net
info.nextplane.net
info.nextplane.net
go.nextplane.net
info.nextplane.net
go.nextplane.net
nextplane.ai
info.nextplane.net
info.nextplane.net
info.nextplane.net
blog.nextplane.net
blog.nextplane.net
nextplane.ai
blog.nextplane.net
go.nextplane.net
*.nextplane.net
*.nextplane.net
go.nextplane.net
go.nextplane.net
*.nextplane.net
blog.nextplane.net
*.nextplane.net
*.nextplane.net
info.nextplane.net
blog.nextplane.net
blog.nextplane.net
info.nextplane.net
go.nextplane.net
go.nextplane.net
*.nextplane.net
*.nextplane.net
info.nextplane.net
*.nextplane.net
*.nextplane.net
info.nextplane.net
info.nextplane.net
go.nextplane.net
info.nextplane.net
go.nextplane.net
nextplane.ai
info.nextplane.net
info.nextplane.net
info.nextplane.net
blog.nextplane.net
blog.nextplane.net
nextplane.ai
blog.nextplane.net
go.nextplane.net
*.nextplane.net
*.nextplane.net
go.nextplane.net
go.nextplane.net
*.nextplane.net
blog.nextplane.net
*.nextplane.net
*.nextplane.net
info.nextplane.net
blog.nextplane.net
blog.nextplane.net
info.nextplane.net
go.nextplane.net
Certificate
The complete raw certificate details for *.nextplane.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIJAJpy9rxLd/zAMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDIxMzE4NDkyOFoX DTI0MDMxNjE4NDkyOFowGjEYMBYGA1UEAwwPKi5uZXh0cGxhbmUubmV0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nqQ6bkprmok/y2qGI7HmZRLl0fG jrJGJgyUpMSN21sIinq7STcho/YXAH4RjvOAH6PY++F5miOaqFtj+di4JmNd1dk1 O43loxwHI1Mea9iuD/ePukpqsPHYr0d9sMIzQwFZBSBS6Z30KmG2mZP5u92heZvD RP4Rlifyz3gHCs4ZrZpM7W8bLfTAozLekAwhPtRbBevNaG/K9cx5DSHj4mZypAx3 ZqyhFzSYKb1sWzR2lqs1nSYJ0eURsSOYjaGsAQxL7RhTEMdzH1Ps3ygM5vqGbsKC QH8QuSsmwcxM/co+mJ0if+gmlw2ClD1aoI18aV4Plr7MCEe+2+bibLIgCwIDAQAB o4IDPzCCAzswDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9j cmwuZ29kYWRkeS5jb20vZ2RpZzJzMS01MTk3LmNybDBdBgNVHSAEVjBUMEgGC2CG SAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29k YWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEBBGowaDAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsGAQUFBzAC hjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2Rp ZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMCkGA1UdEQQi MCCCDyoubmV4dHBsYW5lLm5ldIINbmV4dHBsYW5lLm5ldDAdBgNVHQ4EFgQUqtK/ ki8iaB9wM8yfjxC+PIrV23EwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N 0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhkwcXKAAAAQDAEcwRQIg EhM6WWo8lMqMjhYLvgUHEpkaSTVKQbCGQb2z8V9tidUCIQCVMulSvVfm384cTBKH dDDg8RlEL89T08WVEqlwp31ZHAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABhkwcXZEAAAQDAEYwRAIgLIkk2rrMboL5h9/Nju+egeuARBGHWAKT lCXaxnA9uVoCIA2JLKhIRAZpwlPpgrFhd4bCbK8pES7mWETExW12QUFzAHcA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGGTBxd+AAABAMASDBGAiEA 4Nzg79Ulv90xxMgV8lPevHSMJTN3egDyL7UQWFd8kfoCIQD0sFj/J+6gbqH7/tEZ mZksIC80a/3IKf0Z3mWgZ3rPhTANBgkqhkiG9w0BAQsFAAOCAQEAURNjiR8LXEMz u0TqpO5XMowZdk1HtytwtyDTWeJL5SeEZOnGWolAM8SRh0DsMnTeoi/lH5VOIIB9 j64zFqA98LiN3BYdbbGohdtBgypWuGPhFhDW3uOTyJuY9ipvD24Re+zihL1PoTT3 IPpUNYcbESS3+EQXrIUeu8LpV4OkYlohR69moel856hOrLmloYblqhNV7FjrYI8o oKEXA17V7P558+0KT+Y/FFj2oCIEpatjlyeRe+YNbWd/HvTmaxNZM+wmW42Q9Krt 9HVyIcde6FjgAIK1zRMeFRGgTaKgFYcf1KWchH4RxCrJ1zYaPK4OENoAiSpl73/4 Wfguk9ygiw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nqQ6bkprmok/y2qGI7H mZRLl0fGjrJGJgyUpMSN21sIinq7STcho/YXAH4RjvOAH6PY++F5miOaqFtj+di4 JmNd1dk1O43loxwHI1Mea9iuD/ePukpqsPHYr0d9sMIzQwFZBSBS6Z30KmG2mZP5 u92heZvDRP4Rlifyz3gHCs4ZrZpM7W8bLfTAozLekAwhPtRbBevNaG/K9cx5DSHj 4mZypAx3ZqyhFzSYKb1sWzR2lqs1nSYJ0eURsSOYjaGsAQxL7RhTEMdzH1Ps3ygM 5vqGbsKCQH8QuSsmwcxM/co+mJ0if+gmlw2ClD1aoI18aV4Plr7MCEe+2+bibLIg CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11129228917766356160 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 18:49:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 18:49:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nextplane.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26570483622795803327577660350406944536266004119635145136232810162814928170203583820363643836692028208102357544150807056764611164372423744350560127055922050016306869240449856255962684418463540493011346770807126963526287229425391392690536160147900253819539684002570565834825846035938665675394943078708500016163092805183817778295514127816072992501190333178179358098065927195461310647089290154883194081723542532544646940881216059137067830976520127251234054844227773263750343826676615906884360016796211613010215870176586252504044781262534957551223750297613801890708413382882447162163261054602162341300302066155661712039947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-5197.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextplane.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextplane.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aad2bf922f22681f7033cc9f8f10be3c8ad5db71 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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