profusion.ca
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 73:c4:f0:03:c4:84:40:66 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=profusion.ca
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 73:c4:f0:03:c4:84:40:66Serial Number (int): 8342056308769570918
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 42:7f:0e:20:2f:0c:69:85:bb:0f:11:c9:e4:db:cb:86:c8:03:a5:cb
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 38:31:1d:40:e4:b9:d8:c1:6d:8d:8b:64:a2:65:d7:2b:4a:0e:3e:a8
Fingerprint (sha256): d9:0f:ce:57:b6:2b:21:2c:17:3d:e5:aa:96:d6:73:8b:28:7c:47:4f:a0:1b:b1:7c:87:71:fd:6a:8c:fc:c6:17
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-15151.crl
Check the revocation status for certificate profusion.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for profusion.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
profusion.ca
www.profusion.ca
www.profusion.ca
Other certificates including the domain name profusion.ca
(limited to 100 certificates)
assist.vnovait.com
assist.mgdesigns.co.za
assist.spectranets.com
profusion.ca
assist.vnovait.com
*.profusion.ca
helpdesk.profusion.ca
assist.vnovait.com
assist.concoit.com
profusion.ca
assist.mgdesigns.co.za
assist.vnovait.com
profusion.ca
*.profusion.ca
profusion.ca
profusion.ca
assist.tabletbox.com
assist.tiertek.com
help.fixnyourpc.com
*.profusion.ca
support.teamnexus.net
assist.mgdesigns.co.za
profusion.ca
assist.mgdesigns.co.za
assist.mgdesigns.co.za
assist.spectranets.com
profusion.ca
assist.vnovait.com
*.profusion.ca
helpdesk.profusion.ca
assist.vnovait.com
assist.concoit.com
profusion.ca
assist.mgdesigns.co.za
assist.vnovait.com
profusion.ca
*.profusion.ca
profusion.ca
profusion.ca
assist.tabletbox.com
assist.tiertek.com
help.fixnyourpc.com
*.profusion.ca
support.teamnexus.net
assist.mgdesigns.co.za
profusion.ca
assist.mgdesigns.co.za
Certificate
The complete raw certificate details for profusion.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgIIc8TwA8SEQGYwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjQwMTEwMTQyNjExWhcN MjUwMTEwMTQyNjExWjAXMRUwEwYDVQQDEwxwcm9mdXNpb24uY2EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaOpWXTU4O+25DZOraAOh/SsK6ZSfXVwf Cw/mZ5CmQggGkqyhEGdXd2QJ/IqT0jZ2XQ4fP3GPD+SoCFL1vaYkVYO0A1DeCWZo YXdpu1HF8POLxZiE02cEyYlicac2+9kObQ8BVdctamfJxNo8Hp41XP19cBs4FeAV p87XvLjvlXlBMtHFnB6YHmCSZG9wv4tAO3j1XSreJBTaA7N+cr63C61oeOPMfy0d cpy/I/9ZG1e/OuAXYpObvyhCT9RoKKvr4RBi43Kdn6LkhZ3r0KWU+pfcA2KB4vKb pmFmHHzTsfquOkPGW2Hu6xL3aTp6/ENPzlO/cI2crvk5S9KoiIs1AgMBAAGjggNA MIIDPDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAOBgNVHQ8BAf8EBAMCBaAwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5n b2RhZGR5LmNvbS9nZGlnMnMxLTE1MTUxLmNybDBdBgNVHSAEVjBUMEgGC2CGSAGG /W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRk eS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEBBGowaDAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsGAQUFBzAChjRo dHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIu Y3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMCkGA1UdEQQiMCCC DHByb2Z1c2lvbi5jYYIQd3d3LnByb2Z1c2lvbi5jYTAdBgNVHQ4EFgQUQn8OIC8M aYW7DxHJ5NvLhsgDpcswggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AE51oydc mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjPPEOmwAAAQDAEgwRgIhANfy Cse83yVKyYnIxlLKXwinmu7C9BrxSCkJDN05roCvAiEAjygvPg7LQT+LE9R6NBio aUQ11c2htcGG2E0LaoxFjHkAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kO jC55uAAAAYzzxDuVAAAEAwBHMEUCIH5SnNB7q37JN+Km8d3hkXw7G9B3e8CpzK7i u1SogxwQAiEAu5fI2Gth4/QhNhC8otm9YLvOc1w0rYHbQzqJNGi9cE8AdQDm0jFj QHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAYzzxDybAAAEAwBGMEQCIFGI SNvtmtmwLcbZmzc0CIEqMElTYFZuJP5NyBgeuqHxAiBVKXkwYoVuunuN87IRhL4R PIQ9eLh8fjJT6f4jyVawCzANBgkqhkiG9w0BAQsFAAOCAQEAc9ikXSWWjscXV55N ndaQnvokN24TY+rcyRB6PSamZguzHOXPZHqz6HNmaPmdoX8NMFIUsu1+QDIdAr/A 0oEI/pV89VblfJ6FEzJEiFuxDMUgFW9eH37MnLvvY01/kJR0YGL895jD6Pr7Qbd5 aAFss5ctJdxC65O0LW8i4thaLarQJYB208AnrufirITAi5hbR9sB4jhirn9xQYxR 7DK5iP34HoN2DCsc8y6b/glkDNJ/tZfFFqQ59azQNwbqozKCDISkvpZzY2jRDCDf ebZLoIH0d0CA/KSmDi/u0aZDPSoHpDjeCbbMQUilyFTWuj03h/9B1smmksVGkzgz X0BSZA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2jqVl01ODvtuQ2Tq2gD of0rCumUn11cHwsP5meQpkIIBpKsoRBnV3dkCfyKk9I2dl0OHz9xjw/kqAhS9b2m JFWDtANQ3glmaGF3abtRxfDzi8WYhNNnBMmJYnGnNvvZDm0PAVXXLWpnycTaPB6e NVz9fXAbOBXgFafO17y475V5QTLRxZwemB5gkmRvcL+LQDt49V0q3iQU2gOzfnK+ twutaHjjzH8tHXKcvyP/WRtXvzrgF2KTm78oQk/UaCir6+EQYuNynZ+i5IWd69Cl lPqX3ANigeLym6ZhZhx807H6rjpDxlth7usS92k6evxDT85Tv3CNnK75OUvSqIiL NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8342056308769570918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 14:26:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 14:26:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profusion.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24668205170629052245753695621863286262183302489344390431356855024236362812876715819335863612866693192013420660225041478274829898609985431661159602400263388043610957387147065281492300793206564949891052573297573899899164755070140011822543072851875273387012511892850204838569340871209914189836168278026133905260478348641046341331963634850648278716606583755634929726726428910130257941391584207254822408071513152701397200123702607659875842977646617914234944851896979298618849581836275259439467353590875526638189131600842313346927046687422960706293221314593100908002033859752456224739205622697170107737737688683296657541941 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-15151.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profusion.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profusion.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 427f0e202f0c6985bb0f11c9e4dbcb86c803a5cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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