precisio.services
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number ad:c7:10:21:e9:e9:34:a8 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=precisio.services
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): ad:c7:10:21:e9:e9:34:a8Serial Number (int): 12521995026771293352
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 27:1b:c3:86:da:fd:d7:01:98:bc:09:f9:83:a5:19:ba:72:eb:5d:af
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 4c:96:07:af:67:18:ed:44:ad:05:0c:84:f1:a7:b6:4a:fa:34:11:df
Fingerprint (sha256): ea:f9:d7:d3:de:0b:99:af:4b:d8:85:7f:fd:14:db:8a:a7:32:ab:dd:c7:68:be:89:0e:81:d1:0e:de:25:d9:9f
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-10243.crl
Check the revocation status for certificate precisio.services
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for precisio.services
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
precisio.services
Other certificates including the domain name precisio.services
(limited to 100 certificates)
helpdesk.tranter.com
support.precisio.services
service-desk.awansoft.biz
support.precisio.services
support.precisio.services
helpdesk.fairwaylawns.com
service-desk.awansoft.biz
krypcservicedesk.krypc.com
servicedesk.damasjewellery.com
support.precisio.services
service-desk.awansoft.biz
krypcservicedesk.krypc.com
itservicedesk.krypc.com
ithelpdesk.ut.com.my
servicedesk.damasjewellery.com
ithelpdesk.ut.com.my
helpdesk.tranter.com
krypcservicedesk.krypc.com
precisio.services
servicedesk.damasjewellery.com
helpdesk.tranter.com
support.precisio.services
service-desk.awansoft.biz
support.precisio.services
support.precisio.services
helpdesk.fairwaylawns.com
service-desk.awansoft.biz
krypcservicedesk.krypc.com
servicedesk.damasjewellery.com
support.precisio.services
service-desk.awansoft.biz
krypcservicedesk.krypc.com
itservicedesk.krypc.com
ithelpdesk.ut.com.my
servicedesk.damasjewellery.com
ithelpdesk.ut.com.my
helpdesk.tranter.com
krypcservicedesk.krypc.com
precisio.services
servicedesk.damasjewellery.com
helpdesk.tranter.com
Certificate
The complete raw certificate details for precisio.services in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIJAK3HECHp6TSoMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMTAxNzE4NDYxMFoX DTI0MTAxNzE4NDYxMFowHDEaMBgGA1UEAxMRcHJlY2lzaW8uc2VydmljZXMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKYWuihqAwGdtJvxPD2x0jIVl wpeKjJmz0oXFicrTHQQtA0qetr5+3BR/lityr2IdbSNGEVlo/BmJ6S9eE37lMtao pgU97YiDiull7scxZ3bpecvd2F5czUhoo5aT5lRH2nT/QU2BliM/2de69DIe9iIc blh6KygErTh70HH5iSFG0kV1U03tvt7zYV/OZ/PvOStwX6ffz+It5T92cBBgCujN vmRzXaRgYkOyPHD01R+6J8c940a0nDO++OqLzq9oz6TRVIv4FJuxNirI9MRRfbZg fw9Th1RBVcep5zyqCdxgZIGG8ffH39RaEWSqYVr8Sq+WLXS7mBkZiupDMMLnAgMB AAGjggM0MIIDMDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDov L2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTEwMjQzLmNybDBdBgNVHSAEVjBUMEgG C2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0ZXMu Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEBBGow aDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsGAQUF BzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv Z2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMBwGA1Ud EQQVMBOCEXByZWNpc2lvLnNlcnZpY2VzMB0GA1UdDgQWBBQnG8OG2v3XAZi8CfmD pRm6cutdrzCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGLPvWx9wAABAMASDBGAiEAlH3e1tacF0oW v8gAk+0x0XMdfBByxYaHQjwkO8aEXk0CIQD/JqpRCQ+sSe3xsA1gfsr5Lyl60x+Z CNVhEke63ektnQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB iz71sqEAAAQDAEcwRQIhAIZ79McERsYZrYbYLjGij1hSEEHYtE0VBhpzEcxNM2IJ AiBrHf1692N2NPGuJTVok2+Ox+M2btg56EamTZ5b1Ew5IAB2ANq2v2s/tbYin5vC u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiz71s1QAAAQDAEcwRQIgJ2u9mtGToZgC 5H4c68QikjLxM3zNV5V7ucwu3g5oybsCIQDWKUcY5qKzUh46InyHsRz7wvx7HRmx EpjP3xGM0xsgdjANBgkqhkiG9w0BAQsFAAOCAQEAcpW+gMw4fint2d2nrMxHAoYK 1GBVKk6iyWlsZmeKwLjYLniHJ8ePgK32xrFH4rpncthfc2BK0JxjEq1ewol4KIfo W07ho/pNZC80THFrzAekFelB+4ldpbf0jHevZc90/Rg4icY2s12HbEt2j1jtv5X3 h+2bKM6TP1scJhQADmvLlX6/77h5/8IpwujgRi8Ajp/ifywMKnOTUfU+MPN7/C54 ffT4TdMvQAcaPIXWMD/5HnQt/Il+aCYnIFR8VWJISOYWMHUzBtk2wWL+wfzOAUEU bC+wxBBz5+IADfjSD+sCY3uhs4T3kyz/HOhNaMNEaQNloRB53rx6j4c1zVqYnQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2imFrooagMBnbSb8Tw9s dIyFZcKXioyZs9KFxYnK0x0ELQNKnra+ftwUf5Yrcq9iHW0jRhFZaPwZiekvXhN+ 5TLWqKYFPe2Ig4rpZe7HMWd26XnL3dheXM1IaKOWk+ZUR9p0/0FNgZYjP9nXuvQy HvYiHG5YeisoBK04e9Bx+YkhRtJFdVNN7b7e82Ffzmfz7zkrcF+n38/iLeU/dnAQ YArozb5kc12kYGJDsjxw9NUfuifHPeNGtJwzvvjqi86vaM+k0VSL+BSbsTYqyPTE UX22YH8PU4dUQVXHqec8qgncYGSBhvH3x9/UWhFkqmFa/Eqvli10u5gZGYrqQzDC 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12521995026771293352 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 18:46:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-17 18:46:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'precisio.services' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27540425839841123712427241786161867262323081906141122065162299849376461010596809808273384780352005225225083198553951999662249848805280437781762605069513916272182915942660523272211438779150470542750088835541383800058488711488960657877685437584833756303839421095855467705029210114611838786918125960273404613786192421031257229660803587424920269106255962094419313716977333411618484332628047270213278496785899835201428743459295226008029442994758804596213948973430600421238821660453107029400751244278736064722520030781908780975017738147409875956669931803725713184120632159015144545403111110367563947363319021295270167102183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-10243.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisio.services' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 271bc386dafdd70198bc09f983a519ba72eb5daf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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