www.tfifx.com

Issued by Go Daddy Secure Certification Authority

About this certificate


This digital certificate with serial number 04:35:ae:49:c9:43:20 was issued on by GoDaddy.com, Inc. .

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

www.tfifx.com

Organization unit: Domain Control Validated

GoDaddy.com, Inc.

Company registration number: 07969287
Organization: GoDaddy.com, Inc.
Organization unit: http://certificates.godaddy.com/repository

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 04:35:ae:49:c9:43:20
Serial Number (int): 1184922585350944
Serial Number lenght: 51 bits, 7 octets

SubjectKeyId: 8d:63:c2:29:ec:ee:44:ac:27:fa:41:a0:46:e1:00:63:0a:4c:21:4e
AuthorityKeyId: fd:ac:61:32:93:6c:45:d6:e2:ee:85:5f:9a:ba:e7:76:99:68:cc:e7

Fingerprint (sha1): 32:95:61:74:db:42:c4:ea:90:36:cb:ef:90:f5:63:b8:ff:14:ed:2c
Fingerprint (sha256): d5:c0:47:ea:27:5f:c6:a2:55:3d:40:71:bc:7f:40:61:07:11:d6:33:ed:27:1c:e1:54:51:fb:97:7b:7c:98:e6

Issuing Certificate URL: http://certificates.godaddy.com/repository/gd_intermediate.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gds1-101.crl

Check the revocation status for the current certificate on www.tfifx.com
6
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tfifx.com
tfifx.com
www.tfihedge.com
secure.tfifx.com
www.tfipay.com
tfimarkets.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIHBDWuSclDIDANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMTMwMQYDVQQLEypodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkxMDAuBgNVBAMTJ0dvIERhZGR5 IFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTERMA8GA1UEBRMIMDc5Njky ODcwHhcNMTMxMDE3MTUwMzU1WhcNMTgwMzI2MTEwMjEwWjA7MSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFjAUBgNVBAMTDXd3dy50ZmlmeC5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCvOULzEtDe5PIeg6XT8FFu l9S9ixqsjR0VvZtjWfBfPdAOFxpGk9AsYpMsnf/yI8LQAHu7Q7utSxVPOjaHzbG6 Ky7JE+A3S0d56iW04y7ntQOKzy9e+tn9Qj3QvM01815kn0QzxaM4mOUIR258Ki6K 5MfLhQsEPdzE7YtyUay3r03KCoItEOu4lUtWAOwWK6VB2f2iZg5yQ94QJ9X3j/aK 0ZmsV9UO75bZ6tT1AlVu5uak53naGNu/LUw2RMcJZ/DNRqa6INrNDjABQNGMO0yO WP/M3FNWvIlqXFQlNb0aZvQnjPyCj2hR6LvyCV8oJFr2e7uYPJnA8Gr/r+iTOVQD qXAD7m5Fd53AL76OXxN6SBNRYcFJUEoPETFbqewdWIkFRCAa8YjAlpKF7PdRM5SX G8pNZfXHXobCqsZm+K2qKctLkFdFtldva5LzPaOIVjA1bZ/aw9nBs9/KxLHesHr+ bnR9piHItQg3ySfZl7m4VMCo624KBzDbBMX9Ir8X/e0hr/WIZJ6ZeucC8P1zo7T6 DOgkXayrVebjEDk1OtSbgPyueNMCwCHkwwWaTMKn4FRU0u3g7Ns++uDH+KUXZsBS 1UFp+Q1peIEwEUE80l7qdIL3539MLwEucued/5GUeb4czltcoJUOTXFLkJszgHws 7AGWpBbb+abaHWd23s6PGwIDAQABo4IB+zCCAfcwDwYDVR0TAQH/BAUwAwEBADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDQG A1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RzMS0xMDEu Y3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0 cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzCBgAYIKwYB BQUHAQEEdDByMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8w SgYIKwYBBQUHMAKGPmh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVw b3NpdG9yeS9nZF9pbnRlcm1lZGlhdGUuY3J0MB8GA1UdIwQYMBaAFP2sYTKTbEXW 4u6FX5q653aZaMznMGcGA1UdEQRgMF6CDXd3dy50ZmlmeC5jb22CCXRmaWZ4LmNv bYIQd3d3LnRmaWhlZGdlLmNvbYIQc2VjdXJlLnRmaWZ4LmNvbYIOd3d3LnRmaXBh eS5jb22CDnRmaW1hcmtldHMuY29tMB0GA1UdDgQWBBSNY8Ip7O5ErCf6QaBG4QBj CkwhTjANBgkqhkiG9w0BAQUFAAOCAQEAJ1r2wmhirAaqUmlIPDH3d47CozyR0G6U 7Zop/l/H56nZ7aCwbKfWTrCB/A0uCueo9l8Hb0vTNSBSe41023mcg2J7C28BP9ct ozbBkojtEKOEhCUHiwzTT3wcW+2ad8NuCEWwy+MIktOgnctidvQE6IXliNHDkuzT +oUo+3ZSqDU3VXo/NNnbdLnh6dNjqhtFcDrHpziF0i9n6qabTURct7ZW2mG/geEQ RzCEKPTxoEHzlhQSySt2YxpNcKw78gp01KfeDYCrnyb6Lx9ybp8XUEtHrrv+olmr Uz4kX20LWIb568ZxthMiGeixODKev9KkfQAsDSr3qDHz18foilJ7Ew== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArzlC8xLQ3uTyHoOl0/BR bpfUvYsarI0dFb2bY1nwXz3QDhcaRpPQLGKTLJ3/8iPC0AB7u0O7rUsVTzo2h82x uisuyRPgN0tHeeoltOMu57UDis8vXvrZ/UI90LzNNfNeZJ9EM8WjOJjlCEdufCou iuTHy4ULBD3cxO2LclGst69NygqCLRDruJVLVgDsFiulQdn9omYOckPeECfV94/2 itGZrFfVDu+W2erU9QJVbubmpOd52hjbvy1MNkTHCWfwzUamuiDazQ4wAUDRjDtM jlj/zNxTVryJalxUJTW9Gmb0J4z8go9oUei78glfKCRa9nu7mDyZwPBq/6/okzlU A6lwA+5uRXedwC++jl8TekgTUWHBSVBKDxExW6nsHViJBUQgGvGIwJaShez3UTOU lxvKTWX1x16GwqrGZvitqinLS5BXRbZXb2uS8z2jiFYwNW2f2sPZwbPfysSx3rB6 /m50faYhyLUIN8kn2Ze5uFTAqOtuCgcw2wTF/SK/F/3tIa/1iGSemXrnAvD9c6O0 +gzoJF2sq1Xm4xA5NTrUm4D8rnjTAsAh5MMFmkzCp+BUVNLt4OzbPvrgx/ilF2bA UtVBafkNaXiBMBFBPNJe6nSC9+d/TC8BLnLnnf+RlHm+HM5bXKCVDk1xS5CbM4B8 LOwBlqQW2/mm2h1ndt7OjxsCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1184922585350944 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.godaddy.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07969287' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-17 15:03:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-26 11:02:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tfifx.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714850237788455381986926635731416389519193580714406125965172097723135722174755319331582205174478870536703740127002177850103501950310790235654746389385877458844190507555802400686603829690284070622726429248122109777448500124986461800673314128329072553373148021984769200929071534475616251559914788956230751149724650309519514547733517071623344253291933089838391216557525846000623597713550038597872646493374094427671798053412750213996344376196799467338356052954751856554796635818097482871611488162850737534970026673370081626158794398304365496026462488945908488464156467895252164570327597505039282140242994203736071031018495255921529200625120230640492593326855160049670322297994525620996746068283897469998084091853379010773068121138571714833317670539520890113473376254973297752256881087882569255035510499208789356590625568339025134420775057858285917282431279462062630678212304627928503249678257998004515281186758201165609036601462604616187683418753483179192395042077789485118747611296119253945531477674514164847989671571754606106614169555661742430981747739932934990194542418474556015759943014609212577507491017684838710654047311101858975416269855351752704643348095890638634914142066536488127506083236715567183409593331084823121491840110363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gds1-101.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gd_intermediate.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fdac6132936c45d6e2ee855f9abae7769968cce7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfifx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfifx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfihedge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tfifx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfipay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfimarkets.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d63c229ecee44ac27fa41a046e100630a4c214e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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