ultraknit.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 72:c2:31:2e:ff:1b:a1:2a was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ultraknit.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 72:c2:31:2e:ff:1b:a1:2aSerial Number (int): 8269225943723909418
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 72:01:39:b9:44:37:d2:62:46:3c:3a:dc:f5:31:31:18:e6:8a:64:e7
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 14:65:d1:02:04:cb:46:56:3b:eb:9c:89:a0:0e:97:b6:10:24:cd:a9
Fingerprint (sha256): 12:d4:f8:61:b1:42:2d:14:0f:01:fb:23:31:96:e0:27:2a:a7:7a:bc:f3:0d:06:ad:95:95:74:50:7a:20:f8:20
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7176.crl
Check the revocation status for certificate ultraknit.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ultraknit.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ultraknit.com
Other certificates including the domain name ultraknit.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for ultraknit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfTCCBmWgAwIBAgIIcsIxLv8boSowDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzIzMDMwMDMzWhcN MjQwNzIzMDMwMDMzWjAYMRYwFAYDVQQDEw11bHRyYWtuaXQuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9JJ+QTOx0H1FwESKOuIS5TlQ0t9UctuB lTbspTdQJD+3pE1WFQU5477galX6NypXAWWprpzqUCu91/+9dXr6n8Pa4MAk7FVh by9oP5LuoNyaz8pL4l8jBCEg83xNIPm+IZ6cHUH+LHEcxXtU81nIgTMH+JlL+wKd jVaJTgavi8ztpnRDwqAZA4DYcOvO/6LlwRPEBvahNcgead8s2wNCBtVL5UPJFPjY rag9SHW9QtCzfbLR19pXfnXDFeZiHm+jOZlOIQcTUMxlVWV0i0KEULFC6SeVD6X4 P0Qxw0HgUqRSjC6h/3a7Lbr7GAH6rGbWlv0GJ0G8SGzEdMv+qebrIwePoHr+rxGu ibtDcZXL6YAxjEiq/9QyEN/VyE9g0R2zaDnJfH5a3dszRqiUBDwtdJXsdoIN9Kh9 apU3o5cn4zcffsX45BvowbSRX+jKABBzJMQwp0JJJQamg7qcu5hjJYW3hChNmbFB TMwlLqqI2S0sXXVMoJXcn5clOssHhBmHHXFSGDu5WxiN3KRSdam1fwUdVqWQwzHs GWFtB/2GSyonGmfo+Gfl6hXuFo68Ou8+Usdm6jDPnogXYNOs4Ky9EpL7I6vEnOnj eNE53k4aYf/w97iC0FMHuBKAIsAgFoZIWr7Ja8BislJnC/g0enAkfIsl83Edyaf4 Jm9y7plQ/ssCAwEAAaOCAywwggMoMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2g K6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzE3Ni5jcmwwXQYD VR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2Vy dGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2Bggr BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29t LzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y ZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPw tCyAzjAYBgNVHREEETAPgg11bHRyYWtuaXQuY29tMB0GA1UdDgQWBBRyATm5RDfS YkY8Otz1MTEY5opk5zCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJgLEMWwAABAMARjBEAiBYnoCK ASTmHyEQiIztuIIIsDoC3d9rSO4quToen+UFqQIgLkkhSorgsH6KpsPK4jiCWmwy DRoRMxK+1KVQ6ph5cqIAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYmAsQ0rAAAEAwBHMEUCIQCG17scYoKASji+nOI9n4TtNQYqvym1AfJcuIt4 axHKXgIgEAKH2c/2kVY7AkK59YCQBxSjBlpTyp9GVsc/yH0D39IAdQDatr9rP7W2 Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYmAsQ2IAAAEAwBGMEQCIEChXcIK uyJFNOV0jGIimZ2XJuKeVeO4y1/yJhwtCnw1AiBqwrIBSXjx8pQt+b/spa1o0l9k pXz5Lq+redK5Qx/bhTANBgkqhkiG9w0BAQsFAAOCAQEATQO0TC/G7RYUi27Vi0us IDc/2aVXblRTuSQcULjC5/OANfETNcpHJe+riwAHiG9K+CNv1R8Rq4wDSciAoSa6 UPiZ2fTopp4weDnAt6FhCV01LUA8ePBisQuSK2UUvpbE0DBKxmRiuFLHpDap8ktC N/rSKV965yj3oy25V7UP9s+WJfern1bNSV6BXMlfBtxmcJU2bB5vzF0C/qi9j3UJ PiD1fmECbIs7k7k0hwRuv0O3sRGm1F4wkvTw131Oq2FSq51nWG1x4+S4OFbOD6Je LswbS2a8AtX+kUaFigKYGE7L/QqkkvfirUNkqJkcVD/N6afdQ7N2qooHLLm8QrFn Vg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9JJ+QTOx0H1FwESKOuIS 5TlQ0t9UctuBlTbspTdQJD+3pE1WFQU5477galX6NypXAWWprpzqUCu91/+9dXr6 n8Pa4MAk7FVhby9oP5LuoNyaz8pL4l8jBCEg83xNIPm+IZ6cHUH+LHEcxXtU81nI gTMH+JlL+wKdjVaJTgavi8ztpnRDwqAZA4DYcOvO/6LlwRPEBvahNcgead8s2wNC BtVL5UPJFPjYrag9SHW9QtCzfbLR19pXfnXDFeZiHm+jOZlOIQcTUMxlVWV0i0KE ULFC6SeVD6X4P0Qxw0HgUqRSjC6h/3a7Lbr7GAH6rGbWlv0GJ0G8SGzEdMv+qebr IwePoHr+rxGuibtDcZXL6YAxjEiq/9QyEN/VyE9g0R2zaDnJfH5a3dszRqiUBDwt dJXsdoIN9Kh9apU3o5cn4zcffsX45BvowbSRX+jKABBzJMQwp0JJJQamg7qcu5hj JYW3hChNmbFBTMwlLqqI2S0sXXVMoJXcn5clOssHhBmHHXFSGDu5WxiN3KRSdam1 fwUdVqWQwzHsGWFtB/2GSyonGmfo+Gfl6hXuFo68Ou8+Usdm6jDPnogXYNOs4Ky9 EpL7I6vEnOnjeNE53k4aYf/w97iC0FMHuBKAIsAgFoZIWr7Ja8BislJnC/g0enAk fIsl83Edyaf4Jm9y7plQ/ssCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8269225943723909418 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 03:00:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 03:00:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultraknit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 997767684013293240972029428607555611844762342475743033262090055035035186726559481610296529128444076323731088976442379053191450363308554757323824671417424251478250768193841063532993071823065379387481533129094425921889846338601824199907605376812800929841447229835022994572406776270961669656463362030329926736791039060647344498463759869253357143844947931156846585262395490579044431373252663793487106346837750962372381383715305070061462381088492721144680593000293358500536893751426779636441686455951546025281573367769195142742707063523764959415634762079877601282496083346241425154126138882020708614477151917565521853293579558747098910958703811447860342332605920706265327291568181686095491904796974132327908455900711995892527808842834916407924145973075259457321216865249216247475045953308268490337309174254498561670512274191156850160282376492450550111036151396792149900310210229527073505998103380431285096325665627570218994337645021988795460454125721468610271161042874083065856506647132470014839754460316721042806938998953506848555901614669496341271042495974439551470129772657178103691222430754049258063001042270750096375761945873851775939280318818978965975347069871956851394446516876063907972660381052350839535036061094050267446199254731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7176.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraknit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 720139b94437d262463c3adcf5313118e68a64e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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