polystrip.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 8f:93:eb:08:0e:d7:f2:90 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=polystrip.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 8f:93:eb:08:0e:d7:f2:90Serial Number (int): 10345871188841460368
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 19:d0:24:af:50:99:ac:3e:17:34:f3:b0:05:ff:4b:ae:24:95:87:8b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): cc:97:ca:7c:49:0b:0b:98:fb:11:26:83:0c:ca:1c:4e:fc:6c:1a:8c
Fingerprint (sha256): 13:72:3a:9f:71:51:d0:4b:bf:0c:47:cc:15:ad:b3:70:10:c5:35:16:37:76:9b:04:0f:ca:10:b6:93:ba:6d:f6
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6938.crl
Check the revocation status for certificate polystrip.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for polystrip.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
polystrip.com
Other certificates including the domain name polystrip.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for polystrip.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgDCCBmigAwIBAgIJAI+T6wgO1/KQMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxNjE3NDY1MloX DTI0MDcxNjE3NDY1MlowGDEWMBQGA1UEAxMNcG9seXN0cmlwLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAM5NW3WIQwrg9Akgxf7QhQn/UjLZ2vgD p1kpo8NCXUollWt9sKNhwe2ptMuAnTRcnVCf02JUc3Z4lZEb8t9ZPJJaGbFRKVjI DCTyxWxB/IV83KP47waYpJiOOG9BEcNQtMsy7xA+2tQqQer9QQiWm5L9XBLA9/X2 tymUmBbZ4YIWB+38/dPQ6/665mdncZgHr3ViU7XxHu5ImV/DmTnEFx4Y1RT8G75a 4H4cBS3UOYfvqszrhc0fxPx5eV3GVwqjA65CjAlMyq99GaNPPwnvoMF5vXcMu70a yypsbx5FapQ608B5f2dxvLjt+MILygci5kWvxILHjlNACaQuXLBzpNtDkcCC53P0 JgPfEY0ngAfF9D4MKofAZTvqUpWdvRRtAaFW8v4IGf4jHsUcxWT9nO2wXx7Jy2kC Owy5+JapIDoqYZDkR/vQS8qw0lZAQsaZuQzrNEDVpIT3oCQ9RIHnS4Oiy/xXIl97 fsi+jZ/fqzyTZ7c6QwWM8i36M2NJ2cqsYL3zxw10R8369CertDW8h9XyH1Nh5QeT rCCc9cccTIRyGa4CsWGpRIYZ6f6fJnVA1VXwA7vf+vPjqsRmKxIyJEj7GF8ygYPa Bg++2Zy57hPN6+90GmteEbrxMzsZr1GaLXGib1biCMAh0qv/boP+HVt+njFw5VDU 2tLZZuXURyGJAgMBAAGjggMuMIIDKjAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY5MzguY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGAYDVR0RBBEwD4INcG9seXN0cmlwLmNvbTAdBgNVHQ4EFgQUGdAkr1CZ rD4XNPOwBf9LriSVh4swggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AO7N0GTV 2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiV/P+gcAAAQDAEYwRAIgD8Rz G5T8saNR8Wn1oGYwvtbfHokmlqXUYHi9fIFDTlACIEjksufT4+lkvxzUi2LZruq1 V9slrP75S27cvlh+mSwiAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY hHMAAAGJX8/66wAABAMASDBGAiEA7UR5/LDox7TFCfarCnq3fvlA1I/FBr8p44Tk g1loe/UCIQDffk7pZVHwr9O6lhp0qJu7RaSd9xXdEYlj+wwneZlEkAB2ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiV/P+1EAAAQDAEcwRQIgB1/2 8zruDebjWMov5YbxE7YGaB+3HiiqDyMGue+ItdICIQDTs8nRmCmvvtFC64Z2sLHt ZjAfP+WElhR8ZCldcgKIZzANBgkqhkiG9w0BAQsFAAOCAQEAKE+6TUJTsVRBBNzo VU2wukz7OrKkNV2DEb1AliA3Y7zf7sF/M4/RnKJmz7nTZWbJXBEPXF51CqRiMgf5 udhWS/MrqyJd4GInLrP9Y4S/6/uSad8oDNieG++48WaMqHH7GUieLJnP/sdKSeEn RIvrX6XcZLDFljqFp5AqMu61kh8IHWpSrk8cab/L9UybLdMbbg44Nda6zEnC8og8 eBzbITGPbe8YmiwTldsJlrMz/8uu72C7Zhx8CpL8bJBnDRtaIF6vRfevW0d4dUnm SKs4cCFatf1rG1WKCLggO5uhIsx3G7ObKG1BloCUBb4gwyc9i0iuehqrXBCLwOy7 9TIm/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzk1bdYhDCuD0CSDF/tCF Cf9SMtna+AOnWSmjw0JdSiWVa32wo2HB7am0y4CdNFydUJ/TYlRzdniVkRvy31k8 kloZsVEpWMgMJPLFbEH8hXzco/jvBpikmI44b0ERw1C0yzLvED7a1CpB6v1BCJab kv1cEsD39fa3KZSYFtnhghYH7fz909Dr/rrmZ2dxmAevdWJTtfEe7kiZX8OZOcQX HhjVFPwbvlrgfhwFLdQ5h++qzOuFzR/E/Hl5XcZXCqMDrkKMCUzKr30Zo08/Ce+g wXm9dwy7vRrLKmxvHkVqlDrTwHl/Z3G8uO34wgvKByLmRa/EgseOU0AJpC5csHOk 20ORwILnc/QmA98RjSeAB8X0Pgwqh8BlO+pSlZ29FG0BoVby/ggZ/iMexRzFZP2c 7bBfHsnLaQI7DLn4lqkgOiphkORH+9BLyrDSVkBCxpm5DOs0QNWkhPegJD1EgedL g6LL/FciX3t+yL6Nn9+rPJNntzpDBYzyLfozY0nZyqxgvfPHDXRHzfr0J6u0NbyH 1fIfU2HlB5OsIJz1xxxMhHIZrgKxYalEhhnp/p8mdUDVVfADu9/68+OqxGYrEjIk SPsYXzKBg9oGD77ZnLnuE83r73Qaa14RuvEzOxmvUZotcaJvVuIIwCHSq/9ug/4d W36eMXDlUNTa0tlm5dRHIYkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10345871188841460368 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 17:46:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 17:46:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'polystrip.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841639451823275784515731689083264565505086464317896143296949222331623713791623229742125174712363037467354854445808584375734970069125562585788950080457867606940473021303765912556484221238334835504189956751503689494830579333838837275894800685409860237231330519880930506257742281870023173040453368287828650220698776605426527328882911146427643768782318458957261276543680508423515107116722558158960901798162382958431079694377791624468888791275658870188006027362031363232394251785747117758871102699832242569132055141172724629792817355075612839767669292849170416235187006332676195922799888580658343568558847858382418534241787086889599632407839581096392672051633885000190942645300457850977467854087342595938730364650859680594194027833034636284633621080935645236136243363848087497626811472723015196936903012136708653328460702291124802739304231684093948834581117131337793215421242828928145251144755372355401803209284056114146200724388552688733083046330626632771079812447410106358702033064704302913358083189844392330659749432390215465107571259262103535484808344030418401227890336444896596012842440567390527724429374686408941500614994315774587669179858460646959438941579243246719707199179865326880537796642791927560374289159086074685798918594953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6938.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polystrip.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 19d024af5099ac3e1734f3b005ff4bae2495878b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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