rainydaydesign.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number af:fc:3e:bb:6d:10:08:fb was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rainydaydesign.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): af:fc:3e:bb:6d:10:08:fbSerial Number (int): 12681079625478047995
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: dd:ca:d7:31:79:4b:a3:6c:9f:f7:96:d7:7e:80:aa:30:63:64:11:84
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): c5:8a:b0:f7:91:15:22:9d:fa:52:61:66:08:8a:a6:c8:67:e6:31:8b
Fingerprint (sha256): 14:6e:41:17:6b:f5:18:2c:92:87:92:9e:de:05:1c:2f:21:80:59:86:34:5f:ed:d5:d1:66:55:56:95:b4:b3:ca
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7259.crl
Check the revocation status for certificate rainydaydesign.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rainydaydesign.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rainydaydesign.com
Other certificates including the domain name rainydaydesign.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for rainydaydesign.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHijCCBnKgAwIBAgIJAK/8PrttEAj7MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyNTAyNTUyMloX DTI0MDcyNTAyNTUyMlowHTEbMBkGA1UEAxMScmFpbnlkYXlkZXNpZ24uY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Ug8N34qTKEDAPoeIpXtK30X y+2uxlsuhY6JmBjvZXHXrAFyYCNP6OEs8PYMKmOrrnFVBw5U9vUuLt9cWhllyg8p r3tOVkhERgLdBV+wPvEEKxSlNuwd2CTeEKbqP5O9zGLDvctMxP9baQ8zfRApxuNu gTQcssLu3Dc1LDjiPIlNyFj5svtshW82O2NL7c4Cthcim6HQgFtM/BCTExs75Q2J FQhWf0LvO6dI4dLJg/lFDoOLmrumE7mfD4ghKAHclTdIDrXKfOboSA0+sVuig70e 3YRIL324BgJtaQg/eS3TUkNbFvbE8n80ptvudASDNcNxNUB+wb9TC6iDZlryCJ1F oDc/hHiBl/yWloc1a/Yw7M84ZS9uWaUHyVCWrsQUmEHN6ZFKbX9MiIL0zXrZ13yM S1uTYyxHJQFhPhD+6yQqfbdWoYqefziUQ7uVFxhSUGVPEuGJLJat/U+99a3Rp4am EbSNzrHSTjM8CyheCbmuQrzLdHFfod7ycJoWLGtgyS8m64+Qb1HC9YmvampdnDW5 8PGXSv6ll7mWA8zvnS0dgR/+m7PiPHeP/eP8BrvtJnHt7QskRhgZMk6iGL2Skbud 0wTk23wsgUnaxniRIjVAorJ3G8LpPAeM4BiW8AM8u0LpdYyhTLlgKf8B/lSlKHQw oWjlD2xJjQ4KGPhY11kCAwEAAaOCAzMwggMvMAwGA1UdEwEB/wQCMAAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8E MTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzI1OS5j cmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRw Oi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAEC ATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFk ZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5 LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCi M9f7bLPwtCyAzjAdBgNVHREEFjAUghJyYWlueWRheWRlc2lnbi5jb20wHQYDVR0O BBYEFN3K1zF5S6Nsn/eW136AqjBjZBGEMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFq AWgAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYmK+QavAAAE AwBHMEUCIHsEncmOE7rh7i0g/oOWvRxXXZn4gtc9ysTpechsQdQ6AiEA9b46t+nb AhXcP5+B3wbbymw2JFEpJJm20C6t0CgT7ugAdgBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYmK+QffAAAEAwBHMEUCIQCjJAlxnLVnONQhe15puA2V 1NtKHErscE29XyqPsJhAawIgOvQWtUHbK0nlRzj/rDgqiYBlfQlQu3wSzxaKVeKy C/kAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYmK+QhNAAAE AwBHMEUCIAV0raiOmbu1KITb7QmQobP21rQ2dHNtj5z0w6zPquN/AiEA1dWDL0lT 1KfyYeoc++9WGEe/Su5zPXQPbdUxxUqp1dIwDQYJKoZIhvcNAQELBQADggEBAKTo 5JUAqCczB77ytiwFmGHYEh8fgu/+R1GHnUE5bkN2TZKf+yodzX/mZzyw8z2xxyWS rUhHFS4VAgljpi1k9UPPvjJu0ve5+3qjXLARTN2YANv1sAmx8F2tmA4CT+yBSFz4 hO8O2p2ZDBkKrWEEPT+l5JhUmvB3Rxc4CkQNY0FDQUWv/HtuiU4fgYmaB/0k6chg /8p65299gRppk4fgCdmV45IRj3SC+ETD2yq/Z1mo2vJNg73DVr0ZePhWbAimuNKw BHprjRe4BlIuHAAmX4TmbUkH34E8gTqE+qH2N8R/LMn0Rl4JbeTFVj/EL0rzNHxc CEQiVpO5uUGYaahQLfo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Ug8N34qTKEDAPoeIpXt K30Xy+2uxlsuhY6JmBjvZXHXrAFyYCNP6OEs8PYMKmOrrnFVBw5U9vUuLt9cWhll yg8pr3tOVkhERgLdBV+wPvEEKxSlNuwd2CTeEKbqP5O9zGLDvctMxP9baQ8zfRAp xuNugTQcssLu3Dc1LDjiPIlNyFj5svtshW82O2NL7c4Cthcim6HQgFtM/BCTExs7 5Q2JFQhWf0LvO6dI4dLJg/lFDoOLmrumE7mfD4ghKAHclTdIDrXKfOboSA0+sVui g70e3YRIL324BgJtaQg/eS3TUkNbFvbE8n80ptvudASDNcNxNUB+wb9TC6iDZlry CJ1FoDc/hHiBl/yWloc1a/Yw7M84ZS9uWaUHyVCWrsQUmEHN6ZFKbX9MiIL0zXrZ 13yMS1uTYyxHJQFhPhD+6yQqfbdWoYqefziUQ7uVFxhSUGVPEuGJLJat/U+99a3R p4amEbSNzrHSTjM8CyheCbmuQrzLdHFfod7ycJoWLGtgyS8m64+Qb1HC9Ymvampd nDW58PGXSv6ll7mWA8zvnS0dgR/+m7PiPHeP/eP8BrvtJnHt7QskRhgZMk6iGL2S kbud0wTk23wsgUnaxniRIjVAorJ3G8LpPAeM4BiW8AM8u0LpdYyhTLlgKf8B/lSl KHQwoWjlD2xJjQ4KGPhY11kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12681079625478047995 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 02:55:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 02:55:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rainydaydesign.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 902752487446231298176795895901461147860415988384542122589015890585770579611018782721049568972872228648591608496000025251838348336807496476066062703070016378429937644659513460928507442529350957215998581967256618386906696627579942594562964469179432648946855627209544842872716330072774825920992388533472994128199452904028161372679576509414862657935850168590918992357406858007406852945732148756502954052829590862096387492747415472238982984459379414802282472854807075478105798062652037818879125503458983497996676034522671330131376165487894851557594531521096340232215323112670612640883735240484647571384082518737524419673431282198305821029251904759508755895916870949479616530926743597940434193025016688851140351916244917504351844220430430818325360805780815260608764947686161464039878590004292179690952133153085418891198013837387863681969553637371771383355869455508976422963843825685133115539377754211514365597798782006431639151953618050176714625564725532216375260927300506167318798299402695375238157092219508292640121191805721405189763893731633535375475125125784651361577687587970887723289071454728123513618490624690634640537189259539831740516196973435895509949391540408674862094681240249328058275786377550599643330596527958092601443800921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7259.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainydaydesign.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddcad731794ba36c9ff796d77e80aa3063641184 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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