andromedasolutions.co.uk
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 5c:cd:b6:3b:84:6d:77:13 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=andromedasolutions.co.uk,OU=Domain Control Validated
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 5c:cd:b6:3b:84:6d:77:13Serial Number (int): 6687201388456146707
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 6a:0f:29:a7:17:81:0f:c5:c3:17:45:ba:9c:6b:ba:c5:3a:44:10:e3
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 15:a4:50:b4:c4:5a:d2:a4:5a:df:4c:c6:2c:ad:8f:f2:1c:35:a4:5d
Fingerprint (sha256): 15:74:0e:fa:b9:18:df:a9:20:bf:cc:39:12:6f:3a:6f:b2:2f:5a:60:10:7b:84:7d:e7:47:c5:b4:3d:63:c0:53
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1350.crl
Check the revocation status for certificate andromedasolutions.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for andromedasolutions.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
andromedasolutions.co.uk
www.andromedasolutions.co.uk
www.andromedasolutions.co.uk
Other certificates including the domain name andromedasolutions.co.uk
(limited to 100 certificates)
assist.nsi-africa.com
andromedasolutions.co.uk
andromedasolutions.co.uk
andromedasolutions.co.uk
support.andromedasolutions.co.uk
assist.aquaproducts.us
shop.andromedasolutions.co.uk
assist.evanik.com
assist.actwifi.com
andromedasolutions.co.uk
assist.smartcos.com
shop.andromedasolutions.co.uk
assist.mwwebsolutions.co.uk
andromedasolutions.co.uk
assist.intellacor.com
assist.vaems.org
shop.andromedasolutions.co.uk
andromedasolutions.co.uk
assist.hogarcontrols.com
join.urbanstream.co.uk
andromedasolutions.co.uk
andromedasolutions.co.uk
andromedasolutions.co.uk
andromedasolutions.co.uk
andromedasolutions.co.uk
support.andromedasolutions.co.uk
assist.aquaproducts.us
shop.andromedasolutions.co.uk
assist.evanik.com
assist.actwifi.com
andromedasolutions.co.uk
assist.smartcos.com
shop.andromedasolutions.co.uk
assist.mwwebsolutions.co.uk
andromedasolutions.co.uk
assist.intellacor.com
assist.vaems.org
shop.andromedasolutions.co.uk
andromedasolutions.co.uk
assist.hogarcontrols.com
join.urbanstream.co.uk
andromedasolutions.co.uk
andromedasolutions.co.uk
Certificate
The complete raw certificate details for andromedasolutions.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIIXM22O4RtdxMwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTkwODI3MTg1OTIyWhcN MjAwOTI2MjI1NDA3WjBGMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0 ZWQxITAfBgNVBAMTGGFuZHJvbWVkYXNvbHV0aW9ucy5jby51azCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAN+xp10QVEdejQAHWh+nALMiojwonZO0ULH1 1S/xmKDNp/eGuoaTfwwEAI9k81YLMFTv3LAltkg+3nHUVpjBSSJo32sSN0f/MZ0S JmcrBsSP8FEiN0Ur6dPGx9GDtU/Gu8zvG+hEYR29UbNokInymLjsrdPIZGJV3sGx LyBLH50bC5lWvItCT/nDKc/om8sV9gS1llnZTdbjnBnF0LxWc8wlWQfKIqAhIhK+ aiUydCXZ/DAZz1/D7NZrKm/DrwhJy0CnBYDnmKn5PFJ2AzVkyj5wujgxD5VacGqg 45bUR1b387zwhpgykVsVmSsiTINYWaA3FICEVjYGnKX5NNvCyQkCAwEAAaOCAt0w ggLZMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdv ZGFkZHkuY29tL2dkaWcyczEtMTM1MC5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1t AQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHku Y29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYB BQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0 cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNy dDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjBBBgNVHREEOjA4ghhh bmRyb21lZGFzb2x1dGlvbnMuY28udWuCHHd3dy5hbmRyb21lZGFzb2x1dGlvbnMu Y28udWswHQYDVR0OBBYEFGoPKacXgQ/FwxdFupxrusU6RBDjMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA AAFs1HJoqgAABAMARzBFAiEAv+FgG8ojXta6mRrklidULY2T9EHnZJ5HoOZCvVAv 9KkCIEvRcW5JVGSt/DwAUS+y79HMisJpN72LF76fRu3SXdLHAHYAXqdz+d9WwOe1 Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFs1HJq3gAABAMARzBFAiAhGEAwxs2C gBEfb13L6YAy+e0fDPy6k+9uPUQRmoKKgQIhAMpzJ28pMQ1J9hCR24Q4GedSq5HP 0ze/JElCdifqaFdgMA0GCSqGSIb3DQEBCwUAA4IBAQBWwF4T3owxZaFVX/0v1S4X aSRdUvWjYd50PpN/NuRDx2yMajbxj9LHCfM1fon78Dqd5XWvkhMr8ahncVZML7w/ zGuaraZcHwRwPJU1hGF3b895kmsCW+irn5cpOK6NbqncDzBvCUB+QkYeIo+ULCzv o0kChnXauxf2M7W2Fxidj91zw2z/Gd5cO/cYajQXdZnf/egdsPlMlO5GX/ZQeA/V rOA/Rl2exhVdXbE1v6pPKU3d+1Y2A9UvHOicx+9z5iiezS5DBc/LoQ16rENjutVk ccghGcCMeWzHrAcJEmFpZG2fCu2MrPG17GPFjKwotoYzEl0QyK13qSNZmxCM8wxR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37GnXRBUR16NAAdaH6cA syKiPCidk7RQsfXVL/GYoM2n94a6hpN/DAQAj2TzVgswVO/csCW2SD7ecdRWmMFJ ImjfaxI3R/8xnRImZysGxI/wUSI3RSvp08bH0YO1T8a7zO8b6ERhHb1Rs2iQifKY uOyt08hkYlXewbEvIEsfnRsLmVa8i0JP+cMpz+ibyxX2BLWWWdlN1uOcGcXQvFZz zCVZB8oioCEiEr5qJTJ0Jdn8MBnPX8Ps1msqb8OvCEnLQKcFgOeYqfk8UnYDNWTK PnC6ODEPlVpwaqDjltRHVvfzvPCGmDKRWxWZKyJMg1hZoDcUgIRWNgacpfk028LJ CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6687201388456146707 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 18:59:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-26 22:54:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andromedasolutions.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28238746343414572691207483126422351322530305453510373534485228804108272773878634821830003965866687216307338758262282210804232848828525318122214452654355862564585496999164454165691207870952705175972778624062558231481463001545066720636541481282798817903667341829118895837242124916366740533824475852861800799408351655121206221313538275987446464610623023083579995991537152636693943873907304281488950048980425015605737611433825307626379350626724093435714401391981618340111255132763741013170267773789506633482450977063798218025381302119506225354679608243774522736942252558957602231838761123875846163323623564055777183451401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1350.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andromedasolutions.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andromedasolutions.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a0f29a717810fc5c31745ba9c6bbac53a4410e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cd47268aa0000040300473045022100bfe1601bca235ed6ba991ae49627542d8d93f441e7649e47a0e642bd502ff4a902204bd1716e495464adfc3c00512fb2efd1cc8ac26937bd8b17be9f46edd25dd2c70076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016cd4726ade0000040300473045022021184030c6cd8280111f6f5dcbe98032f9ed1f0cfcba93ef6e3d44119a828a81022100ca73276f29310d49f61091db843819e752ab91cfd337bf2449427627ea685760 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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