rdsfarm.ccfmg.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate


This digital certificate with serial number 72:34:cb:8a:c3:67:42:8e was issued on by Starfield Technologies, Inc. .

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

rdsfarm.ccfmg.org

Organization unit: Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 72:34:cb:8a:c3:67:42:8e
Serial Number (int): 8229426215956988558
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: af:49:ca:fe:d9:c0:f6:17:44:c3:29:6c:d5:c6:0c:d1:2a:18:00:0f
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 6b:23:3b:9a:e7:ae:76:49:d8:e2:b8:8d:6c:6c:0d:7c:06:64:12:d2
Fingerprint (sha256): 16:d4:41:e0:8d:c5:c6:d5:6d:c3:0c:29:02:3e:d2:20:f5:12:49:3c:e3:47:8d:46:e0:b5:8f:87:08:05:6c:80

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-15.crl

Check the revocation status for the current certificate on rdsfarm.ccfmg.org
6
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

rdsfarm.ccfmg.org
www.rdsfarm.ccfmg.org
main-ts-05.ccfmg.org
ccfmg-dc03.ccfmg.org
main-ts-06.ccfmg.org
apps.ccfmg.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIIcjTLisNnQo4wDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMTUwODI1MjI0MTM4WhcNMTgwNTE4MjAxMzQxWjA/MSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxGjAYBgNVBAMTEXJkc2Zhcm0uY2NmbWcub3Jn MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr5jcRDZkzOBiKbPnm9A/ Wyp88uMDGDF1DAMVfzdlUirDP+Tv5c199V4AD7iWK7bfg0XlsQdXj25CBzPEMLSt IxQio1slUBHsInYf/U827S3rmda8tfrfvDuPrHf0wATbKT5BszdidguTdrHse6pC pOP4WSSs3NfXcyOAjIzDgJlJqycjZM4U9ibCwRz60yMINem1xLzm4W1E6e1OGYyt 2co3ofhUESRXnxZGrTpmASSiCo9euwAnPPNunm3bf6J5JEJQJ9A+WmnHmkh4L890 dDJaZQ/qNVzku3o30rrZIM+gPDTllrpj5zWpFzVYyTuZ+CkKy52mJ+tr3uw6DPNG Hj9AeB+I6OxAXBmJ1IFck5vj91xG/ZMwdOxGndChQy2wXn0P+Q0eOVscUQmL2P23 V7SA88vmSCFJX1eY6rDo1IMpgRI4JPiqK+bMBAibPz5AKmesaYNSNtxaMiqkxB14 Sx8qy8K75y4wSHijSoZnBtn9rUvTOf3K6sN4DiK2pJgfozc5FaAPcdHk3fadO+P+ mJG9Kteqa2FxvOcoh9w25MSX3zPnBLdmhf3AkTu97cDDz3HRDmUVv8Aq9a2rQUe2 5Qq3pkA0hdSv4OKwvwWSv/UI6aFUTujC8220DS4gxTLnv/rXiCjKhM4MEYKtOOAa KL37bYqWpAwawEF07QKAeKUCAwEAAaOCAicwggIjMAwGA1UdEwEB/wQCMAAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA8BgNV HR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcy czEtMTUuY3JsMFkGA1UdIARSMFAwTgYLYIZIAYb9bgEHFwEwPzA9BggrBgEFBQcC ARYxaHR0cDovL2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0 b3J5LzCBggYIKwYBBQUHAQEEdjB0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5z dGFyZmllbGR0ZWNoLmNvbS8wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jZXJ0aWZpY2F0 ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS9zZmlnMi5jcnQwHwYDVR0j BBgwFoAUJUWBaFAmOD07LSy+zWrZtj2zZmMwgYUGA1UdEQR+MHyCEXJkc2Zhcm0u Y2NmbWcub3JnghV3d3cucmRzZmFybS5jY2ZtZy5vcmeCFG1haW4tdHMtMDUuY2Nm bWcub3JnghRjY2ZtZy1kYzAzLmNjZm1nLm9yZ4IUbWFpbi10cy0wNi5jY2ZtZy5v cmeCDmFwcHMuY2NmbWcub3JnMB0GA1UdDgQWBBSvScr+2cD2F0TDKWzVxgzRKhgA DzANBgkqhkiG9w0BAQsFAAOCAQEAxCsSxrprH1C39Yb8ik1TQcH15OD4MAklZYsx Q53bjwieh5LGE5i9vwaafEQhGLfW82rlSDTsPnFbU7VtQrn4z06YjguSSvSXyMAd FDacrWj9OiYpqZl9rMWccgGsDCYONbrJl62qt0Hth+YxZS6HXJrkqHfLRc3J/sPA RW+yq/ZIu3vxdiaOOsLjgqiIW745s6j1TS+weJFf8k7P77wdYu8lvA0l2Arz/FBq XHLXKM6FNgDsan7ti8zw3Hd/qb7PFFow1sQEJoaELkEZ+cJkVT4JDL9iUZHR1LCJ mieA8AixCRH4/3MG0BTgFc6uPxTOTqZoXo/HnsZOFseVtbQ3Bg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr5jcRDZkzOBiKbPnm9A/ Wyp88uMDGDF1DAMVfzdlUirDP+Tv5c199V4AD7iWK7bfg0XlsQdXj25CBzPEMLSt IxQio1slUBHsInYf/U827S3rmda8tfrfvDuPrHf0wATbKT5BszdidguTdrHse6pC pOP4WSSs3NfXcyOAjIzDgJlJqycjZM4U9ibCwRz60yMINem1xLzm4W1E6e1OGYyt 2co3ofhUESRXnxZGrTpmASSiCo9euwAnPPNunm3bf6J5JEJQJ9A+WmnHmkh4L890 dDJaZQ/qNVzku3o30rrZIM+gPDTllrpj5zWpFzVYyTuZ+CkKy52mJ+tr3uw6DPNG Hj9AeB+I6OxAXBmJ1IFck5vj91xG/ZMwdOxGndChQy2wXn0P+Q0eOVscUQmL2P23 V7SA88vmSCFJX1eY6rDo1IMpgRI4JPiqK+bMBAibPz5AKmesaYNSNtxaMiqkxB14 Sx8qy8K75y4wSHijSoZnBtn9rUvTOf3K6sN4DiK2pJgfozc5FaAPcdHk3fadO+P+ mJG9Kteqa2FxvOcoh9w25MSX3zPnBLdmhf3AkTu97cDDz3HRDmUVv8Aq9a2rQUe2 5Qq3pkA0hdSv4OKwvwWSv/UI6aFUTujC8220DS4gxTLnv/rXiCjKhM4MEYKtOOAa KL37bYqWpAwawEF07QKAeKUCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8229426215956988558 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-25 22:41:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 20:13:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rdsfarm.ccfmg.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716373712250068447612377855858832196063359075873867610567821816439520629264663702156229484771465362507316502301698184517851574660375778530304965524128772385407318996363894861779923292597093349350242428785472223159125650212624479195577749203459915850193122243647535181541128518793455892327583459569584071941363534008706338241371462592448364864134564356148088466835715414452375381279484829852687007577173703031546210457066925128439609792876828156904898504418737136850503739237592969328424974110958259037858074582451922439529449434437263188729167245353366330899887987283114534424485461136065680904959048290241189749800767092292895526634537723790613183247515655219023737466279370287099785112360674149207465982418498417888483894508404838530462723314418882577851135876144403807839010690755542093721335169951184112126799716394030077954269801948710176288595890929356670079758622818191148805469290847280628887816897153101311768592472892979064602342178474327363586443670226683411485102422939053980787339260322254620381635351298660346927491786684048637549512979599085317875186401496962491888429487295278877677877316922900993423267972525578949383588756267585203273435024094492679517605712504136571981390649026524746918479307143454063160190859429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-15.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdsfarm.ccfmg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdsfarm.ccfmg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-ts-05.ccfmg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccfmg-dc03.ccfmg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-ts-06.ccfmg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ccfmg.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af49cafed9c0f61744c3296cd5c60cd12a18000f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c42b12c6ba6b1f50b7f586fc8a4d5341c1f5e4e0f8300925658b31439ddb8f089e8792c61398bdbf069a7c442118b7d6f36ae54834ec3e715b53b56d42b9f8cf4e988e0b924af497c8c01d14369cad68fd3a2629a9997dacc59c7201ac0c260e35bac997adaab741ed87e631652e875c9ae4a877cb45cdc9fec3c0456fb2abf648bb7bf176268e3ac2e382a8885bbe39b3a8f54d2fb078915ff24ecfefbc1d62ef25bc0d25d80af3fc506a5c72d728ce853600ec6a7eed8bccf0dc777fa9becf145a30d6c4042686842e4119f9c264553e090cbf625191d1d4b0899a2780f008b10911f8ff7306d014e015ceae3f14ce4ea6685e8fc79ec64e16c795b5b43706