agronol.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number a1:8e:1f:af:6e:bd:61:3f was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=agronol.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): a1:8e:1f:af:6e:bd:61:3fSerial Number (int): 11641276925136953663
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: ce:05:4f:d0:72:a8:6a:2b:70:09:65:5e:a4:ad:07:c5:4b:bb:4c:c7
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 9b:29:d2:cf:29:a0:26:f2:bf:2e:a1:56:43:bf:c5:a1:78:11:b3:50
Fingerprint (sha256): 26:2d:39:b3:5c:b8:74:75:28:c0:cd:5b:9f:5a:00:db:96:4e:22:a0:d7:19:ce:fa:47:f1:4e:c9:bd:d0:80:2c
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6672.crl
Check the revocation status for certificate agronol.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agronol.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agronol.com
Other certificates including the domain name agronol.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for agronol.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHezCCBmOgAwIBAgIJAKGOH69uvWE/MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcwNjEwMzcxNVoX DTI0MDcwNjEwMzcxNFowFjEUMBIGA1UEAxMLYWdyb25vbC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCjJqEeV/wVJBV1L1UQ0o7oWrNAuGw4gev7 /I1zJ3xW3lDv3x8lSS8yM8HSGRViGAoj74vSoWFRQ6TuTp4f1Y6MVqfJMy3F4uiA 3rPtcgKyevC3uHqsEFQNUB+mwYNm5pSuIqqhuAC6BZb5zjojrCspZrj3DYDNa1pF u1JCNyS9knrApq6tM3392tgwMDfq0Fxo9Srg7Yn6IUYMQSkX0CDYvBBSF6UG8PPm 25vAqAUhu24XC6COeR7sOKCpkxLPwTAnbFRy9WBKL3Sa3Pg19yLCgIqJryX3R4Rh khz/Mmn78wtD4uCYJV8c2a6I509Er02CknUp02tOBHxPXnqKJS5ApJVpNPkXu35z rLQ1jECXcbNlZWz3UmNZ5c7qz1HGDpQ8T71joVgPtV/Kg44mloKEJk/L8CEDccbU /OrZODSapCzY9bWcyfwOVDqh81j30SXNAIlm6MtFB+LP6wYI+tPIzPmG6xOdZfo9 8FaTT6eZjzkq3C1pJ1ytsrE6o4Eq1OeHFiFrBCWK+9R2M+FhN1N8vBmsEK7ygZOZ fVhsInppcySUyc/dsGNxqr/VJqeOybITMqHKkmRa4T+lvWJtx4zIXguZo0cXbODg xnpFYBg3TROLPiR9HSKopQaJSJRMEhhW6ot/d7GVW5xFG4+vLKdrLlZpsGfccYw4 4j9Qm2h4TwIDAQABo4IDKzCCAycwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAr oCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NjcyLmNybDBdBgNV HSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0 aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsG AQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20v MEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl cG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0 LIDOMBYGA1UdEQQPMA2CC2Fncm9ub2wuY29tMB0GA1UdDgQWBBTOBU/QcqhqK3AJ ZV6krQfFS7tMxzCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHcA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJKscQqgAABAMASDBGAiEA3aOksBz1 nKuhVjlHI3x0qCEsaHVycKJt6N13y8RPPfcCIQCMpHkMDQxdCIbbGQ1eScOgMulN Ta5sZuMGbrx+k3Y6vAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABiSrHEXwAAAQDAEYwRAIgG6WHUe9OXANTaVE42Ppm1y2Fl0Pt20/amV5HY4Tv f1MCIC/xfbwoQp14M5fcfSb1v4Lsrt8eqpEbQ4m+VIC0J8vGAHUA2ra/az+1tiKf m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJKscR6gAABAMARjBEAiA31DL1cLCb Sy0r+Eoz7YVjdbsRv316Wky45hQHFWQdYQIgZ0APSznXai8T+mzdoWvz9tLgtbt4 bWOJ80vlTaQi0dwwDQYJKoZIhvcNAQELBQADggEBABQBUEMBxLsHsDoeGV6HMwUt S9d7GNSw3FaoWJiz9Abj7RPmrV9eiusuYGFZDNEQL/8mkUUPkwtJ6m+Z+X4xXIG2 3GVSiItchLA2x7IHp/79l9tos9X5Y1IdnKrml6qTfDkY0ljxQNL/jFwJm3iDVJiE 1cN8aLc45BRgODD04zNEUJqK5ic2Vj3CVXTbMR76EpTPk2x7weBfjFf5DFo9JP3s mHX80q2tIPG2Nzp/lbRub5IuIYMZ4Tsr6GWYJGvC9ZJaLFZ7VLhDX8fBkYi+jJmo DZrXw6JWzxJknkxV2bufvXR86Kg2QtImOc8Bti0i5uvCzKbbkNpjp0sibmFPa8c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoyahHlf8FSQVdS9VENKO 6FqzQLhsOIHr+/yNcyd8Vt5Q798fJUkvMjPB0hkVYhgKI++L0qFhUUOk7k6eH9WO jFanyTMtxeLogN6z7XICsnrwt7h6rBBUDVAfpsGDZuaUriKqobgAugWW+c46I6wr KWa49w2AzWtaRbtSQjckvZJ6wKaurTN9/drYMDA36tBcaPUq4O2J+iFGDEEpF9Ag 2LwQUhelBvDz5tubwKgFIbtuFwugjnke7DigqZMSz8EwJ2xUcvVgSi90mtz4Nfci woCKia8l90eEYZIc/zJp+/MLQ+LgmCVfHNmuiOdPRK9NgpJ1KdNrTgR8T156iiUu QKSVaTT5F7t+c6y0NYxAl3GzZWVs91JjWeXO6s9Rxg6UPE+9Y6FYD7VfyoOOJpaC hCZPy/AhA3HG1Pzq2Tg0mqQs2PW1nMn8DlQ6ofNY99ElzQCJZujLRQfiz+sGCPrT yMz5husTnWX6PfBWk0+nmY85KtwtaSdcrbKxOqOBKtTnhxYhawQlivvUdjPhYTdT fLwZrBCu8oGTmX1YbCJ6aXMklMnP3bBjcaq/1SanjsmyEzKhypJkWuE/pb1ibceM yF4LmaNHF2zg4MZ6RWAYN00Tiz4kfR0iqKUGiUiUTBIYVuqLf3exlVucRRuPryyn ay5WabBn3HGMOOI/UJtoeE8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11641276925136953663 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 10:37:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 10:37:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agronol.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665597584951126909838335256806484349621279481281035571330122193095231887204189717480563411407567474193764048801424976768184297418198529757569423814426929292649358366596392116002862725164681336942687520212101856943486914720266406920380457548758838914590916284368401062205366604065618095905621998100939028479439823204949527550658178912958067071626040121097121257464064948465904048711489974107912731263216944172666262413754333483552043989010871388018279041466318325978235496208111907222305340061360567129305748614579495168397933695417773437389491686231175564518488005036342049369327875876467479300329732320111746095516388935001270352766776651492741853081290014138412904452891252887317411944174629719764743454293760857049573189854113206975708091245927128958577875340323608021204670303062207431411616441302190079587079322676418603558258624950400880376561277010243590354237746425120467874369830053331714555988840729682307036456527737548198399269304822001033124250480438988458120485578556058647908210881721419216827914579925454526417358183327429495068164911956738334462521521531281744074579324664817939306276516554153146594730808751223978933578957074945102123395785094449607047057558617474964634794380033846051676451147602444903069908498511 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6672.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agronol.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce054fd072a86a2b7009655ea4ad07c54bbb4cc7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001892ac710aa0000040300483046022100dda3a4b01cf59caba1563947237c74a8212c68757270a26de8dd77cbc44f3df70221008ca4790c0d0c5d0886db190d5e49c3a032e94d4dae6c66e3066ebc7e93763abc00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001892ac7117c000004030046304402201ba58751ef4e5c0353695138d8fa66d72d859743eddb4fda995e476384ef7f5302202ff17dbc28429d783397dc7d26f5bf82ecaedf1eaa911b4389be5480b427cbc6007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001892ac711ea0000040300463044022037d432f570b09b4b2d2bf84a33ed856375bb11bf7d7a5a4cb8e6140715641d61022067400f4b39d76a2f13fa6cdda16bf3f6d2e0b5bb786d6389f34be54da422d1dc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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