ymoco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 2e:1e:b3:d4:57:75:c0:47 was issued on by GoDaddy.com, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ymoco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 2e:1e:b3:d4:57:75:c0:47Serial Number (int): 3323291299627778119
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: ee:ec:d9:5e:15:c6:f6:64:98:eb:83:45:7c:2a:74:7f:1b:25:92:e6
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 98:48:69:53:9d:28:c6:68:5a:10:6d:74:b1:d4:75:11:98:2d:f8:d9
Fingerprint (sha256): 2f:17:81:c1:5e:43:28:f9:04:c6:16:e8:9b:1e:53:36:bb:50:a3:92:54:8a:52:d0:30:5e:c9:08:94:82:c1:3c
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6472.crl
Check the revocation status for certificate ymoco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ymoco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ymoco.com
Other certificates including the domain name ymoco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for ymoco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIILh6z1Fd1wEcwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzAxMTMyMDEzWhcN MjQwNzAxMTMyMDEzWjAUMRIwEAYDVQQDEwl5bW9jby5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDs3Hr73tZ9Jx/RQNqtX+82NjvMBGlX66kHcNv6 e6WltCy9VHlTqv3QSJYH1SaGYYiszLLKIIADiScd+sxeRLXcwhMqZGI7rPDBL4Q/ AoF6+cdrAujzJ67TE62pY0Fz+uIWKNo5+VWAKwl36HNALbNX35DQALttlIDH3JDX RW9wwFO8Dp+vEQsioQyyo9YkakTDJLuv4VaFTKGOzjpn/ByOrKI4vgtcTj2XSes8 Qi2BMeMY14R6hECjx+DMCurqB64kJJ+Ul3WXqSEChSl6eKo1nD7Q3RHNDVZV/0rY 9dw61DWL5EGt437V6RbBU8RuVwkF0MmhD4Z1u+9rwe/ttFlrE8vjs9MKa4YYxJHg iWPBRXYxzklRtqRRwGXeriXzYtVxB28TqtxYMJIm1KpRbLN64zAZK7YG9C9mappV g1YJAF9ILXaP2oypngx5GLlG1KtV3ldqcWEzwYFr/BVRpDPNBg+hwkPOFYfWJTly HCVcpp+n15cmEsNxZuDCZugXC5Fh587RpeVMjRZbU78Wo2TBGEOROF+2FEWG35G2 jGL+CTWEZA2bsxqRWfvLYVvtuk2pNLU5ZcxmYSpuK1BgJiKAE0ZDGDedexCDkbhT G3w2PV68x9kgjrb4DcrnmQo8FOWwTDuan5W0ZrptTSSl54Wr1Y9bOm3fLvxGuuOL DukO4wIDAQABo4IDKjCCAyYwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmG J2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NDcyLmNybDBdBgNVHSAE VjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZp Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAG CCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z aXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDO MBQGA1UdEQQNMAuCCXltb2NvLmNvbTAdBgNVHQ4EFgQU7uzZXhXG9mSY64NFfCp0 fxslkuYwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABiRGcdpAAAAQDAEcwRQIhAKOAlrsmMAmbgZ/F Vxy4m1ZgaTZmSAWnrbUPLmsJIJmwAiBUGWcpQbWfYGgYwW5/guswGTjAnFGUSm2q kojv3cRumAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiRGc d18AAAQDAEcwRQIgVckWDGKAxObRyuQODSoHJF6CCqg7ZdFGU5KV1wIB1PUCIQCq sUIRspmJMfybqT8hHGWRP6PY+rjmJvENfAkp2kShhgB2ANq2v2s/tbYin5vCu1xr 6HCRcWy7UYSFNL2kPTBI1/urAAABiRGcd7kAAAQDAEcwRQIhAPbV0XpbE6nPrvZr 6PytUa0mbbVVIuEaZGkzlx9gpPDWAiBL41ex4J03kV8Vzv3z7B0lDKVV51iIz4Rp 3GP6rDN13TANBgkqhkiG9w0BAQsFAAOCAQEAHzdFizNn1JiPKx+2uvAyB5YlRc6L lEj77TPOyVJdvPgxWti6G4ydzk3Mt+cVS0loBEaYOP5rGdjoGq1WkaiVHkrmzuoj QTEkxcpR8BsIZGicVbgmMhSTQ/jyLbZAzD0Kpin6wEYypnMQO4AmKWEwM3sgvRop jZK7uEFmUiAhxhtOrSrv3+hlPocGrNZW7pSmOFVqmDFmQPa1s9dGusvs5Y7NLAHt 8r2b/GUIso6xMNS+8OUgstNNQ963vW08NLfYzSORX5wxEEyiKg+AVWyWYkzxeIsu /r6TGzf9KJ5V3H4ZTDXHXo6/iJPCoUBwNP6A4GQFUgJRkLL0a5UjBG8gOw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Nx6+97WfScf0UDarV/v NjY7zARpV+upB3Db+nulpbQsvVR5U6r90EiWB9UmhmGIrMyyyiCAA4knHfrMXkS1 3MITKmRiO6zwwS+EPwKBevnHawLo8yeu0xOtqWNBc/riFijaOflVgCsJd+hzQC2z V9+Q0AC7bZSAx9yQ10VvcMBTvA6frxELIqEMsqPWJGpEwyS7r+FWhUyhjs46Z/wc jqyiOL4LXE49l0nrPEItgTHjGNeEeoRAo8fgzArq6geuJCSflJd1l6khAoUpeniq NZw+0N0RzQ1WVf9K2PXcOtQ1i+RBreN+1ekWwVPEblcJBdDJoQ+Gdbvva8Hv7bRZ axPL47PTCmuGGMSR4IljwUV2Mc5JUbakUcBl3q4l82LVcQdvE6rcWDCSJtSqUWyz euMwGSu2BvQvZmqaVYNWCQBfSC12j9qMqZ4MeRi5RtSrVd5XanFhM8GBa/wVUaQz zQYPocJDzhWH1iU5chwlXKafp9eXJhLDcWbgwmboFwuRYefO0aXlTI0WW1O/FqNk wRhDkThfthRFht+Rtoxi/gk1hGQNm7MakVn7y2Fb7bpNqTS1OWXMZmEqbitQYCYi gBNGQxg3nXsQg5G4Uxt8Nj1evMfZII62+A3K55kKPBTlsEw7mp+VtGa6bU0kpeeF q9WPWzpt3y78Rrrjiw7pDuMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3323291299627778119 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 13:20:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 13:20:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ymoco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966309599972221147044973676010194588473183181750403629740941417369362832436354766292430899499160667557295824841034062645388437346621260613751450006319644328788658638560716820569146505091267821128395606382513171361663542373220669661765015970792897369053558582563986483228070261720428356783710045321499517244941348119328115352234024721962383623648907620612282169014338956139409439988590614835065016779173827114661289996846668427065302091286486763961913494640246352691717073749537122872907866226776547964548375488983247396144905958915467670416481244957887978527082387877413119644897677238119420232281257904700718466993675249917166470916915889145512670915541350556619943680187648935196086351034567564939719291566551188911212472848192102065109816329101153299630551190273016823414719885433621988468079722926894586534090342359958248421090174008196758171303531396330608127938755426683386168448883908805896083938411645498740488866883239398758929218129451362903629632329757136798188786895631000241290408301813610757437752100717562048379733637795860154044026350061068661434548439043484333916617512372116370177374599911744920763774800182638308747310948139415028358603942500212625626255076852642495501351367597944840969723157523748964440249798371 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6472.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymoco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eeecd95e15c6f66498eb83457c2a747f1b2592e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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