travelvale.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number a1:08:43:ac:8e:5f:87:96 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=travelvale.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): a1:08:43:ac:8e:5f:87:96Serial Number (int): 11603598848322144150
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: a6:7b:ea:80:e9:ca:fb:60:d0:76:e1:d5:88:15:10:11:84:d5:94:88
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 5f:8e:7c:05:d6:e7:00:5f:04:98:8b:b5:9a:f3:b8:aa:88:31:68:d0
Fingerprint (sha256): 35:d6:0f:c7:c9:8e:8f:a1:08:c6:d5:eb:fd:c8:f0:ae:96:0e:36:c8:79:99:4e:39:3c:13:ad:eb:81:a1:4b:85
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6791.crl
Check the revocation status for certificate travelvale.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for travelvale.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
travelvale.com
Other certificates including the domain name travelvale.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for travelvale.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgDCCBmigAwIBAgIJAKEIQ6yOX4eWMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxMjEwMDUwOFoX DTI0MDcxMjEwMDUwOFowGTEXMBUGA1UEAxMOdHJhdmVsdmFsZS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzYC7MkzlzVSz8+xDW34d7LAaRemdd SQWONQHeEV4IQISf5KhsVmhwvvUqVXUKbjkBlIak7fHnZMX3PBMA22Bf/BXh5Hfs bF1rj41latWWhSTsMtKLqqspvAcgqKxkyESITHrDIOcmF7hT7PpVCkbYTDtZAK4H mryfIg2MFmhslM8dLhW/AhvA9ILo/tDTpc62LPvrVicgfWGHumG8LHHADl6hUiz2 XE1W1lQ1A4mpzJs28iZerG0rbx0n3UFQNhcfeappAG0+i0mYq297acR8/n6T7EAY g4QJxhe+CUMuaEzPA9L1+Akaqu9hAzeBMq95PiI9UJ1DzmAlpara6QQgKjQKog8y 6bf+iw89uP5VnxFhPARy83e4BSddi41vxwUWtWEDF8WNK6xokEEcIOS/ifAC9bvx MBeo4/PaGnOUUUUNn0QRrwkRFgHhJpYWhqMFKTyDqihGQQMcM64ZFlaJF//qlsCi rOhJ9PCsPt7VONWU8iSa/SyTBGHAdTMWEFYALlCOCzl3DHq5TthSs1YyiD++y+qC 3FgKc8OrFDlh9135s+azTdqrZrR03EJxYra+KI9VUkEOfcLSIS7NAZvUco5QXt2l tU3Scus7UJftDAdwnKanmgQ7kOxMNAV8j7ApRLQ+NqulG0Kll3wBC8j+EvfD0j+2 XhvKTbbZbRvWawIDAQABo4IDLTCCAykwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NzkxLmNybDBd BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts s/C0LIDOMBkGA1UdEQQSMBCCDnRyYXZlbHZhbGUuY29tMB0GA1UdDgQWBBSme+qA 6cr7YNB24dWIFRARhNWUiDCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJSY/R0AAABAMARjBEAiBL Kpng9PwLOH+EazD8IsUAgt7FPtWHvYwSMW6GRpvNJAIgH+zxIMmS84qV7QEl7E67 wYO2sCZW7bdsLNj0GlT2TPcAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r OdiEcwAAAYlJj9L1AAAEAwBGMEQCIFY3VHFl1d/njNUQFrGhJohINpiKMmRBcJ5e VlPahU0/AiAJ6sUGSa5ZVB1j99WDvqpk/L3X/tBj4fLxFbsDCtZHhAB2ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiUmP02kAAAQDAEcwRQIgbDm3 +WbsSgy7pbNmF5QN4pBw8b6x8MUY1py4c3hgv0ACIQD/7D4V+HZSzbLmuLq2syNs nWM9huUP6sb5WRWQMMyoHzANBgkqhkiG9w0BAQsFAAOCAQEAih9n5oqXbadzE2bA f9Nbu2XgoxtTKFkkKzEim2jhko/fPV2pzm9dBVE0uisDD8DCurdKHGSVThRvrWwu dFc0Y4Nmq2Go/MxDTWB9bhHuTmyaV9GUqUZYy+jkia4ww9svsBbwdzYQhdjyZPK3 2z6H6qH3QIfzbAxg0lpac7c5XipCP1H5jhAIDCLtOaWcbnz/WPGpwLoDyU2O3b5s FBSSbR8Bv34qGlRrrzFg2v6vUPSRXMJrwzz8RWUXlXX8wCNpEYc+sMX+acWqnjJL H5YkNZabLH2y2Y8ndpVqGo/+oO+5bFJDV3JGPbHV2Stmvm1zhsKqU2T/ZCTY8HAN IHU2yQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs2AuzJM5c1Us/PsQ1t+H eywGkXpnXUkFjjUB3hFeCECEn+SobFZocL71KlV1Cm45AZSGpO3x52TF9zwTANtg X/wV4eR37Gxda4+NZWrVloUk7DLSi6qrKbwHIKisZMhEiEx6wyDnJhe4U+z6VQpG 2Ew7WQCuB5q8nyINjBZobJTPHS4VvwIbwPSC6P7Q06XOtiz761YnIH1hh7phvCxx wA5eoVIs9lxNVtZUNQOJqcybNvImXqxtK28dJ91BUDYXH3mqaQBtPotJmKtve2nE fP5+k+xAGIOECcYXvglDLmhMzwPS9fgJGqrvYQM3gTKveT4iPVCdQ85gJaWq2ukE ICo0CqIPMum3/osPPbj+VZ8RYTwEcvN3uAUnXYuNb8cFFrVhAxfFjSusaJBBHCDk v4nwAvW78TAXqOPz2hpzlFFFDZ9EEa8JERYB4SaWFoajBSk8g6ooRkEDHDOuGRZW iRf/6pbAoqzoSfTwrD7e1TjVlPIkmv0skwRhwHUzFhBWAC5Qjgs5dwx6uU7YUrNW Mog/vsvqgtxYCnPDqxQ5Yfdd+bPms03aq2a0dNxCcWK2viiPVVJBDn3C0iEuzQGb 1HKOUF7dpbVN0nLrO1CX7QwHcJymp5oEO5DsTDQFfI+wKUS0PjarpRtCpZd8AQvI /hL3w9I/tl4byk222W0b1msCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11603598848322144150 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 10:05:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 10:05:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'travelvale.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731789067966464869567572673120391489380304055299334702232416265472076400765193483397847704275810802013397806778573090802885141274736952615292951948131923256701997622750288844630108650960911680339941738739886155351741283480964844412560694856235612760134483640862207151032003058835843970257383269710751745800473745954587574442468199978832160229940842490365794764601605527955493336398504406822274578889562004956248800147086487678565278766637196854719151606657857761680121884738649602746469075462257407850595041576365288276303266332889484570955304706755634022072352354061180493281052837454127950491537076199331701396325525746660679721786407556347324996593456175555751410404156829008505739347792011053603929099116948735923829835444995964783315281783055055726732213231865458614959560707562580147844654853833867610289742617790358137927435996055958918613643094174589994939484268419651110569887688946788729624576653517647053683337052567218985456749684794879137539879246212236350964411538459678269148279968190011535870326393635106810281180681452158412431813573294134350953490426821286757647327029862207122916416743443980316403564004535844850600629339951399506315797172341556934925853831713974291421464024498753458356254130743023703111392548459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6791.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelvale.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a67bea80e9cafb60d076e1d58815101184d59488 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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