*.br1.runscope.net
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number c3:46:2b:25:0c:19:e8:54 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.br1.runscope.net,OU=Domain Control Validated
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): c3:46:2b:25:0c:19:e8:54Serial Number (int): 14070981523882502228
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 3f:b9:b3:83:b1:15:a3:e9:dd:32:4c:f4:80:69:b8:dc:77:e4:a0:a3
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 0c:a0:42:98:83:d5:66:77:d8:0f:47:58:81:c0:df:1a:54:fb:ac:84
Fingerprint (sha256): 36:a5:4f:a6:b2:4b:7c:f7:20:18:3c:a8:bd:9d:14:02:75:1b:de:af:12:f4:67:86:fa:96:7f:65:0a:ec:ba:b1
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-804.crl
Check the revocation status for certificate *.br1.runscope.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.br1.runscope.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.br1.runscope.net
br1.runscope.net
br1.runscope.net
Other certificates including the domain name runscope.net
(limited to 100 certificates)
*.us1.runscope.net
*.us1.runscope.net
*.us2.runscope.net
*.runscope.net
*.us4.runscope.net
*.br1.runscope.net
*.runscope.net
*.eu1.runscope.net
*.us1.runscope.net
*.au1.runscope.net
*.us6.runscope.net
*.runscope.net
*.sg1.runscope.net
*.runscope.net
*.us5.runscope.net
*.us3.runscope.net
*.us2.runscope.net
*.sg1.runscope.net
*.au1.runscope.net
*.jp1.runscope.net
*.au1.runscope.net
*.us2.runscope.net
*.runscope.net
*.br1.runscope.net
*.runscope.net
*.br1.runscope.net
*.au1.runscope.net
*.us2.runscope.net
*.us4.runscope.net
*.us1.runscope.net
*.eu1.runscope.net
*.hk1.runscope.net
*.us1.runscope.net
*.eu1.runscope.net
*.au1.runscope.net
*.jp1.runscope.net
*.us5.runscope.net
*.us3.runscope.net
*.jp1.runscope.net
*.us1.runscope.net
*.in1.runscope.net
*.eu2.runscope.net
*.br1.runscope.net
*.sg1.runscope.net
*.us1.runscope.net
*.us2.runscope.net
*.runscope.net
*.us4.runscope.net
*.br1.runscope.net
*.runscope.net
*.eu1.runscope.net
*.us1.runscope.net
*.au1.runscope.net
*.us6.runscope.net
*.runscope.net
*.sg1.runscope.net
*.runscope.net
*.us5.runscope.net
*.us3.runscope.net
*.us2.runscope.net
*.sg1.runscope.net
*.au1.runscope.net
*.jp1.runscope.net
*.au1.runscope.net
*.us2.runscope.net
*.runscope.net
*.br1.runscope.net
*.runscope.net
*.br1.runscope.net
*.au1.runscope.net
*.us2.runscope.net
*.us4.runscope.net
*.us1.runscope.net
*.eu1.runscope.net
*.hk1.runscope.net
*.us1.runscope.net
*.eu1.runscope.net
*.au1.runscope.net
*.jp1.runscope.net
*.us5.runscope.net
*.us3.runscope.net
*.jp1.runscope.net
*.us1.runscope.net
*.in1.runscope.net
*.eu2.runscope.net
*.br1.runscope.net
*.sg1.runscope.net
Certificate
The complete raw certificate details for *.br1.runscope.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIJAMNGKyUMGehUMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE4MDEyOTE3MjIwMVoX DTE5MDEyOTE3MjIwMVowQDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMRswGQYDVQQDDBIqLmJyMS5ydW5zY29wZS5uZXQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDS0DGr+A1sXi6Cqa9RphT1cRpSsE/Vg/2/Mxm1q2Kd zdA/i1ntNKotnJzEcDj697bXBtVHcNCwwdKcRJp4ZX7szLU2524D+9GfRo20n3sX LphQYaV3WsJyZbTkzhHhgDYGA//b3D1fOMvCi2Pu83jq0y0Ni1gvP8euDB+roptW Ik5sE3ZQqtJKEiTjxj4eUWKhs8qXYbtPv4tLE7NsIn7YKCIL3lnEPz2iPaak22MX NpzI3VZB71ZuRBOVQQx2UkzXVbWdtn3UrQ+eGgdbVbyQTHH61Pob1cNEryZtvrG0 iUI2f67w9GiBhMqKpwGkxger5PMeQe33HaKrm1cKmSqjAgMBAAGjggHCMIIBvjAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNV HQ8BAf8EBAMCBaAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5nb2RhZGR5 LmNvbS9nZGlnMnMxLTgwNC5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5 MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl cG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGG GGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNV HSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAvBgNVHREEKDAmghIqLmJyMS5y dW5zY29wZS5uZXSCEGJyMS5ydW5zY29wZS5uZXQwHQYDVR0OBBYEFD+5s4OxFaPp 3TJM9IBpuNx35KCjMA0GCSqGSIb3DQEBCwUAA4IBAQBQu1KGGRov2b50yCOFfZo2 izUmrzGMYFPQ6IPqzVzUquoa3vLeLAekHYcG54rx4/LdkVUOA9BPTw3BlQiallDl 84UtN8gDsP0rvM88UlUUP9lk+NKOT6qH/iYGesA4fc+83WSxaaDpSW7m/iIo5hWn PKLCf8vxqzr2yZpm0TZyhJmrrOKyY74VzpEGm4DNDuX1XTYbDJgFIv99Crcgq1es 7ByG0+VrEIvkWdLeXEnIZ6lNw1kqKXI2W93P2zx92WQMD6Gs1BKkM2Ynhgh0L+Re 6NP4M2OcxoKhRh7z124tN3HHRCRosoVpyGRba8MIRv61bWxx0Z6MV2JJjXaWK/LF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tAxq/gNbF4ugqmvUaYU 9XEaUrBP1YP9vzMZtatinc3QP4tZ7TSqLZycxHA4+ve21wbVR3DQsMHSnESaeGV+ 7My1NuduA/vRn0aNtJ97Fy6YUGGld1rCcmW05M4R4YA2BgP/29w9XzjLwotj7vN4 6tMtDYtYLz/Hrgwfq6KbViJObBN2UKrSShIk48Y+HlFiobPKl2G7T7+LSxOzbCJ+ 2CgiC95ZxD89oj2mpNtjFzacyN1WQe9WbkQTlUEMdlJM11W1nbZ91K0PnhoHW1W8 kExx+tT6G9XDRK8mbb6xtIlCNn+u8PRogYTKiqcBpMYHq+TzHkHt9x2iq5tXCpkq owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14070981523882502228 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 17:22:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 17:22:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.br1.runscope.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26612708345558288281825023352950935773954226154158097473728009992311371410812730340620522935548394550166615222888537134068511054728353978637518113569378094636168425002881936765190052162004379062469855327509726606414705345754072133030557214520510520086778752375321367842678524762384938369882349687444754926581483351786109002193721304061976520896629496607878758474508459825985421928400480624507737834321552243949204888373402828828947855566545841696878905178105390916491674492183605417260988536339286901024412481174884090684708032077004935529171188155706223861077983964851688202715466330942499511890157062644371442707107 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-804.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.br1.runscope.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br1.runscope.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3fb9b383b115a3e9dd324cf48069b8dc77e4a0a3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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