agetrue.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 0e:ef:b0:ac:ff:a5:4d:df was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=agetrue.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:ef:b0:ac:ff:a5:4d:dfSerial Number (int): 1076273093034724831
Serial Number lenght: 60 bits, 8 octets
SubjectKeyId: 3e:0d:32:8c:55:17:38:7a:7a:7e:21:f5:92:63:eb:89:94:7f:47:d8
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 81:af:09:d1:4c:5e:e5:76:cc:7b:ff:30:44:ca:3c:e6:76:0b:0e:87
Fingerprint (sha256): 3a:e9:1b:1d:64:58:96:bd:0d:12:f2:bc:b3:20:41:c5:77:21:fb:bb:3e:f7:3c:18:a0:d2:23:32:c3:15:7a:53
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6793.crl
Check the revocation status for certificate agetrue.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agetrue.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agetrue.com
Other certificates including the domain name agetrue.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for agetrue.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgIIDu+wrP+lTd8wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzEyMTE1NDE4WhcN MjQwNzEyMTE1NDE4WjAWMRQwEgYDVQQDEwthZ2V0cnVlLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAOHkc2F0l52iafuiYaZyZmRk6vlrAC2X2kii GQuOwvCYGGSkfs5utBdmt0fVO7zsub5JwymjHK8VVrozLTpVjdro66WRvjccnR04 rV6hGGwYSiwIwdybvIp/G0toJGcGD5RoeGy8krUQzAGueQRpY06xOS1WC46m6POm mYbaS/K4BwbOwoDykPGhskWz+y5I4VrLJAIRjQXZoyvOvgRNa8eWhp0/XfFNDK3N Hksd2bDbxqxmFIF1eOv9YwUkSe0OTOOgAp7Hrhf7vZM/WOdgclIb6w/Wo8JpSlNP crYbkbx3e/HrhhAabEieVpx0sc53zMbCZnMQ81gpvV6xXNS7S1w96jdM0rMPEKY7 mhUAZ6BnP2+Xgb+1DBJCOLqkjhTuBvGUA5AXMk+v8pEiDQG6Bgw5S0ldClZS3QBj dK87AnRLjxVMg0sf14SScTQmius+qxBb3J1JOq5n6uQ+FNMSKJS8Y0PAkplVKhan 6SRcvFn9nUiAM3bMspgGbjMIX8uyvEaQHXZBorqZNohEqUToskpxWRsVF+MZALOS UCtvsvCQpJRI7Xh5jkpdHWKM+jnzfxfrrg61iOW+K+rrtaba34fARd1ejRtssG14 9t8dH3+PMvqxVRAKruxz4PRAoyfe03DsoCKOdgIsNZPxnQs87K1vBnNQFkYYCcHO aAAnxQP3AgMBAAGjggMtMIIDKTAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCug KYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY3OTMuY3JsMF0GA1Ud IARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRp ZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYB BQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8w QAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVw b3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQs gM4wFgYDVR0RBA8wDYILYWdldHJ1ZS5jb20wHQYDVR0OBBYEFD4NMoxVFzh6en4h 9ZJj64mUf0fYMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuzdBk1dsazsVc t520zROiModGfLzs3sNRSFlGcR+1mwAAAYlJ88MRAAAEAwBIMEYCIQDOgzy3WCGP 0RjgDLlng7L7zwuwsX5slkNKRANKmVlukwIhAMxijaTKmLVRDiac1Ptqssw0aUQg f2XBKYHJZPdrTNsHAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGJSfPEOgAABAMARzBFAiBy34a5xew8l1c5sQfGb2AaXopSjLW+OVDldNDAS1tZ 6gIhAON//q3Yh8KaUU8NAX+r8uklJV7fZ7ZfvNuHSQvmwdEnAHYA2ra/az+1tiKf m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJSfPElwAABAMARzBFAiAIudROMk0f JZ8WQBBMuVyVxXuIsz+Cehq+FCG6XuAP/gIhAN9DBZj2kyxVGlSbVpFvenaEAsKE 8mmTm4R67AJZXvMvMA0GCSqGSIb3DQEBCwUAA4IBAQCYwSWPenKZQ5uZes5tsAIR CcLCKYrT1+FWsO68vZF9+QASQXdMu/A6uhkw4R3rerOp2gX8ADMeZuMXf+2vQ/uJ XPgn8LanxXlKAa9Cfp2v5RFpEekmIj7wAlSQhatlJSTKMlVxp64JBCh+YMS4h4w+ VClQE1g4VNwmv5q1HOIB7TSBvIhqHd1g7AzA9zPa+P+tvXxdQ0GGxOu3bQuLnD9w RiudllpcD4GzsSo0eOEeFCO9XniTbE1vW7u8QMu7C9xAXEXTnmlk7i54km+XO3/u nej7ENl2jtmQaqNbba1/Z6nFUEMfv4UJ8EzlLtIkRBqxMIeZGQ2yLXJBfjhUHOzi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4eRzYXSXnaJp+6JhpnJm ZGTq+WsALZfaSKIZC47C8JgYZKR+zm60F2a3R9U7vOy5vknDKaMcrxVWujMtOlWN 2ujrpZG+NxydHTitXqEYbBhKLAjB3Ju8in8bS2gkZwYPlGh4bLyStRDMAa55BGlj TrE5LVYLjqbo86aZhtpL8rgHBs7CgPKQ8aGyRbP7LkjhWsskAhGNBdmjK86+BE1r x5aGnT9d8U0Mrc0eSx3ZsNvGrGYUgXV46/1jBSRJ7Q5M46ACnseuF/u9kz9Y52By UhvrD9ajwmlKU09ythuRvHd78euGEBpsSJ5WnHSxznfMxsJmcxDzWCm9XrFc1LtL XD3qN0zSsw8QpjuaFQBnoGc/b5eBv7UMEkI4uqSOFO4G8ZQDkBcyT6/ykSINAboG DDlLSV0KVlLdAGN0rzsCdEuPFUyDSx/XhJJxNCaK6z6rEFvcnUk6rmfq5D4U0xIo lLxjQ8CSmVUqFqfpJFy8Wf2dSIAzdsyymAZuMwhfy7K8RpAddkGiupk2iESpROiy SnFZGxUX4xkAs5JQK2+y8JCklEjteHmOSl0dYoz6OfN/F+uuDrWI5b4r6uu1ptrf h8BF3V6NG2ywbXj23x0ff48y+rFVEAqu7HPg9ECjJ97TcOygIo52Aiw1k/GdCzzs rW8Gc1AWRhgJwc5oACfFA/cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1076273093034724831 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 11:54:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 11:54:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agetrue.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921560530799685028967834237731201836679837478871730405867140306072708849112950497610684173528060858455480933156910570292215009238498425993115311310068074022457309330824606478236493212627938126375603512333591766879383313564301104253186141978479028471298028783052043081622578636744275431693896895314324992198399292052856602159280654984354086322020001036308683520226972006920784228175022978203106677046595513505821808377890436691707529606632521157456736371436869050918365550280013757498911011557443295313362688933372667106058364023547889896862699281815541473687993017272945602340834111779206706747002194150662576398448696386887076113364672094741340047996373159301202507679565962936463756237411011684811569441325944774462973690765707220055549883522990875280289405421375453803510647289219571194141302294914862036693048384277294641228968019222226322785085645020569331778729817398966099344233571396198566626751766390796544757385060526925769464330558630361687438893762835350113981038746667259234268917996055297067627179764560440358505523351506932346715891395963332530639779568560997851798728433074748083918410401205145731273566190088695045998376757401200548772475216150779885276569133739960181024762610498312135751540485680254961528556815351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6793.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agetrue.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e0d328c5517387a7a7e21f59263eb89947f47d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018949f3c3110000040300483046022100ce833cb758218fd118e00cb96783b2fbcf0bb0b17e6c96434a44034a99596e93022100cc628da4ca98b5510e269cd4fb6ab2cc346944207f65c12981c964f76b4cdb0700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018949f3c43a0000040300473045022072df86b9c5ec3c975739b107c66f601a5e8a528cb5be3950e574d0c04b5b59ea022100e37ffeadd887c29a514f0d017fabf2e925255edf67b65fbcdb87490be6c1d127007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018949f3c4970000040300473045022008b9d44e324d1f259f1640104cb95c95c57b88b33f827a1abe1421ba5ee00ffe022100df430598f6932c551a549b56916f7a768402c284f269939b847aec02595ef32f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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