mail.plummerslade.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 47:7d:8d:bf:4d:26:20:52 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.plummerslade.com,OU=Domain Control Validated
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 47:7d:8d:bf:4d:26:20:52Serial Number (int): 5151429401554329682
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 48:e7:2d:3d:f5:07:89:32:fe:97:2a:6a:7a:ba:b7:ce:16:08:79:16
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 31:c7:06:b9:ad:e8:4a:12:ac:94:28:4f:8c:72:28:11:f1:77:61:e6
Fingerprint (sha256): 3d:12:85:00:3d:2e:75:f7:9f:14:09:4e:68:a7:df:ea:71:6c:4e:63:74:1f:64:c1:9e:dd:ac:92:64:f2:3e:32
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1974.crl
Check the revocation status for certificate mail.plummerslade.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.plummerslade.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.plummerslade.com
www.mail.plummerslade.com
www.mail.plummerslade.com
Other certificates including the domain name plummerslade.com
(limited to 100 certificates)
plummerslade.com
mail.plummerslade.com
www.plummerslade.com
www.plummerslade.com
www.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
www.plummerslade.com
plummerslade.com
mail.plummerslade.com
reportmanager.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
www.plummerslade.com
plummerslade.com
mail.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
ncentral.plummerslade.com
plummerslade.com
mail.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
plummerslade.com
www.plummerslade.com
ncentral.plummerslade.com
ncentral.plummerslade.com
ncentral.plummerslade.com
www.plummerslade.com
www.plummerslade.com
ncentral.plummerslade.com
reportmanager.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
www.plummerslade.com
www.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
www.plummerslade.com
plummerslade.com
mail.plummerslade.com
reportmanager.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
www.plummerslade.com
plummerslade.com
mail.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
ncentral.plummerslade.com
plummerslade.com
mail.plummerslade.com
mail.plummerslade.com
www.plummerslade.com
plummerslade.com
www.plummerslade.com
ncentral.plummerslade.com
ncentral.plummerslade.com
ncentral.plummerslade.com
www.plummerslade.com
www.plummerslade.com
ncentral.plummerslade.com
reportmanager.plummerslade.com
Certificate
The complete raw certificate details for mail.plummerslade.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIIR32Nv00mIFIwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjAwNTE4MTkzNTMzWhcN MjEwMjAxMTQzODE5WjBDMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0 ZWQxHjAcBgNVBAMTFW1haWwucGx1bW1lcnNsYWRlLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK5CiP6eYXNkAshu3ZNDmYBVdyzpEFRCRSA8sweH EFEVLGqNffoZMdk56L4++mqAYq83n+Uc6TS5slTn6MuaB6uf4Pm+Zeo7+Zcalphe 1G4u2o8q+9A9Z3G3Wd6GqWZmIW50bXZ8FKrBNMHVhltvSMriceROn7Tq4z7ze/ka ct5fow05cDM18U8cxujReUlEFBtTECJgicrJpai3g0kf/gKK48KO98c570YZLdsp wM4MiDuS7e7JGSj44BuT8dgMzocZrGvL27QwfhNMDJZrHWCrWFkPjsrrdUf8o25q fL7Zl9CGqDTofwquf1UiE8kSp/m8FyiSZCp4l2AcqNIJ/PcCAwEAAaOCAtgwggLU MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4G A1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFk ZHkuY29tL2dkaWcyczEtMTk3NC5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcX ATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t L3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUH MAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDov L2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAf BgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjA7BgNVHREENDAyghVtYWls LnBsdW1tZXJzbGFkZS5jb22CGXd3dy5tYWlsLnBsdW1tZXJzbGFkZS5jb20wHQYD VR0OBBYEFEjnLT31B4ky/pcqanq6t84WCHkWMIIBBQYKKwYBBAHWeQIEAgSB9gSB 8wDxAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFyKUjn0QAA BAMASDBGAiEAwJBvWIswEPSKiv/BZ64JH7LYxow+u1/7z+5qCFzjy9wCIQCM/+Bq 3tbcwP77KhOxeKLa+DIcPZHsOnEWlWFJjf0hZQB2AESUZS6w7s6vxEAH2Kj+KMDa 5oK+2MsxtT/TM5a1toGoAAABcilI6VkAAAQDAEcwRQIgWDXb6pSFWzKrvPEWMkkw 9Db+h1jPJ0poopLXh8P4BU4CIQCrMRqvMb8dk0HztFPIWHG+X5jSpuY/XJasE9nN JoyeRzANBgkqhkiG9w0BAQsFAAOCAQEAJ3heFMaYOPVULZeWW/tPEsiac9+S88bs DDYnomaZCICzi/FKNl1mK4QC8QRuPT3YQdhoeuVAkw5uJgDGSXxhxMFVN7slLdYt AwMEASiL0JQu2MGW0HEhpClomExR7Iv4LdhLIaz9y9XuTTeioBEXH0aiTsdHbIsU 0wzIdc90KPIRAdNGHD/H0wMoF0HEFtB3FLLI34i0ZDY5d+9bKi44iJ3VLM02KTbw cNMWIE1sMfqNMNfTzse7Kyppmcie5m/zd9ROGxk6oLncgC+DCydJ5JWm2aMIU3sr GyYZV4D++iXH6ppowBsOEX3LOMrYO9aAxzfy55D0s6gKcbcrXFCBZw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkKI/p5hc2QCyG7dk0OZ gFV3LOkQVEJFIDyzB4cQURUsao19+hkx2Tnovj76aoBirzef5RzpNLmyVOfoy5oH q5/g+b5l6jv5lxqWmF7Ubi7ajyr70D1ncbdZ3oapZmYhbnRtdnwUqsE0wdWGW29I yuJx5E6ftOrjPvN7+Rpy3l+jDTlwMzXxTxzG6NF5SUQUG1MQImCJysmlqLeDSR/+ Aorjwo73xznvRhkt2ynAzgyIO5Lt7skZKPjgG5Px2AzOhxmsa8vbtDB+E0wMlmsd YKtYWQ+Oyut1R/yjbmp8vtmX0IaoNOh/Cq5/VSITyRKn+bwXKJJkKniXYByo0gn8 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5151429401554329682 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 19:35:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-01 14:38:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.plummerslade.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21998274762082021864501708520702833808086261176510979080745196129320387954138691159259403824509711156834707064051564141962664390480246254264789953094009549935146868337193749461184115329207172936359531973507186428417618733954387841142990384459062733093436770169612627578910696644831644522640482227923496380032853629159177290570881696715082568281960914869207379874465359620373808047418366805907310122023281546183674807650994193255417956776718109774089664196424449010229286562015460388268313864587713084955647622473117238381630966163128835800939139211452234976131725261576333400562216371585461548947574296096541275454711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1974.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.plummerslade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.plummerslade.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 48e72d3df5078932fe972a6a7abab7ce16087916 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001722948e7d10000040300483046022100c0906f588b3010f48a8affc167ae091fb2d8c68c3ebb5ffbcfee6a085ce3cbdc0221008cffe06aded6dcc0fefb2a13b178a2daf8321c3d91ec3a71169561498dfd21650076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001722948e959000004030047304502205835dbea94855b32abbcf116324930f436fe8758cf274a68a292d787c3f8054e022100ab311aaf31bf1d9341f3b453c85871be5f98d2a6e63f5c96ac13d9cd268c9e47 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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