webmail.hkmdirectmarket.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate


This digital certificate with serial number 81:a7:02:41:0d:d8:53:2d was issued on by GoDaddy.com, Inc. .

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

webmail.hkmdirectmarket.com

Organization unit: Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 81:a7:02:41:0d:d8:53:2d
Serial Number (int): 9342438430431793965
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 8d:2f:cf:5e:10:c8:02:16:6a:85:ae:6b:33:dc:c4:f6:31:fe:df:de
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 11:d0:7b:86:4a:82:0f:27:9d:cb:d8:ec:53:c6:5a:33:fd:7f:de:46
Fingerprint (sha256): 39:0c:9f:b3:c8:6f:3d:c4:c3:c9:6a:8b:6a:22:7f:7f:ef:01:18:83:f3:71:04:34:c0:09:4c:a1:5a:f8:fe:d5

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-124.crl

Check the revocation status for the current certificate on webmail.hkmdirectmarket.com
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.hkmdirectmarket.com
www.webmail.hkmdirectmarket.com
autodiscover.hkmdirectmarket.com
hkm-ex1.hkmdirectmarket.com
hkm-ex2007.hkmdirectmarket.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGtTCCBZ2gAwIBAgIJAIGnAkEN2FMtMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE1MDkxNzE0MTMzOFoX DTE4MDkxNzEyNTU0MFowSTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMSQwIgYDVQQDExt3ZWJtYWlsLmhrbWRpcmVjdG1hcmtldC5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDEO+zajb+7008sOCFZXQDROUVSaKu9 DuagmRdcjfIQLF4UMhU2akoCohJnGs+EQFeUPFa3K9vSVpc/PK+H6O13xjWNDdb7 ckDybcRHPb+/egLu+h3htokNmWelMkoDuuj6tcaX2CYh+FuMyMTbl/kiBhq3ZOY7 lYXlkJwTlRY6UhlI3MobMBDRwCIoY9EG3ltcU3QXZL8A5f8o3JBowAMYm8TkiXYL Ucw9EjhKUsDQaB1qUtH6tHOZIYlppYSgF5hdpOhgqu67HxYUcT03zZ8YmD5cJxcM IdM4olqK8814KLP25Eaa5UypVzUpK1lDpZgUI1MfsfTSF8cYy+pZBOE7gu5V5Id3 +XY+EeN0YvYOQtf317XY0BlJ0G3uxRccoBCAmn428epINR1HKwZ473Xih9axRyP2 mMb/f691ukT7O5dXced52IwwyaYYjxtr7VGkCX1zorEc6QL0MYfzPEReCOsAQ/x0 KWOul1V/dPOOjBYcDPva3+95ZjJpq4kL3YqkfCH2aVwyTYNcmclneC7Yoz/DuaPh BY3aaURj7is5rb2ob0lQh2eeJ4EaUy1XMtsXt1MSOMMrZZ6fTkZXZPnzUEegZhm1 N4UYceHNfnZ/Ud7ZeZuxc5I8l6YkPlzr4VRawBZRoSZZbvJikPkG2jEFnw9i0roc r65hLBch+7mAfQIDAQABo4ICMjCCAi4wDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDcGA1UdHwQwMC4w LKAqoCiGJmh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS0xMjQuY3JsMFMG A1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzB2BggrBgEFBQcBAQRq MGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEF BQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5 L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjCBqAYD VR0RBIGgMIGdght3ZWJtYWlsLmhrbWRpcmVjdG1hcmtldC5jb22CH3d3dy53ZWJt YWlsLmhrbWRpcmVjdG1hcmtldC5jb22CIGF1dG9kaXNjb3Zlci5oa21kaXJlY3Rt YXJrZXQuY29tghtoa20tZXgxLmhrbWRpcmVjdG1hcmtldC5jb22CHmhrbS1leDIw MDcuaGttZGlyZWN0bWFya2V0LmNvbTAdBgNVHQ4EFgQUjS/PXhDIAhZqha5rM9zE 9jH+394wDQYJKoZIhvcNAQELBQADggEBAI/Hot592JkF6RZoAlxSDmNoL/MszNFQ QJ4M5ZS7TdElnnRGx//NuJE309WWP8oHb9DjG5y1ireinIPw/WBo1BvETsVesg7e Nj+pPqQ2Q9VW4xxJKWx5kIpCLBJ4CRyToB7rmV4qvNtW60lZOCknpIoFjNW+bgen VD8WrGyZPisnPBPZyoSjqqnLyVcN0YwSmtL+sFp45SOKwpLaLfAabfRtvkxo9oPY D4AfljVO5gsdR7WWAdyQwJ73zjsGUCdOiD/xxqqhfqAziXsPaoGdxvmqhYw79T5D J8IePSUrpc3pKUT+3bNNCgDY2NcC4aaFShklM1b7L+462HhhFZ2YwDs= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxDvs2o2/u9NPLDghWV0A 0TlFUmirvQ7moJkXXI3yECxeFDIVNmpKAqISZxrPhEBXlDxWtyvb0laXPzyvh+jt d8Y1jQ3W+3JA8m3ERz2/v3oC7vod4baJDZlnpTJKA7ro+rXGl9gmIfhbjMjE25f5 IgYat2TmO5WF5ZCcE5UWOlIZSNzKGzAQ0cAiKGPRBt5bXFN0F2S/AOX/KNyQaMAD GJvE5Il2C1HMPRI4SlLA0GgdalLR+rRzmSGJaaWEoBeYXaToYKruux8WFHE9N82f GJg+XCcXDCHTOKJaivPNeCiz9uRGmuVMqVc1KStZQ6WYFCNTH7H00hfHGMvqWQTh O4LuVeSHd/l2PhHjdGL2DkLX99e12NAZSdBt7sUXHKAQgJp+NvHqSDUdRysGeO91 4ofWsUcj9pjG/3+vdbpE+zuXV3HnediMMMmmGI8ba+1RpAl9c6KxHOkC9DGH8zxE XgjrAEP8dCljrpdVf3TzjowWHAz72t/veWYyaauJC92KpHwh9mlcMk2DXJnJZ3gu 2KM/w7mj4QWN2mlEY+4rOa29qG9JUIdnnieBGlMtVzLbF7dTEjjDK2Wen05GV2T5 81BHoGYZtTeFGHHhzX52f1He2XmbsXOSPJemJD5c6+FUWsAWUaEmWW7yYpD5Btox BZ8PYtK6HK+uYSwXIfu5gH0CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9342438430431793965 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-17 14:13:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 12:55:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.hkmdirectmarket.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800565212046594300072537859581354158913265275449221845115066512596654920129931053869020349437684037401396475169960904282783986947929983622755368984242002482741810140675480305990584233018336652067596937735541005916681303684213091831641113657945179397291455645129515402056949203683159144062669310951256637998134819097533520697488496384352449348019687017647123167736413016652786158252657683563362352985293699246174812402367792226249206862485588919917132460008980677959102421877631848773196529820379554734563587755007094459554586090313619591102226124326716818968833911717232403432473982216793051549682193570772180845666725421740383074857367094519605496669784119228166984689346287483099792895699462978485703300021333815619338411175970675713990569277040162301951234669847640604060874998679707975327877017793759375768101075235443861860493616707277623311358454545671231305900004765845717964283243222669160556567185237170208876793291024316422961051092164349908318302299318542743687359811017404460889927414208040388511239324635694912758180080774994457901666432658164036620779767981561834763598426634521987693477258289443823733928228841577638725744839669860124959540393819695622130610858098018286568022513066675028250440100223967880105426518141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-124.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hkmdirectmarket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.hkmdirectmarket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hkmdirectmarket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkm-ex1.hkmdirectmarket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkm-ex2007.hkmdirectmarket.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d2fcf5e10c802166a85ae6b33dcc4f631fedfde . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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