sanichem.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number d8:f6:9c:43:66:af:5c:44 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
Certificate Subject
CN=sanichem.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): d8:f6:9c:43:66:af:5c:44Serial Number (int): 15633854969762765892
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: f3:42:ea:72:6f:cd:19:7e:4e:17:fd:ac:76:4d:8d:6e:21:c7:27:2a
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 44:f4:cc:0e:d2:92:ca:34:77:05:a5:d0:4e:8c:d0:8a:da:30:8c:88
Fingerprint (sha256): 40:f0:af:96:b8:e8:34:6e:d2:02:ca:66:50:04:3a:70:d2:ac:38:42:a9:0b:4e:fa:bb:40:61:c3:fb:c8:58:dd
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-4966.crl
Check the revocation status for certificate sanichem.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sanichem.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sanichem.com
www.sanichem.com
www.sanichem.com
Other certificates including the domain name sanichem.com
(limited to 100 certificates)
www.sanichem.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
*.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
sanichem.com
sanichem.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
*.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
www.sanichem.com
sni.cloudflaressl.com
www.sanichem.com
sanichem.com
www.sanichem.com
www.sanichem.com
sanichem.com
sanichem.com
Certificate
The complete raw certificate details for sanichem.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgIJANj2nENmr1xEMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIyMTIyMzE1MjE0N1oX DTI0MDEyNDE1MjE0N1owFzEVMBMGA1UEAxMMc2FuaWNoZW0uY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtimCN+OTUf2U+tgTy4vIEAEDpTCXnbnv fVobGadiG/I+Qt3sa7jBz+3I5jnDRUO3Jul3IfxtdCj7IK4WolCf38G0ByY7ndld I+fahKslngl7qxPWtzSGABlkKNmfF19/Q58/iCsdN+sSWs06lxgNYsPNTSWU+kNV kBJLpYTWT2odHzXn+hdYmC96Jz0L9B3CfLIXwrKhLfSj1qlYLol2PY0erLl2HBvj XDWZaZ9/dh7LILMz5djmdEKrskEVMOwZBdocxDfxQNkIgfJPXrW6hXwouPfN5y1l +iRQgaNCPM8GCTidyuqWG+OVoaLGHR+NpwVBrJnGYJct7yx/zdAIQQIDAQABo4ID PzCCAzswDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwu Z29kYWRkeS5jb20vZ2RpZzJzMS00OTY2LmNybDBdBgNVHSAEVjBUMEgGC2CGSAGG /W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRk eS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEBBGowaDAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsGAQUFBzAChjRo dHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIu Y3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMCkGA1UdEQQiMCCC DHNhbmljaGVtLmNvbYIQd3d3LnNhbmljaGVtLmNvbTAdBgNVHQ4EFgQU80Lqcm/N GX5OF/2sdk2NbiHHJyowggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV 2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhT+Te7wAAAQDAEcwRQIgJz4z uY6v04OO1bb+WUDqaLE7TGlwCMqfP/yAsak9s7gCIQDbDhPpVAxxACLAXPwyXrP6 3QEmew6RJuv7GltMjNwNZgB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABhT+TfK0AAAQDAEYwRAIgWigd2+gY8ESF/eJyyZ9mvV7OFun1lW5pqLjr 4ls+R6ACIEYUKZbj3A6P5Pa51i7omSCOftMJFXIGuC3fsH0GAPJsAHcA2ra/az+1 tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGFP5N9PAAABAMASDBGAiEAm3ns rUGzDe3AJ5L2FTiofgCDhp7tjGBCmJBoN5btdncCIQDDdmTThOqfETLUjfeBRJGJ dKhCvfWtExU67z8W0s4OtDANBgkqhkiG9w0BAQsFAAOCAQEAChuHRW38H3mokUaB MYyuP3l7brn/6xYOHJdAUDnQsgOgP0Ntd2zIdYbOP4sM+GgZzeq6vjqqwfJWNK5Q mL5JWHzuvUCXVdlZa0iDnA8WJx0cbpMWDb/VjwI0I0V7z79NPqmxudl3kTzJ21uY ht0sBn5ZVoimpyp17ocQGZ6A31GifqCeeklbGB1F0R9+JTDHKmZCNd1+PxCClzvG +GekYBTGIdz0akrYZHavB53QyL5mhCRb2wReuDTxEOwyQAj93hJf7CKctsAAI7Yi VGm2TuuzEadH5bPZoM+7218rc4VeCzJYtRKHIIVEhPZtjz2BajJax0LRDoAmcrvB xe9NeA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtimCN+OTUf2U+tgTy4vI EAEDpTCXnbnvfVobGadiG/I+Qt3sa7jBz+3I5jnDRUO3Jul3IfxtdCj7IK4WolCf 38G0ByY7ndldI+fahKslngl7qxPWtzSGABlkKNmfF19/Q58/iCsdN+sSWs06lxgN YsPNTSWU+kNVkBJLpYTWT2odHzXn+hdYmC96Jz0L9B3CfLIXwrKhLfSj1qlYLol2 PY0erLl2HBvjXDWZaZ9/dh7LILMz5djmdEKrskEVMOwZBdocxDfxQNkIgfJPXrW6 hXwouPfN5y1l+iRQgaNCPM8GCTidyuqWG+OVoaLGHR+NpwVBrJnGYJct7yx/zdAI QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15633854969762765892 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-23 15:21:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 15:21:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanichem.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22995840189559454821228664864155294972365584474698969564996508789858891687275292691151908899763535538439218669214122450640740730622340366621980347303953585411874686376611766264632905082086070835819656725905250271300895432914311287806514544484627946061201501625447434422775039972094305407369726102217485925010479994650988623825915527242398752849169686041718700324497002948354513161253097038538596606919281246162020806321962303242944891311408480974054844226186101282773514234116099102073037239799369111524097366087811812133783892298788317224414074017178426445749934088545984058565745102526884168646228221821594656311361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-4966.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanichem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanichem.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f342ea726fcd197e4e17fdac764d8d6e21c7272a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000a1b87456dfc1f79a8914681318cae3f797b6eb9ffeb160e1c97405039d0b203a03f436d776cc87586ce3f8b0cf86819cdeababe3aaac1f25634ae5098be49587ceebd409755d9596b48839c0f16271d1c6e93160dbfd58f023423457bcfbf4d3ea9b1b9d977913cc9db5b9886dd2c067e595688a6a72a75ee8710199e80df51a27ea09e7a495b181d45d11f7e2530c72a664235dd7e3f1082973bc6f867a46014c621dcf46a4ad86476af079dd0c8be6684245bdb045eb834f110ec324008fdde125fec229cb6c00023b6225469b64eebb311a747e5b3d9a0cfbbdb5f2b73855e0b3258b5128720854484f66d8f3d816a325ac742d10e802672bbc1c5ef4d78