justnutrition.org
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 7f:a4:4d:0f:c2:f6:94:9d was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=justnutrition.org
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 7f:a4:4d:0f:c2:f6:94:9dSerial Number (int): 9197561069088183453
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 5d:07:38:a3:9e:05:f9:22:ca:67:91:30:e5:d6:c0:25:40:ae:f3:39
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 19:96:4d:1c:a6:28:3d:f1:40:0e:45:04:24:bc:1d:c1:9c:29:f6:eb
Fingerprint (sha256): 47:6b:7c:88:b8:e6:5a:93:12:13:9c:35:4c:34:e3:d0:a7:d6:10:46:63:31:b0:38:e6:a9:1a:44:16:dc:3f:27
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6654.crl
Check the revocation status for certificate justnutrition.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for justnutrition.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
justnutrition.org
Other certificates including the domain name justnutrition.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for justnutrition.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHiTCCBnGgAwIBAgIIf6RND8L2lJ0wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzA1MTk1MzAyWhcN MjQwNzA1MTk1MzAyWjAcMRowGAYDVQQDExFqdXN0bnV0cml0aW9uLm9yZzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKmI6SzgWNSIDLi++F3Nybw/wk5k zS2Ol+DbPNvg3Iv3Jc/gUDhG+mho2GYAOjThlwTC96pAS1FvacD4+zVr61a/SnnC H8PUQDgDw5eqwxJrjXVijifsc3qWpItN7EWYPq69BIVNozCeem1shMXvk+m3BnHb o6826NJizrGeaJP/gGOCpgB4qgGHNp5dDf8MC/7WrBFPPWARxygDtRprNyz3csbD faoDziaFhkMvvJkBkw433kikTXaRsBTWVwyH2lYPS+LVUJHDZ9iAeE3ePAoEqTpP h4AmP79CG9p5vNFvVSIB2EfLkGpr9E1eyVOsN/AU4KqrzRm7VOdHIE7OlfBDoWJT /jd8DLeBcMLSU1u8RS3wvUQcJkMAGYj6kgszxJr+gQ3Kk0HfozOnnCJJ02R3ZA2e nnKtWwNfxT/oFdMo97qV16MGWcIxh1tQ7RuCVaf9lDbsst7K8YuLUYDOlvXf914S kedpXvyVO5UElGji0MgYRY6Ka2Lvg8pYLUjtmTJoqjAl7UyQeJO6lTtpT3LkLD8r 8itp9NFJdLkVxP9CcowqLrz8t3mzpy0EosL/0TgTKFb+UE8pTExRKx4G0iGisl+t edDPU9mBl4C5KCfC8TjKUcvY8np1HglB8RY2Cv3kdzr07qT7K3ww5sS3OUZOdpu0 DNXB9A0zLFrk9C1bAgMBAAGjggM0MIIDMDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEw LzAtoCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY2NTQuY3Js MF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDov L2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEw dgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5 LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5j b20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX +2yz8LQsgM4wHAYDVR0RBBUwE4IRanVzdG51dHJpdGlvbi5vcmcwHQYDVR0OBBYE FF0HOKOeBfkiymeRMOXWwCVArvM5MIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoA dwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYknnYwWAAAEAwBI MEYCIQCUNn1Gayn1C2Latv81tyi47kHFvnLj0ow50U5M5RuoRgIhAKmJEVOHzOJq idOpMWIHRqaGQNSlq+AjTOfqHl5RruvlAHcASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGJJ52M4wAABAMASDBGAiEA9I8oG6it0OSDb5gm3nqCq6Yh qT0anvMYoNLc0UJRGuoCIQCrs4KHzHRkHZovVTk2CY48iQ++W00wYc6zoDSgooQZ HgB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiSedjU8AAAQD AEcwRQIgUuCQAI3AOgUxvBwCAwlw//Ug5IJodoLp8jVodnU5U+0CIQDyi+MctRd3 XxwP9aMtBaSuAZ5lL4DGnS5rIqoXs1zecTANBgkqhkiG9w0BAQsFAAOCAQEAjIPN d72lyfq40mNSB40alXRbZGRwvyfxB9C/Ub62DFSFZmBKbSwawW3AF63UAYxPd1su hDuW4njuRqlJZjePndyikhV+gwCQDHxA3WiF1b5bvBMobX2kS6zkXcP9IZ88DCh1 NF+deTO6fp1R16rXxc9OVyawsMiGtcWsiZRXPi26EExSdnnUo5fmjyV8sM5QDXI/ s/VAw1sRanUDhYqm+GDGrFO80YcmwANR913Yw9kOCLmrz36hbblNEoLACjEOiguG 7egM+mYMJ/D4uBg5OcLx6VjKVmNbo0GOHjE4b9Rcf/01DJqnbOY88HigOP+H4YQn fl+XQIl/TlvIo3U49g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqYjpLOBY1IgMuL74Xc3J vD/CTmTNLY6X4Ns82+Dci/clz+BQOEb6aGjYZgA6NOGXBML3qkBLUW9pwPj7NWvr Vr9KecIfw9RAOAPDl6rDEmuNdWKOJ+xzepaki03sRZg+rr0EhU2jMJ56bWyExe+T 6bcGcdujrzbo0mLOsZ5ok/+AY4KmAHiqAYc2nl0N/wwL/tasEU89YBHHKAO1Gms3 LPdyxsN9qgPOJoWGQy+8mQGTDjfeSKRNdpGwFNZXDIfaVg9L4tVQkcNn2IB4Td48 CgSpOk+HgCY/v0Ib2nm80W9VIgHYR8uQamv0TV7JU6w38BTgqqvNGbtU50cgTs6V 8EOhYlP+N3wMt4FwwtJTW7xFLfC9RBwmQwAZiPqSCzPEmv6BDcqTQd+jM6ecIknT ZHdkDZ6ecq1bA1/FP+gV0yj3upXXowZZwjGHW1DtG4JVp/2UNuyy3srxi4tRgM6W 9d/3XhKR52le/JU7lQSUaOLQyBhFjoprYu+DylgtSO2ZMmiqMCXtTJB4k7qVO2lP cuQsPyvyK2n00Ul0uRXE/0JyjCouvPy3ebOnLQSiwv/ROBMoVv5QTylMTFErHgbS IaKyX6150M9T2YGXgLkoJ8LxOMpRy9jyenUeCUHxFjYK/eR3OvTupPsrfDDmxLc5 Rk52m7QM1cH0DTMsWuT0LVsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9197561069088183453 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 19:53:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 19:53:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justnutrition.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691641673668719300349904350678236849933266219428640615903843475277922660606623583037770534075750364299620495894446366725653674905060767276201322460678848252736138196678378684713811431224025825558227011942430276444896293356243431595989510793210750372751051253489266754218660281770884459297314273234741922319073677303469229346506405281082893433800049399673189744829705821392265517179006339389984085283099410706209496670592609582744978421748829228461802874452131735802698042278873505375124102345812349268855223658567805741953988037036682922305343243189615676608447232235822285575803390561185525671661481244586596068630932341714540892588688201707839225515451174929402070400897137750512621580805925648588839045554839710840995089810999034382050097727445349804468989021099427770861856885628598140914767268230712690403304194214379324312537294419207912742535022082868157412122356007811980994805115911550443532587388278640016888081409175447486018457497413437632294001065238690760548213086041856306706870171142677210206325367812294423629892254181065187685433099991400914103256468313706948126899051331097962018035568125547898641638142593045813144218899210839549076502626083681910023400911519112355041267786767470890474449636322025317981045927259 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6654.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justnutrition.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d0738a39e05f922ca679130e5d6c02540aef339 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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