4oi.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 1c:3f:15:29:e4:2a:79:10 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=4oi.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 1c:3f:15:29:e4:2a:79:10Serial Number (int): 2035368826260584720
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: bf:04:34:f0:49:8d:3a:de:9f:38:8d:c3:ba:7b:48:6b:2f:3d:e7:92
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): fe:ba:25:13:fb:5d:72:76:f7:c4:c2:4e:2d:cd:d3:b9:43:24:9d:1b
Fingerprint (sha256): 4b:51:14:d7:af:e9:87:7d:7c:b7:a1:0f:42:2d:2f:4e:ea:d1:fd:15:81:d7:93:d9:66:5f:be:ae:7f:6e:cd:65
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7267.crl
Check the revocation status for certificate 4oi.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 4oi.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
4oi.com
Other certificates including the domain name 4oi.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for 4oi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHcTCCBlmgAwIBAgIIHD8VKeQqeRAwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzI1MTIwMTQ4WhcN MjQwNzI1MTIwMTQ3WjASMRAwDgYDVQQDEwc0b2kuY29tMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAoC6fcqK63hXj5MvGQcu5lFMWjlVqfLjRowXh6RbX wuoaZW2w5Vqno90LHBgYJ94PgXsblrfGHFzoqQlub9LKL+pFFBuv1kDTYOYKGQcV T5r3LCSGp+Z3pbvmpNqSKgqvDVtGkbLWXF0CTbxnEhMTFHZDJfIOTm2Jl2JMjVMs r4zfvhh3hE5Bmg0uwC8LHT/W5xFS4YkOL2MTaLmh2iiuusfqNI0F5o82Y1rEbrKp DBSPqIjpOCAgsvofAFOj6pA2r2qxPIjWVVIpYAkGaOTvDKSY/FESMqW54k1XQb2I rlycICX/UzskCLkcoe69fWBXKwTCIwYXq7SHLQSvrX1iC/hHi0UmdMtmnr0Qstuu mUrs8N0jzZauDCZU+ZvZK3gE8zQ7Kkc7z41Gh8MAhAmOXlbeFfpqmquA3r4KbJLE 7+YAyWo1FwPziqElP8sd9ylX8zLTvVVkIIlsG+i04/QLukIAdwv/v7iyEWtMnNuF I8ZkNh0hDxZ6aUdUr+BKgYA4z+pdj+yd+K07k0ohpzeOZNGSZKr/F4iKcrcYyr8S J6K/l8nAyW9McLUYb/hrKfVelV9aRDrpGqJCD/g9LrzcGgC3DEZPid+QH5bK1p+K F+WWe0OWsr0wJsyr037s7bZ7kzdTrhFDqBuffxaQEBNEVimYOBCZaOnE0PS86nKG xacCAwEAAaOCAyYwggMiMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6Aphido dHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzI2Ny5jcmwwXQYDVR0gBFYw VDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNh dGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcB AQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggr BgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0 b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAS BgNVHREECzAJggc0b2kuY29tMB0GA1UdDgQWBBS/BDTwSY063p84jcO6e0hrLz3n kjCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUA7s3QZNXbGs7FXLedtM0TojKH Rny87N7DUUhZRnEftZsAAAGJjO1KlwAABAMARjBEAiAz0tZ/OfsCSOgqExCb8Ze2 uXk4RjAQQzjuaQ9hjEzPyAIgKM9uB+xi1GAeMNdSX5rWXoVUtOJJJR+NN2DPSish C24AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYmM7Uu3AAAE AwBGMEQCIEeTQiNu71Qo6zYm5aw2hVMBqV68QNbaaWCfdjJJ3XdaAiA1IdraGmZ6 z9QmAAPgltz5tYs/sPNIbMThtUwdXxvMYAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7 UYSFNL2kPTBI1/urAAABiYztTB8AAAQDAEcwRQIhALC+x+ArTESYJMfUeVjVUBPj zO4bdA5CfBA3z8ppjZtsAiB+0UAoS7lrmrSHcG+5Qe94913/a4lfXLbL+3iBBF5+ sTANBgkqhkiG9w0BAQsFAAOCAQEAYAkViwWTOI8sHptzpoYPEQ5P7N5FkOhG/RTI JYaNdu/kNOsqLhwVmA2KhIIFsejeXJxV3vgkSnEc/TiJJyQ6C4l38H/eemlLDBsp VUJDw1sD8FjdiBV8T1jCkOkZOiI82RVw2oJL+AWlMmXmKoeGcUxd72mvV3aRQmGf laI3QGVVYxj4Y3Xmv/rURPS1SJfJmlBdMkw1SlkrwEreFQ+l+TfTp2g0oSfIiO2H tJsWyizat90C/cpZEy/8MLQ0/tL6Ly0JNDZr5IIuWUCGTQsvfDXcV8umk//8yD3U ZnT/2FQMU8vlVNkbmbRdukJ7o2Kx7jNIOYNRzBt2Zmqq4cIUDQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoC6fcqK63hXj5MvGQcu5 lFMWjlVqfLjRowXh6RbXwuoaZW2w5Vqno90LHBgYJ94PgXsblrfGHFzoqQlub9LK L+pFFBuv1kDTYOYKGQcVT5r3LCSGp+Z3pbvmpNqSKgqvDVtGkbLWXF0CTbxnEhMT FHZDJfIOTm2Jl2JMjVMsr4zfvhh3hE5Bmg0uwC8LHT/W5xFS4YkOL2MTaLmh2iiu usfqNI0F5o82Y1rEbrKpDBSPqIjpOCAgsvofAFOj6pA2r2qxPIjWVVIpYAkGaOTv DKSY/FESMqW54k1XQb2IrlycICX/UzskCLkcoe69fWBXKwTCIwYXq7SHLQSvrX1i C/hHi0UmdMtmnr0QstuumUrs8N0jzZauDCZU+ZvZK3gE8zQ7Kkc7z41Gh8MAhAmO XlbeFfpqmquA3r4KbJLE7+YAyWo1FwPziqElP8sd9ylX8zLTvVVkIIlsG+i04/QL ukIAdwv/v7iyEWtMnNuFI8ZkNh0hDxZ6aUdUr+BKgYA4z+pdj+yd+K07k0ohpzeO ZNGSZKr/F4iKcrcYyr8SJ6K/l8nAyW9McLUYb/hrKfVelV9aRDrpGqJCD/g9Lrzc GgC3DEZPid+QH5bK1p+KF+WWe0OWsr0wJsyr037s7bZ7kzdTrhFDqBuffxaQEBNE VimYOBCZaOnE0PS86nKGxacCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2035368826260584720 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 12:01:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 12:01:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4oi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653486037620255357210088489074617157391002424117291703447958123100848142784289008671171342264229065203976520448663580676479559433468780022729461584694949232972949469095554742375206779526697998047886687043144953588735597926176098716064890662589454805111929154798992571046100384911300901667446716339868243009543952451030069853377986527278608376164019807295745548568332050519586709583059254414675333051245520904435806363338922961998448081811288506562831487957614564528437880519043292455651225787886000412645978990959653185323065809009994244796794328244898280573094821076496482496338977068645638942597714387292687587601515665409798474677411735904702341993740218106391685939135250895022703479165308572886589601344373443857179838639715339136853315783970820937694538141002846370138418343006372892098680459691555765097736780098246028915453589716671342899420654000582715576356413280507346074652015916773117800775622888038329440349882402308466924048661957430556339405738841098604508024354998675028985345876924284070009585414933166708461591872525004832029745783391496233974232674069321794202044242786258045549692263930477870466761725206682189465564027194650776508318313402982128319287043606427330885395237433486582238779258072907096160473630119 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7267.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4oi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf0434f0498d3ade9f388dc3ba7b486b2f3de792 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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