coinindigo.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 3c:6d:08:da:f6:fb:5f:6f was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=coinindigo.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 3c:6d:08:da:f6:fb:5f:6fSerial Number (int): 4354146151276699503
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 9c:ed:d9:47:a4:58:d7:23:65:81:91:c9:aa:15:a7:64:0f:6d:85:38
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 03:49:52:48:47:b1:f7:52:09:ac:8c:dd:aa:8b:f0:91:5e:9c:e7:ed
Fingerprint (sha256): 60:83:95:e0:dc:ca:bc:2d:b9:a1:af:ea:50:86:c6:e5:c2:f3:62:d9:25:64:f7:cf:4a:7c:fd:1c:41:bb:a7:e4
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7075.crl
Check the revocation status for certificate coinindigo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for coinindigo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
coinindigo.com
Other certificates including the domain name coinindigo.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for coinindigo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgjCCBmqgAwIBAgIIPG0I2vb7X28wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzIwMTcyMzA4WhcN MjQwNzIwMTcyMzA4WjAZMRcwFQYDVQQDEw5jb2luaW5kaWdvLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANLHMWqZWIMfQmUwWTV0xe60GkZ1+IHc NWEvqxjVVm8NhV1neBsatYwcvWcEc9Dba1OrfmIGMnXI02DIRl0H+bMs/cgD6A9K u0n/wehoj3mWSciYYKFU9oQsQe1n0GXXX4WjY+bhpSToSlZJpBJC/nFjij3biS/r IzJkbEaxwrJLrWpborUoClqW4RF/+UKJr6/rgCKlfwI039ve7qTRAYxs5JbzmNMT oxxRKDTO04N2QJFV0eiSw+NX/oDKwT1av7RkDL0nEyrZ2+s9+LxtMiaVyvZ9tUZs bqf1OXPH2FkolXsfX5sO81sgp4KgeGoKvnbpK3vgmNs0flqb4ZKobftacSp2BRv3 IV/r+nrz95uPaJgu10NtjGM6fo00eNeiBDwooEkX8z7MQxLO+aonrQOr0+1FfE7c ZX0F3jd5AoV1E/CKFEye+1IMNkHzUeccmWcEHLFf4nNgrovEWIeTKBuvoL8Lbrye 0WT2n/LamvkQ2l2c1fp74b8+Jz10NWw7mvDKYfb8FSPYFJ2rNP3lcDeYVRwGM3W+ h3phQldCqFltkjTesbo0QFSAEy2sRGWF/qlva4JkU5dbK+dg7yz+E7mS+HA+xh1d IVDNzuh6x7Aj73A5fe1J347HwB862qrF8HSaBEttrDBAgBSuhrOSdl2508MYmCN1 gTschnbzdtKrAgMBAAGjggMwMIIDLDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTcwNzUuY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGQYDVR0RBBIwEIIOY29pbmluZGlnby5jb20wHQYDVR0OBBYEFJzt2Uek WNcjZYGRyaoVp2QPbYU4MIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdQDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYl0U7GWAAAEAwBGMEQCIFgH g/7ftZH/j1YKccwNXtY3rG42EBOzSOyPKL+mOY6HAiAef+RQj39/fFE1qKxlpNnw /ItA0+iZTcEKfekjSXjA8AB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiXRTsmoAAAQDAEgwRgIhAJC8zPdRRO6oBzUd/jKtMsvRWzfLf4RIcbIb xw7C9jXsAiEA+ZuyTRQAQ8KOct2uj0Vt2ENCmV5yh0n5i5dveirrr4MAdwDatr9r P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYl0U7LYAAAEAwBIMEYCIQDo 3OaQdl7xi0VpDaSQNYBvTJ8kJTwXgKUuZTtbfXK3igIhAP013kiW5Yk0KqTpk1M2 I4ewP6qTB5yaTkYh40JOn6R5MA0GCSqGSIb3DQEBCwUAA4IBAQBmXeRsUYUkmJfn RtclbL9ZsUGkG108Ck/jLemR9OdVtXX6uAfSRfjruWwCLaxSnOAikqhcdUfAhVki DHSFZP3R9W0Di37r6cE25RqGypaarWRIFHLs3gOsWi8S05EQd8yu2mu599X6g7BE D/SK0/QJ+DTScaozXIIqQfMfH4VMFvkJ0geyESlJMcH7Xwjq9ftCyiMMQum6HdqM dCD+ppppcmNKpI5DvhqwdFaw98HTJXnU3K7lpGBs++Lsr1B7Ld4crkqSUxL38uGD tP3CiLewF1lp9gWD9GySdHgN/6QtJcj6j295mHtCtAIaNKyDmuGGEK2GL2K/G6se 7FQoPEBt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0scxaplYgx9CZTBZNXTF 7rQaRnX4gdw1YS+rGNVWbw2FXWd4Gxq1jBy9ZwRz0NtrU6t+YgYydcjTYMhGXQf5 syz9yAPoD0q7Sf/B6GiPeZZJyJhgoVT2hCxB7WfQZddfhaNj5uGlJOhKVkmkEkL+ cWOKPduJL+sjMmRsRrHCskutaluitSgKWpbhEX/5Qomvr+uAIqV/AjTf297upNEB jGzklvOY0xOjHFEoNM7Tg3ZAkVXR6JLD41f+gMrBPVq/tGQMvScTKtnb6z34vG0y JpXK9n21Rmxup/U5c8fYWSiVex9fmw7zWyCngqB4agq+dukre+CY2zR+Wpvhkqht +1pxKnYFG/chX+v6evP3m49omC7XQ22MYzp+jTR416IEPCigSRfzPsxDEs75qiet A6vT7UV8TtxlfQXeN3kChXUT8IoUTJ77Ugw2QfNR5xyZZwQcsV/ic2Cui8RYh5Mo G6+gvwtuvJ7RZPaf8tqa+RDaXZzV+nvhvz4nPXQ1bDua8Mph9vwVI9gUnas0/eVw N5hVHAYzdb6HemFCV0KoWW2SNN6xujRAVIATLaxEZYX+qW9rgmRTl1sr52DvLP4T uZL4cD7GHV0hUM3O6HrHsCPvcDl97UnfjsfAHzraqsXwdJoES22sMECAFK6Gs5J2 XbnTwxiYI3WBOxyGdvN20qsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4354146151276699503 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 17:23:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 17:23:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coinindigo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859899616294938502044858910591989157876481754702684349860641155840123476847208264413580333585527741880647026321780744392049450093053363751898191547710446565532397382855785292359383842258279887154724027459443873615455436595142989683691488958034862068143104096554373944113201832065237374962766630152692256155279547244120841714801502841804319290067162264522557041031174671052847458878374543807969023599247839114455212736933955667423650305252808949054216730980162634488208311887820738644410225422911594144089179366572018159783822906690849853528610854086019605287159792202987691375218050909450318220404210950391001440635313923102409251009346706268441435319524782774880415423917652349107249135724934830610785758454521959715865776381980563405398500208986236804562638254678083401033635335924396138917196680591820587481982575791592229749417638038833876030965670357919951898696106094968882297591895735669652833244425121733109684263614062482141876898274873342253684988321059623377908295278563685527117407085937169807072835346779852384945891140317513459182701932070225617221422881056112063003314505242398615114760223159910272645477336320290609366275173361510550280932023682955803437952702077666414922719142988572084923172615946682837432534487723 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7075.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinindigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9cedd947a458d723658191c9aa15a7640f6d8538 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001897453b19600000403004630440220580783fedfb591ff8f560a71cc0d5ed637ac6e361013b348ec8f28bfa6398e8702201e7fe4508f7f7f7c5135a8ac65a4d9f0fc8b40d3e8994dc10a7de9234978c0f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001897453b26a000004030048304602210090bcccf75144eea807351dfe32ad32cbd15b37cb7f844871b21bc70ec2f635ec022100f99bb24d140043c28e72ddae8f456dd84342995e728749f98b976f7a2aebaf83007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001897453b2d80000040300483046022100e8dce690765ef18b45690da49035806f4c9f24253c1780a52e653b5b7d72b78a022100fd35de4896e589342aa4e99353362387b03faa93079c9a4e4621e3424e9fa479 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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