organovita.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number f4:ed:bd:8f:e8:85:cf:b9 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=organovita.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): f4:ed:bd:8f:e8:85:cf:b9Serial Number (int): 17648970940513898425
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: c1:fe:7e:0a:dc:0a:0e:12:8c:a2:c8:12:77:c9:9e:b0:95:18:8d:1f
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 5a:ec:c8:11:78:3b:1e:6c:ca:68:6d:80:e2:3e:1b:e9:a0:c0:ce:5b
Fingerprint (sha256): 61:eb:ef:25:39:61:1c:16:fb:73:74:f6:96:3c:a1:19:22:40:65:a6:75:37:24:ed:f6:31:9e:43:10:d2:f6:aa
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7252.crl
Check the revocation status for certificate organovita.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for organovita.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
organovita.com
Other certificates including the domain name organovita.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for organovita.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgzCCBmugAwIBAgIJAPTtvY/ohc+5MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyNDIzMjY0MloX DTI0MDcyNDIzMjY0MlowGTEXMBUGA1UEAxMOb3JnYW5vdml0YS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDEpiv7tla6Z18PRQp2vAOSvFYW4XLz fXichnjPrdJlWnZ4bnzlBd1sKfjT4kSBsIJhDefVBe0kYKRH+6uEiWQ3EbMv8nIK 87RBqg3EboywAM88AIEei+mrmJR7eYc5h2Bq0iRIDeNvgiR1AIxKWze7op3XHVFR cEbP2Jt4pVA5hw2QLohlm80zvO7UsedxWaOZtwPgHYVaVOZyl3F/p+hCOsakiSnc xBnqoghaAm6DfrKuDfMzVUx6gGIkCpY6WRiU1yc4Q8KtHQPvYi34/iaYWa/xEqB1 Rd4+sCogYKUJAZuqiXoO9Ul80sNE4O2es/gcNi71j8mfFE7AdC+nUG7KZVyniRoi 2S6djfcx/Vfewh1E798nA5mWcvFdSWje/l7YJIZ/V1JjbW0TrZXlBV0RO8hl2FJn cplH3dvf8bwkhqUzHMevlszzZI9nJuURB8XpbdJ/VW4407lhJbit5Zjv/XZv/EUD yaWi46neImKH9QlMMGsSJ7TmMdn0Bed6otlvgWQr+7+QEIBMW18K1zmWIW93QTGy jGZ70aGb1Qu5FSzMHGc6xuhFupE3B8Zl5/xv9X6zcNhhBWjzDAz6JkSK3ZF421N5 SHPFfHwmzchBJSzKnIn2tv5jzfcMTiGW9iUKPz1s8JEXSGmUHVcEjAkTNmlTAgTr XusghrrFz5z5uQIDAQABo4IDMDCCAywwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS03MjUyLmNybDBd BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts s/C0LIDOMBkGA1UdEQQSMBCCDm9yZ2Fub3ZpdGEuY29tMB0GA1UdDgQWBBTB/n4K 3AoOEoyiyBJ3yZ6wlRiNHzCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJijn7VwAABAMARzBFAiAy fFrWeR0YRScVI5Z1iNkgK1F5yLu1ZvkRJ6eQaHT4ggIhAK+hMuzi1E/gZAnahsmn R8F8lUZfOVrvZuIOQ1WRfEUmAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGJijn8kQAABAMARzBFAiAksmh6LadYSrwoLgRqYFYUMEa+GqXb2jMc 7HgkeWHdmAIhANX3BEIUDUWaXRR3HjmgplPbhjbUA4dRYx4eMnfrkoP7AHcA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJijn89AAABAMASDBGAiEA lzQBV4ZQ0z2QCuTTscDfQWJNuE0Sw52Eo+eGWhCXjU0CIQCM0CMmHCMTgLG4aDaQ 3eBPuAGe2gRG9obYYHVm4vxjVjANBgkqhkiG9w0BAQsFAAOCAQEARz5/sJsVUu3O mc76dugJ6dUpkhI2yvbtoNVv/qdUf48gdtKONTTzGqMeOxd7Fxjm1Bs59fiizumD zsR8K2oFwKcWDmTb99FVvFV1fsYN2wGZrUYgwNMHm6OUwX2oMEhtjEz4u3wandNr 27uTQzfDJzzZnFCMf4OPJ3eoYqqaUQlgTTFdnQ3HD9WYlHWlCc+c6p7Vowid30uG sI2MHj7JqiMTPFlXmJ2cs/jPEZFSPFAU3OrLvIThF5TQ/BRB4y2wU45qfNngOc9J AC4mlkM/08nau9ptgKESV3ODHT7aLm6bEgMohqDf+WVjZM3opPOuevBJR72SMdAk y8LPVulCsg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxKYr+7ZWumdfD0UKdrwD krxWFuFy8314nIZ4z63SZVp2eG585QXdbCn40+JEgbCCYQ3n1QXtJGCkR/urhIlk NxGzL/JyCvO0QaoNxG6MsADPPACBHovpq5iUe3mHOYdgatIkSA3jb4IkdQCMSls3 u6Kd1x1RUXBGz9ibeKVQOYcNkC6IZZvNM7zu1LHncVmjmbcD4B2FWlTmcpdxf6fo QjrGpIkp3MQZ6qIIWgJug36yrg3zM1VMeoBiJAqWOlkYlNcnOEPCrR0D72It+P4m mFmv8RKgdUXePrAqIGClCQGbqol6DvVJfNLDRODtnrP4HDYu9Y/JnxROwHQvp1Bu ymVcp4kaItkunY33Mf1X3sIdRO/fJwOZlnLxXUlo3v5e2CSGf1dSY21tE62V5QVd ETvIZdhSZ3KZR93b3/G8JIalMxzHr5bM82SPZyblEQfF6W3Sf1VuONO5YSW4reWY 7/12b/xFA8mlouOp3iJih/UJTDBrEie05jHZ9AXneqLZb4FkK/u/kBCATFtfCtc5 liFvd0Exsoxme9Ghm9ULuRUszBxnOsboRbqRNwfGZef8b/V+s3DYYQVo8wwM+iZE it2ReNtTeUhzxXx8Js3IQSUsypyJ9rb+Y833DE4hlvYlCj89bPCRF0hplB1XBIwJ EzZpUwIE617rIIa6xc+c+bkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17648970940513898425 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 23:26:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 23:26:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'organovita.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802258369508514944969783911490249857636983973504086332474603568172577698661950802193023948215838623121524865116391667306580325070267486232732409557533469162643438550111418930657000627671194523194272695471378298468195115798152474846418429668363479535917563864734511472844678874196565287961029618534115827211318802690229796313088108720292403274006129489732699033333519356595311157574787487367623092824925245965873957775618337895356037352376266932577915839045421373474179695015472979310823163234381573075875360677915068786601088514160567836626035031483723585815467002991929060287220659025760633552968309498847795726372399591876254508840995261720855715097466731965064366415609425098288617829690226908414922608193481515317892126804784783985030285372234990342420335576899176462027177395695978621700764152851210346323787873994990496277605606440604292898762143098377878184037325859646382466145008762339848163889235302802098910065792898145978333877274984838230467213693280291046252123980735123495954352364922844322676223341718345539208116285690822897302403425938772978048061894011263570508060760056913708344802604425137041758805104016654979173032434115760601514082144080157733950737849176975070819186547181664770933126538780264608788998060473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7252.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organovita.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c1fe7e0adc0a0e128ca2c81277c99eb095188d1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001898a39fb5700000403004730450220327c5ad6791d1845271523967588d9202b5179c8bbb566f91127a7906874f882022100afa132ece2d44fe06409da86c9a747c17c95465f395aef66e20e4355917c452600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001898a39fc910000040300473045022024b2687a2da7584abc282e046a6056143046be1aa5dbda331cec78247961dd98022100d5f70442140d459a5d14771e39a0a653db8636d4038751631e1e3277eb9283fb007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001898a39fcf40000040300483046022100973401578650d33d900ae4d3b1c0df41624db84d12c39d84a3e7865a10978d4d0221008cd023261c231380b1b8683690dde04fb8019eda0446f686d8607566e2fc6356 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00473e7fb09b1552edce99cefa76e809e9d529921236caf6eda0d56ffea7547f8f2076d28e3534f31aa31e3b177b1718e6d41b39f5f8a2cee983cec47c2b6a05c0a7160e64dbf7d155bc55757ec60ddb0199ad4620c0d3079ba394c17da830486d8c4cf8bb7c1a9dd36bdbbb934337c3273cd99c508c7f838f2777a862aa9a5109604d315d9d0dc70fd5989475a509cf9cea9ed5a3089ddf4b86b08d8c1e3ec9aa23133c5957989d9cb3f8cf1191523c5014dceacbbc84e11794d0fc1441e32db0538e6a7cd9e039cf49002e2696433fd3c9dabbda6d80a1125773831d3eda2e6e9b12032886a0dff9656364cde8a4f3ae7af04947bd9231d024cbc2cf56e942b2