bonitabeach.org
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 40:9a:02:41:9b:12:b2:c4 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bonitabeach.org
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 40:9a:02:41:9b:12:b2:c4Serial Number (int): 4655035645638652612
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 37:26:c6:61:35:48:4e:48:97:a7:0a:6f:7a:21:02:37:1b:04:72:66
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): fc:82:7a:20:a3:d6:60:5a:6d:b9:e4:00:8b:b0:07:f3:a8:b3:dd:2b
Fingerprint (sha256): 73:c4:e6:01:c4:63:48:57:63:e5:a6:78:48:9f:06:5c:95:8e:7e:04:b4:08:b2:cf:c1:e9:0d:c9:73:49:70:54
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6825.crl
Check the revocation status for certificate bonitabeach.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bonitabeach.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bonitabeach.org
Other certificates including the domain name bonitabeach.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for bonitabeach.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgzCCBmugAwIBAgIIQJoCQZsSssQwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzEzMTExMDU4WhcN MjQwNzEzMTExMDU4WjAaMRgwFgYDVQQDEw9ib25pdGFiZWFjaC5vcmcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCvyhwjVtgsqMoIxOBGfJxlFzAcCjL2 LJmOa79kUXUM04yhNDQO5tpOHX57dUlz0h551QDl6N2fgPVgYPoijVtfqMhiH6lb p0+5ZBat0/WG18tUsKxd8pGtBz+l9K+MeiGlcPVXGF/9ND2o9vks4lQxTswrhZ9m sRM9ZyG/F0ZNUYwC/h4GV1WC0TuB1PLMr10NV45EokaiET1YQCzOpXdCBbeTVl5l t2u1V3j/mO6voug+lChnbyxIoxWTfRv+SWtew6tLrdmP4KTGJOH9iFKjqCR5rIXi rthpsapqTrX1M7oy/938xdC2gapkabVPZ1haVsH2FC8J3Y/f9jHacXIHZtJgnbJ8 i9Z+K9vWKpaIkgu67Zx8jfTnkDz6HdZCx5F998aIyXdAqYUlYetQafeEPX7pKK5v uWGbIQ5BG4A5ryF9qBfQIJRxGSwTWDoj3jkrOShIVRkSeaNS6YNnhZ/8h/cTkxWo TFBTYQYu/X8ZHH6OpKbC4rFkaQ1ziow7zUO5CRCGykg6TwpYW9l/awHnr2A4RiZv Lank6Qju/qSkXFfP1H2u5vYBuJoA8e8CyWyhyVIVM2i4y293YwOJBn0ZEsBKMtZa 9ArVTotsNrZiLNlGguK+YgoxT8jLrDAIxznTq/xKSPEzM1ISAAdFeFzZHixOt0dN XC7eb75UgALrowIDAQABo4IDMDCCAywwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02ODI1LmNybDBd BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts s/C0LIDOMBoGA1UdEQQTMBGCD2Jvbml0YWJlYWNoLm9yZzAdBgNVHQ4EFgQUNybG YTVITkiXpwpveiECNxsEcmYwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N 0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiU7ycIAAAAQDAEcwRQIg OSlvW/lpQbOT5Gir/fOOPgoE1P6L+6PTDlI9d4rrhGACIQCYlyGmv4Bsy8VKmrDQ oXBm7sYoX63rVJmMLVM/se1zbwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABiU7ycZ0AAAQDAEcwRQIgUQsOtFQTBrjd/b6YC0vVoucAllYRslv5 EyB72Nq8CH4CIQCJOOVafKBWJcbp3SjMht4K5BQZhMtEAfzlMRGfnqzf0AB2ANq2 v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiU7ycgIAAAQDAEcwRQIh ANaPtvL8iJGBi3KedZdIM52QpgnF7grcvRSUEqqztaMvAiAFgtky31935SrIfwjl D8pvmRDhWcsVpllAV7zjTk7AIjANBgkqhkiG9w0BAQsFAAOCAQEAWvy/Xyvktlvp FHNlrHyGPiU9ZQINyjzIFgD+SzD/NgWKHxPCsVI0e9dtKzIkFKrT6P5S8wkkE7UC DXveuYil9A5m1eQtG1uC50InHYydqTaOVGl8eZ/QWGojiZtSMvb12tCArKNQDH3P 0NPOUroxcaQnc6YPvo5eXBaon8pIO/naFGqgSp8KFnc79cf3xyrwKu16AFB1FCzL 5ZgIgTlDTl8OclL3gNZcv6kp7vyFuy4W3SfzH32ydKMzrrq2U+5JdP0QzctXIsVo L8/3TWWtdMm3GOfy25a6yTyXhfffTTJd+lnyTbEGwWkqfIRZZuXOisVmVoiSk5Xv VI3rcwNhYw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr8ocI1bYLKjKCMTgRnyc ZRcwHAoy9iyZjmu/ZFF1DNOMoTQ0DubaTh1+e3VJc9IeedUA5ejdn4D1YGD6Io1b X6jIYh+pW6dPuWQWrdP1htfLVLCsXfKRrQc/pfSvjHohpXD1Vxhf/TQ9qPb5LOJU MU7MK4WfZrETPWchvxdGTVGMAv4eBldVgtE7gdTyzK9dDVeORKJGohE9WEAszqV3 QgW3k1ZeZbdrtVd4/5jur6LoPpQoZ28sSKMVk30b/klrXsOrS63Zj+CkxiTh/YhS o6gkeayF4q7YabGqak619TO6Mv/d/MXQtoGqZGm1T2dYWlbB9hQvCd2P3/Yx2nFy B2bSYJ2yfIvWfivb1iqWiJILuu2cfI3055A8+h3WQseRfffGiMl3QKmFJWHrUGn3 hD1+6Siub7lhmyEOQRuAOa8hfagX0CCUcRksE1g6I945KzkoSFUZEnmjUumDZ4Wf /If3E5MVqExQU2EGLv1/GRx+jqSmwuKxZGkNc4qMO81DuQkQhspIOk8KWFvZf2sB 569gOEYmby2p5OkI7v6kpFxXz9R9rub2AbiaAPHvAslsoclSFTNouMtvd2MDiQZ9 GRLASjLWWvQK1U6LbDa2YizZRoLivmIKMU/Iy6wwCMc506v8SkjxMzNSEgAHRXhc 2R4sTrdHTVwu3m++VIAC66MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4655035645638652612 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:10:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 11:10:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonitabeach.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717158557656227632843042029057616328210379950217311944646999264587198977329686839439169790911933618311082618944995871245036457197546328781112042812107862607570211911524826231369666503458111754131350284807935345854566737375429852252938209482008778309654383851263127475065641685919642816184797886493019873195145877695927936501908447604432971525934698579441689532499674558444375129642981751588262768679698760197733228571049838478010200008721477685111656305878771653750927085299856265374431710133224172015139930430922206422579820217344225155044649550878288959433153977357607740435616844237488886505773197628577094706298982745106355710628673776089681980877575661533842545132172837360473057446002685597002758334017281716707707800108199747151179833103267875553978543916300734526405587979938728373242697267262661307477766094246175581407453800935316244728740802218760551945979262465406651632817699411056328848725902854089503671025152846283105774705909480515316061449558760658483918715166479359603890740626053009571109334989893032664338354260892063225775869469307517605072965611045575202404290170378233594982886878988594879892648592928607164990648503861209125903288046649231486199526137072168430362310073784303627237964646978526431227070835619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6825.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonitabeach.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3726c66135484e4897a70a6f7a2102371b047266 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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