wavenaturals.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 30:e7:1d:41:16:84:44:23 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wavenaturals.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 30:e7:1d:41:16:84:44:23Serial Number (int): 3523817398828549155
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 4a:02:cf:5e:f2:1b:2a:2f:49:30:7b:11:63:9c:3f:51:dc:ac:da:e9
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 6c:d5:07:7c:62:cc:a1:5b:7a:ff:26:b8:c1:b9:a5:12:d6:c3:15:99
Fingerprint (sha256): 7b:4e:81:b2:38:4d:b9:16:a8:51:d2:e8:2a:b9:33:37:7e:27:3e:4f:be:ec:92:e7:da:d4:bc:47:64:07:b3:dd
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7213.crl
Check the revocation status for certificate wavenaturals.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wavenaturals.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wavenaturals.com
Other certificates including the domain name wavenaturals.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for wavenaturals.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgIIMOcdQRaERCMwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzI0MDEwMjAyWhcN MjQwNzI0MDEwMjAyWjAbMRkwFwYDVQQDExB3YXZlbmF0dXJhbHMuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAupsBYx1j8GQP5yHrHFrbJJ8GF4cp 2yjpaHzfziK/e284GiwXbvHryA87dzdOlQdxFEI4GyFTL3TPY7Aut+cFeVGT2uJ3 3+ydSWi+4L51TSsZwTTmhrfpHgAjxFlepZwB2/6nP3qIAd7YR+cJjmxXdqPlyWvi Pb7Y9mP6hu68dsDVoDdSDFYbvj5lYViglYdcBxtFPlC+Qknpcb1mMqqj1JFHywvR FFeA1yCYDyhMZx8L/+a2w78WmrtrWjec4kw+4PzTAA7n1hF9u/BOzSLHrxtw0AQP fqNZFpfYM1sd0rapfHLzJ2fTtJEXQzkyvb9gQRKu82qCf5c6sqwPkHDHXNcBLZkt 10GQG1/tHwKGiJXlqxsmSgeWCAKIXBMm3otJ9mo3hxOWk+uOs/qdbxtFxg0a5mNt YoL/Swsefvw5dfVT1vq+vrJy1W4iv9HCWoeHwMaRkEy3UtYR1V1urToG0jUL3ejc IyAynfRjAHNfytz2xWLUkuZFSouhLrMkDtSszZPf9xj8tUrsTKFZukAIQG11pgvN aNegpI7BtjvJxFD1eWRNYTEo5H2ykDCCAk9lJzL05DijHVn3DwvtVcKnI4pcbWDs nahVXdwsj/qptxNSKFGEE7blMWzSaPfFeFRrJgghrmejT/Qqe29vpILLsVryXg83 SfD5YugXKXnXKikCAwEAAaOCAzIwggMuMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAv MC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzIxMy5jcmww XQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8v Y2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2 BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHku Y29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNv bS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7 bLPwtCyAzjAbBgNVHREEFDASghB3YXZlbmF0dXJhbHMuY29tMB0GA1UdDgQWBBRK As9e8hsqL0kwexFjnD9R3Kza6TCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJhWroKwAABAMASDBG AiEAvD8pLYK3z1XJkntiNj9/H+DScUgDMqwPEA9rexaM4Y0CIQCPzwkt7tjl9Bk7 X32vsOymX4tdseBHZd4/3Z4DNd0eFQB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABiYVq6QYAAAQDAEYwRAIfXelAVvVm5jxx6g18GtCCfqMAVbj1 6S/HJhqK1Ted1QIhAJsahYdweGmigkuDcevRN2VzUkhX7t9h00tDwXuH+Kl0AHcA 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJhWrpfQAABAMASDBG AiEA5/d37m5O/6MDyYLJZ9L53bEVhRun8FIk2NPH3F9FHAYCIQD52ud77v4wP/86 /bh5pMF4XnmndmIBx2OG16zqD1kcsDANBgkqhkiG9w0BAQsFAAOCAQEAPoa24n0K qG+o0Mrv5eoMy82UorI3oRgFbBpV67LhgyS2Z7Se15SSdnS4VoL+/NvPWpKaBqA2 Zpz4ZrcHuaxtzhoipvw/XgJyM1k69ceHxA+KhSFaC8vfuiuf7p3Y3IeINIOOcMud bXAa7yIi8vgVL9sGinsTenm78mVTULGvicvk58bkluGRQBvj8iy+YBa43561Ks5i EIxkQUFy/x6XlOjGFZ7K8CKlwcEKmtk+d4y9s2HnJBehO8dkAFsUYA5syM3RBdcS z051oLx4x56DmJIlLlXnJe1DkSrDvmlJaOqrtDRfoIlxLvCL2mxBOwfzUfEiOmHH mAjXyFgOfAA//w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAupsBYx1j8GQP5yHrHFrb JJ8GF4cp2yjpaHzfziK/e284GiwXbvHryA87dzdOlQdxFEI4GyFTL3TPY7Aut+cF eVGT2uJ33+ydSWi+4L51TSsZwTTmhrfpHgAjxFlepZwB2/6nP3qIAd7YR+cJjmxX dqPlyWviPb7Y9mP6hu68dsDVoDdSDFYbvj5lYViglYdcBxtFPlC+Qknpcb1mMqqj 1JFHywvRFFeA1yCYDyhMZx8L/+a2w78WmrtrWjec4kw+4PzTAA7n1hF9u/BOzSLH rxtw0AQPfqNZFpfYM1sd0rapfHLzJ2fTtJEXQzkyvb9gQRKu82qCf5c6sqwPkHDH XNcBLZkt10GQG1/tHwKGiJXlqxsmSgeWCAKIXBMm3otJ9mo3hxOWk+uOs/qdbxtF xg0a5mNtYoL/Swsefvw5dfVT1vq+vrJy1W4iv9HCWoeHwMaRkEy3UtYR1V1urToG 0jUL3ejcIyAynfRjAHNfytz2xWLUkuZFSouhLrMkDtSszZPf9xj8tUrsTKFZukAI QG11pgvNaNegpI7BtjvJxFD1eWRNYTEo5H2ykDCCAk9lJzL05DijHVn3DwvtVcKn I4pcbWDsnahVXdwsj/qptxNSKFGEE7blMWzSaPfFeFRrJgghrmejT/Qqe29vpILL sVryXg83SfD5YugXKXnXKikCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3523817398828549155 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 01:02:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 01:02:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wavenaturals.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761283979997805710054856323130460754068286765392936586371405955214445518930755121748476894802128395928663769297874291995069442245298253879686132106325881849896686098821588331884742945935043276391553673432116336801393212482268619377021662984132003929555970467031163583571284732032144605037871712746145044034558359855047377542272646725459234580125166283327127973717142440119865262231709081079969343890426782983276908879716763919968051119854639255804031092876708523613711053473585367531364833516431112274426920313920248085013729398058487513246449851957357046404584551432555053806780157367685385574672060144549805730417871438169693562749442585222297037745977434916738720999202835200600415810854983253673109473375978241454474486828432357049437211799729596225228247223884275418840591154664765057738377847896169434222576524390939363614417517155919880995941480308524205624086940283723159186419460449266406001204730728447450797393661615536697536747440835443618789592499364662252324855384304175732139864286881450473852387554426774561931985077182452565063769243622750435496267341776532409785313119164762944480834552066034609935699415412310301184580005149270186143087706456097280413201214787949169848306307861259384667937023873908047603075328553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7213.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavenaturals.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a02cf5ef21b2a2f49307b11639c3f51dcacdae9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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