benchflex.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 8f:a9:a8:eb:c9:da:d1:89 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=benchflex.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 8f:a9:a8:eb:c9:da:d1:89Serial Number (int): 10351990949145137545
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: fa:3c:02:f0:e7:3d:4e:66:a4:a1:15:89:06:a7:eb:a4:a4:75:91:3b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): c0:b5:71:43:bb:1f:11:73:3b:76:48:11:3e:e2:1e:c2:2b:a1:c2:4f
Fingerprint (sha256): 7f:9c:8b:56:66:d0:1f:b0:38:46:19:05:39:cc:bc:78:5b:f5:c4:06:25:9d:cb:83:78:8a:ff:a0:18:d0:80:38
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6753.crl
Check the revocation status for certificate benchflex.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for benchflex.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
benchflex.com
Other certificates including the domain name benchflex.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for benchflex.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfzCCBmegAwIBAgIJAI+pqOvJ2tGJMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxMDIxMzgwOFoX DTI0MDcxMDIxMzgwOFowGDEWMBQGA1UEAxMNYmVuY2hmbGV4LmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAN7wFMTC5qyfW6kviv2Psk1Xe4WmSFH3 WzSvYTAlYW/w1RpDHUXJBqdXd5bdCsf8e6MxUW9LzPyZKY2AwRdLQArtheJ3nCIN 7uPFPgfP/it3SASDv9TqZXa1VRwwiMnJr9DMtJ/hmFb8FSZOT08ouMWQ4eqmkx6Z iHEzJov6hqY0LuN3nN5p5mgy1HX3OMfKeQAdtYCdMOkRsGcecb53FhmWlt/g6qO0 O8zWxh6oMtHIWZUKaxSgBSCBL43f+66UoUgcaSp7JYAkS/zbIwhZWtwdxjQC5L2r gjnZqOMVaupLiGqTots7O6vARL5UMIOHaMhSsJrHAEKkOH76SziinvuexA3FYUZF 3WXtZPP7A7FaET0hSUyfHl6IujzIA8Re21icJ6NlrOYDroEtxKsnjDeGOaXFtEhb e1Xj5dQLhmQJWY9NQr1kaUSFodiSLuORIrjjYE+gE6jCqqSc+aXypHiP3YJsRF6m /U1jkcB4MpBCQNkZf1gb2un40pzx3XyvzM2Awpe1je29gQDPh7MARouqXbgBjf96 klbtexmuxZHV2P/keWY4oGnomTW+g8IRAbtQFHGBg2FXayaq9w0FlbBJPlvQUQzZ epMs5SfZncE1kHAaBE9loMJ3rwV9PgIizkaRLdCbCB6ltkJJRlY28ocTdqp57CTX IrUn+89XoBjXAgMBAAGjggMtMIIDKTAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY3NTMuY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGAYDVR0RBBEwD4INYmVuY2hmbGV4LmNvbTAdBgNVHQ4EFgQU+jwC8Oc9 TmakoRWJBqfrpKR1kTswggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV 2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiUG9jo0AAAQDAEcwRQIgDtAB 71GsksXH2sl5iXOrkwqiHKWgMkPJL+zdhqRgDW8CIQDvEBXksylReFAlKddgPGNf 6pfBozI78tm04WtE+aN0JAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiUG9j6sAAAQDAEYwRAIgEfOQUNMAPrrLwLVG/92qPfRs4DMDJCMKStTB QT9L8akCIDZbasH2OWYXFAcbfqHlTkFIre1ZOXDp8fmRKdqxUJCUAHYA2ra/az+1 tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJQb2QFAAABAMARzBFAiEA892t d0pZGxAhZ/IUfzqPqmMrNWpY6Qr+ed6Mg2TE764CIH/4Ld1tlhdwR5e0qvifQzh+ 6SLKGHNS0erUd+0UelkLMA0GCSqGSIb3DQEBCwUAA4IBAQAJSawobXlrkKHUXhjW 0zjDLkOGX3Cp+jmGGnG4jmSvNIdZa+ba5pZFdJcQkvlUtAasMIv15vDqFe0yrm4+ cwVjYYaKdgHqzcwGUbJK+hIbH3K1mkm8yfMNAJMqTEhiZWB4LLyeVBNgX5kKXv/J qPqyw5DoI3pUu+tK+JTD8FkfnSfHIRkLqaDuHH0BQV4v5tZgAaZF7fm8Yn4mS/NK dOraE26NVU8BY4I9XuYQ5fL6Lp5Be5m/RsHUUnvKD0+joQJkBlmUVIBgiy8ANZXC n6p5jTVe2mJ+yWcH8GNqTCE2/A24xkBJ5tXQWHL/81Txcwg0OKQvKxqFpXN7RmZV JcmV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3vAUxMLmrJ9bqS+K/Y+y TVd7haZIUfdbNK9hMCVhb/DVGkMdRckGp1d3lt0Kx/x7ozFRb0vM/JkpjYDBF0tA Cu2F4necIg3u48U+B8/+K3dIBIO/1OpldrVVHDCIycmv0My0n+GYVvwVJk5PTyi4 xZDh6qaTHpmIcTMmi/qGpjQu43ec3mnmaDLUdfc4x8p5AB21gJ0w6RGwZx5xvncW GZaW3+Dqo7Q7zNbGHqgy0chZlQprFKAFIIEvjd/7rpShSBxpKnslgCRL/NsjCFla 3B3GNALkvauCOdmo4xVq6kuIapOi2zs7q8BEvlQwg4doyFKwmscAQqQ4fvpLOKKe +57EDcVhRkXdZe1k8/sDsVoRPSFJTJ8eXoi6PMgDxF7bWJwno2Ws5gOugS3EqyeM N4Y5pcW0SFt7VePl1AuGZAlZj01CvWRpRIWh2JIu45EiuONgT6ATqMKqpJz5pfKk eI/dgmxEXqb9TWORwHgykEJA2Rl/WBva6fjSnPHdfK/MzYDCl7WN7b2BAM+HswBG i6pduAGN/3qSVu17Ga7FkdXY/+R5ZjigaeiZNb6DwhEBu1AUcYGDYVdrJqr3DQWV sEk+W9BRDNl6kyzlJ9mdwTWQcBoET2WgwnevBX0+AiLORpEt0JsIHqW2QklGVjby hxN2qnnsJNcitSf7z1egGNcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10351990949145137545 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 21:38:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 21:38:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benchflex.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909506942268416824598405573505294299329316505270067258276434622649639158375285085515115769543037727998389264136702134775944853818801470731061434670435974961051814433752459914913918852712233262587252107650627256681608446789322679535679941568855812741356635461154723266441491020066288452646964124655462433894188977640124399464854148414578410546818382819191492570779253801127431732878054185088275303590842453338382419739608416111205268836358146289713661099766788470631889173698896783219136825586714351539340599592253229868026015026101827676251237526150709788548546671584443579492745733141167211543337081104736991401944122272518264405637051989600526452615407677368696460026240189267454450193632956807999427215244308010716781725869662894082417334356117738233460718912303827033621387976747223106704478562286704893278523949489536277158324372490427545235568950509096138829820287739867252340413429082762577011463934137279575696824559514904796443113425695669657281166621947014464537549498851463930940981392155049154263556043495051040451010047983948814468856176911276544107702238990836375866556964697723273643861193802683957837350105109275498398491580126891071979543692373738625516321913067562466512278743293509255720905343932686289054289893591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6753.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchflex.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fa3c02f0e73d4e66a4a1158906a7eba4a475913b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018941bd8e8d000004030047304502200ed001ef51ac92c5c7dac9798973ab930aa21ca5a03243c92fecdd86a4600d6f022100ef1015e4b3295178502529d7603c635fea97c1a3323bf2d9b4e16b44f9a3742400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018941bd8fab0000040300463044022011f39050d3003ebacbc0b546ffddaa3df46ce0330324230a4ad4c1413f4bf1a90220365b6ac1f639661714071b7ea1e54e4148aded593970e9f1f99129dab1509094007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018941bd90140000040300473045022100f3ddad774a591b102167f2147f3a8faa632b356a58e90afe79de8c8364c4efae02207ff82ddd6d9617704797b4aaf89f43387ee922ca187352d1ead477ed147a590b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000949ac286d796b90a1d45e18d6d338c32e43865f70a9fa39861a71b88e64af3487596be6dae6964574971092f954b406ac308bf5e6f0ea15ed32ae6e3e73056361868a7601eacdcc0651b24afa121b1f72b59a49bcc9f30d00932a4c48626560782cbc9e5413605f990a5effc9a8fab2c390e8237a54bbeb4af894c3f0591f9d27c721190ba9a0ee1c7d01415e2fe6d66001a645edf9bc627e264bf34a74eada136e8d554f0163823d5ee610e5f2fa2e9e417b99bf46c1d4527bca0f4fa3a102640659945480608b2f003595c29faa798d355eda627ec96707f0636a4c2136fc0db8c64049e6d5d05872fff354f173083438a42f2b1a85a5737b46665525c995