gromill.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number d5:6c:8b:12:84:5f:73:a6 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gromill.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): d5:6c:8b:12:84:5f:73:a6Serial Number (int): 15378819739209921446
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: e6:a6:5f:0e:f6:e8:a6:6a:ec:66:5a:4a:a9:93:20:f6:e0:83:d6:ec
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 87:5f:51:d2:ce:8d:d1:97:52:c4:20:c1:3d:3a:4a:fe:ad:52:11:89
Fingerprint (sha256): 84:d8:28:c5:e1:4c:03:5f:e3:3b:38:e7:68:7a:21:b2:a2:7d:e2:1f:96:75:f6:2f:0d:94:8f:d7:4e:1d:1a:52
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6548.crl
Check the revocation status for certificate gromill.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gromill.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gromill.com
Other certificates including the domain name gromill.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for gromill.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgIJANVsixKEX3OmMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcwMzExMjQwOVoX DTI0MDcwMzExMjQwOVowFjEUMBIGA1UEAxMLZ3JvbWlsbC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCu+J+PYurTYaoLK9wWQIxc9vsfYWDuufn0 xhWlb8kuwcNn18xh8RYeNc6DDmjy2tH8VYF6iRMtLrmT9Hq8k3zlIYmGMnf42eiH GodfHdoXSy8DRF047NX0bL54WjYcAGnXSJmUOSjAQZ4m5TSq2g1YOkiG6tLgl6VJ fwN/KQFamkKTboIgnsencSWrAP2mJDRZKbPpTrFE44UigfIR+kWjjCrsc7QfpmUU /LIK2Msfju25RxPfDBFDLt/HTg+Zzj18aIuXPc5GvYJ1oYalDebvYzGnYEEGqPrR wrzBLErKxeZr/KBO/m/3v9Z/Q1fu0wijjLqWBIEj7VsoY3c5q81jHfzxPSyELdUi NU87EUKGsRMMKXuaQVDSX5+lXvMQ7KDUbcoPGhEDS3c6yAQp0nXKkexHIUR48q6c 9GIjENrZPTwkZ/ubkfylqMLZDOKsxUW3sDLQa32LzhILuGJefVYnFWhvv79i6Xco APn+gFfC3AIYOMnMBMVaWoVThMOAq80LdzkxSoeHcSorG4QfJJDYOjfi13wyv9Q1 tuapAKTQKNQEj/zWZAyYdwa7re8ezx00xnAe0KnGxfjS/K3dtgfhPs9Vn55UZk/K XX1FlWPH/YUqV/51lwgPBosmxFWhvpeIl4SDUenQ4bMX4RhXnbeT2a/sSM7iMv3P 5sYLl1uX5wIDAQABo4IDLDCCAygwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAr oCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NTQ4LmNybDBdBgNV HSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0 aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsG AQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20v MEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl cG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0 LIDOMBYGA1UdEQQPMA2CC2dyb21pbGwuY29tMB0GA1UdDgQWBBTmpl8O9uimauxm WkqpkyD24IPW7DCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJG37sNgAABAMARjBEAiAUAvpK9aFG INClwTSrtR49PkPT2iaxLH1Q95/1i9OQ4gIgGMx/AG/aRdTk1ePhZwK46O+hzbxl R+vULA3pNmNEAl4AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AYkbfu0IAAAEAwBHMEUCIERR57BPAuro6+9IL+hH8Dcb66Rszkvsd30nhZin0IfW AiEAldXsKw/QJl6UbWSbkDXq1J82yU9GVn2ea/unRLzznrcAdwDatr9rP7W2Ip+b wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYkbfu1vAAAEAwBIMEYCIQDLnUO0ogIp g06/LjVXF/M8yvrVPVFoqJAs6CwucIH/jQIhAN5VZIMNT+b3eMsWbgmenmcLQ8Ca 2XnS2FpxADrK8Z/FMA0GCSqGSIb3DQEBCwUAA4IBAQBxjBhNMuAeOf25xXc531xM OS3Tsm2Jpq2CNUgD68iSEmvEpWUa8shifWrFGqYqwjBfc1B7awxbLuacCHbPouDU uIj3ZHmoV25nEaFa3Vzqi5BDMv6QC9xTh2oYX3Icn8mO0F9aqwNmmzk/fFwsxZLq Md4wNcec0/scSlYT0FuU+k6iOsJRjj1wvjzLrxkpyH4NYnpZR7JK9UcLwl+P9MmV oMhuNUFskOoTtMqTQW0iDgWrYwI1vmXJA+Cic4fdG6dzA0DFCakoJ1VdhKENevV+ FJKTphL8zRULaC4TeVP9p4K24F6zZ4KIoMGNDB1o06ufsjC5rTBv+THHlnMsuIX+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArvifj2Lq02GqCyvcFkCM XPb7H2Fg7rn59MYVpW/JLsHDZ9fMYfEWHjXOgw5o8trR/FWBeokTLS65k/R6vJN8 5SGJhjJ3+NnohxqHXx3aF0svA0RdOOzV9Gy+eFo2HABp10iZlDkowEGeJuU0qtoN WDpIhurS4JelSX8DfykBWppCk26CIJ7Hp3ElqwD9piQ0WSmz6U6xROOFIoHyEfpF o4wq7HO0H6ZlFPyyCtjLH47tuUcT3wwRQy7fx04Pmc49fGiLlz3ORr2CdaGGpQ3m 72Mxp2BBBqj60cK8wSxKysXma/ygTv5v97/Wf0NX7tMIo4y6lgSBI+1bKGN3OavN Yx388T0shC3VIjVPOxFChrETDCl7mkFQ0l+fpV7zEOyg1G3KDxoRA0t3OsgEKdJ1 ypHsRyFEePKunPRiIxDa2T08JGf7m5H8pajC2QzirMVFt7Ay0Gt9i84SC7hiXn1W JxVob7+/Yul3KAD5/oBXwtwCGDjJzATFWlqFU4TDgKvNC3c5MUqHh3EqKxuEHySQ 2Do34td8Mr/UNbbmqQCk0CjUBI/81mQMmHcGu63vHs8dNMZwHtCpxsX40vyt3bYH 4T7PVZ+eVGZPyl19RZVjx/2FKlf+dZcIDwaLJsRVob6XiJeEg1Hp0OGzF+EYV523 k9mv7EjO4jL9z+bGC5dbl+cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15378819739209921446 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 11:24:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 11:24:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gromill.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713820155711152106302078836343368758028845670050197657554134671318467555543201710102719870119942096851084721159613029158225652883420840944973486588452817605734563128578766859022313964909144631466163486199160414734051084074050424492736995231289795354492446137993978896467509018431164877260087697813447618997092980693026428738058937484872945390394212532789909701660347653491811509708596814124566289589841669699923405357146258870867211119295373659512977887855657336874657078021421927068255896506803520756032467702285494944136310431189136901030942805153692303026632515076545307986261495507198568711319195821829450565935126523733997592005467049536364815389332067857894850550737428443862046923077105616951088342588499745388242352900930414355510272489326115577575604044272341303297121993535357361594236583341180684299581458540732750594602754150740139569213218900174805270773036954665017585013462942293739545639604833357787038061249896802283859461174102871155674580233775116764532911546128639679545002320716416313979009986647978867751952547679054034451164138893822268388853244423405435263465863694943335314252107762148446015155707734944112251877364323097463223060256721579944596615883260196300321317651343962743948117532940075040177615771623 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6548.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gromill.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e6a65f0ef6e8a66aec665a4aa99320f6e083d6ec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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