thermocorp.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 39:14:27:fb:6a:fc:ee:5e was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=thermocorp.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 39:14:27:fb:6a:fc:ee:5eSerial Number (int): 4112956320481341022
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 82:be:d6:1a:45:7b:8c:e6:08:35:79:b1:bf:57:7c:0e:ce:d2:dc:74
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 49:a3:c2:f3:ce:ee:80:41:ef:2f:12:12:67:53:36:7f:0b:37:8b:29
Fingerprint (sha256): 88:f9:02:22:7a:42:61:a6:37:a1:57:db:32:8b:6f:bb:d6:11:c1:4c:2e:0d:27:cd:da:c0:41:56:11:cf:e5:f7
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6569.crl
Check the revocation status for certificate thermocorp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thermocorp.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
thermocorp.com
Other certificates including the domain name thermocorp.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for thermocorp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgTCCBmmgAwIBAgIIORQn+2r87l4wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzA0MDExMTIyWhcN MjQwNzA0MDExMTIyWjAZMRcwFQYDVQQDEw50aGVybW9jb3JwLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAODmqSmZOsN5+Hu+PWa7wEZpibV2FO0M /PrTc4Cifbf2P2RuRIxLdCTmxMg/nBf2m5JO5vTKfAXrcH2sJABGLoToM7Mkp7uo +JuMf3lC6tZ+gMI9vEaj4cvXgwy/NgC5nC3uhDQ2mvmG8oyCXvRLCGs58A+ySUUh iLXoQ0JMuws65WGF0XI2b45ShDnfJdcw0/BWELgEuRr7ilYsNXPs4//sGtSRmHyA FRATgA5hx+giZ9xgnJsUVzdSmZHmIJsx0q8IN2FkR5RKT9TcacDP4kS6ZDygq23C +Er/Hcc42l6hSn6mVVLA14zGYSjY/c73iebQtp8dwEST3mukI800LQ/E73sPDODU V0Segb9GjQQ7JdiY6xZaGUM/IUapd0DbWpl19SSG7B6XrQJunLplU6vAFr9RVodz KWzk71sSXdcPgE37IDlp7zaghVkHK6OV9t1C/RO2h0Ppl6+qTQs6nv2w6ZD8kVZX PpC5E5FxXuSek/WdgFQP5JiKFfCgfW7gSIx33l8sCDTb+TnNxc7L41gbQsI/VPpH fC8ftM6PecvbawWn0XC8OO8V+PcsgUtPWaQRxxsaRTxsA3D25e8wtgIireCOQanx rAFhvnPgivX6eXmBZGmsydm0pr6LWKQKRaAmFTg0GP52IFbfzvSEaw21Bw3rHtTd FUmYmbuKpzZ/AgMBAAGjggMvMIIDKzAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY1NjkuY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGQYDVR0RBBIwEIIOdGhlcm1vY29ycC5jb20wHQYDVR0OBBYEFIK+1hpF e4zmCDV5sb9XfA7O0tx0MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYkedES9AAAEAwBHMEUCIQDw yra/gk3MzeiDhjlBymM8dLlIe8SoUUSdxCQwcmkZLAIgRV3tLVCLvDxr19I5U9cS 9qW/uDkmwSQaWtwLJ1yNXF0AdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r OdiEcwAAAYkedEWFAAAEAwBIMEYCIQDkPQMeXkd26+8W0195GvZlvmYR59rGqKeO 7sXWYaek9QIhAMHs0HtLLQESRN9cY40gPxtZwVKj+ZhJ5AX3ZBDdbnixAHUA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJHnRF7gAABAMARjBEAiAU 8fHp49lTxo99GXsQ2mX5IR31SMnEOl+krHjZtS8jBgIgMHtAWPtN3G33Pu6UwVtl C5QqnO3wzB7BE+OB0X4eUqAwDQYJKoZIhvcNAQELBQADggEBAE44eXAD9mro79oO zWuKyGpHPTf9p5AVbX7Wy8sB8Me1IWZ06cb3sAyjD24qQGsaVlAOPhM+RqUCOSZP TgTKZcHsx+1ct1oRoodfY/u/HTRACcsCv36ghRNCnsA1Cvkb/RMVlhZe2aMDHROy /ghUcX+dyGvoazDKHgdSK7x2mgcWhic7apMuO68FhXW5pYVJE6NKGDS/Jgc+iMi7 1C1eLeEF7iiDFF4vCYlF/5Gd13WFCUNz4vypZ+tbwHsm5l8Si1No7k1v9UbsZqge qeDFXUUeIB5eHHwTKe/m6tOt9ElwNcT7T1td3w3iEu50uX4CDI+6s4kJeBd7Uqyc sw6ozYs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4OapKZk6w3n4e749ZrvA RmmJtXYU7Qz8+tNzgKJ9t/Y/ZG5EjEt0JObEyD+cF/abkk7m9Mp8BetwfawkAEYu hOgzsySnu6j4m4x/eULq1n6Awj28RqPhy9eDDL82ALmcLe6ENDaa+YbyjIJe9EsI aznwD7JJRSGItehDQky7CzrlYYXRcjZvjlKEOd8l1zDT8FYQuAS5GvuKViw1c+zj /+wa1JGYfIAVEBOADmHH6CJn3GCcmxRXN1KZkeYgmzHSrwg3YWRHlEpP1NxpwM/i RLpkPKCrbcL4Sv8dxzjaXqFKfqZVUsDXjMZhKNj9zveJ5tC2nx3ARJPea6QjzTQt D8Tvew8M4NRXRJ6Bv0aNBDsl2JjrFloZQz8hRql3QNtamXX1JIbsHpetAm6cumVT q8AWv1FWh3MpbOTvWxJd1w+ATfsgOWnvNqCFWQcro5X23UL9E7aHQ+mXr6pNCzqe /bDpkPyRVlc+kLkTkXFe5J6T9Z2AVA/kmIoV8KB9buBIjHfeXywINNv5Oc3Fzsvj WBtCwj9U+kd8Lx+0zo95y9trBafRcLw47xX49yyBS09ZpBHHGxpFPGwDcPbl7zC2 AiKt4I5BqfGsAWG+c+CK9fp5eYFkaazJ2bSmvotYpApFoCYVODQY/nYgVt/O9IRr DbUHDese1N0VSZiZu4qnNn8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4112956320481341022 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 01:11:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 01:11:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thermocorp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917516106891592985643776173036797234224474929427758920245021082834509709400650206334424103116653907575135144382010597373214380347637897535534816082459771920042954401066474540246480945384153389611257401743702648715173943110103758730746246595724309725294903749153612449865206504772986212378589699328195212419698696403916472034330491667703314401418074585773480970381282433401566492914058156930592004150126618988199271436108839537541524651850290572891572603905079977043850868077047215487914753091952378012789608236771779111098645821616168194445146982507253078310380972690397608742835453175303438819682321943256768771292768915123666827963623953478949306511918105216935703096742146643199600539950593918591210139163721321706714113832455762580733667728585965917334108240454233437208540280803210982841952312706782419635746373955793104492947382043229570303707713518294917137989468678410206517425635278259152787668796143505236196417124882237814132180772930903229408868365392843863229348159792538528166177658050200736968521319977476366058312551666701155773588457067907198334166897330971052279877641733129313690747512130422891390412787362724516433013929815290438100025814933043707633205048672637525969631194608875480977630788895958716906591434367 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6569.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermocorp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 82bed61a457b8ce6083579b1bf577c0eced2dc74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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