permitcard.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 10:14:ca:10:71:8c:5b:e9 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=permitcard.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 10:14:ca:10:71:8c:5b:e9Serial Number (int): 1158773176114371561
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: 95:00:6b:84:4b:fc:64:0d:84:5d:91:49:07:12:b3:de:03:b8:cd:15
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 06:dd:ce:ca:6a:48:01:8f:ee:4f:49:49:74:9d:a2:9d:0d:06:c3:b5
Fingerprint (sha256): 8a:40:9c:d1:c5:95:cd:60:0f:ad:47:0d:f0:48:eb:a1:0f:0e:0d:bb:e9:03:58:02:e4:a5:3d:39:44:50:71:72
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6537.crl
Check the revocation status for certificate permitcard.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for permitcard.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
permitcard.com
Other certificates including the domain name permitcard.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for permitcard.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgDCCBmigAwIBAgIIEBTKEHGMW+kwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzAzMDQyNjExWhcN MjQwNzAzMDQyNjExWjAZMRcwFQYDVQQDEw5wZXJtaXRjYXJkLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMfoVc9r/hUNyLN7ylIdi0OwHn5Z5BLS Im0jaGixIJJ0Fnxu0l+7+9iUqDvVMNL49aDOfKQwHOqV+i9gjsTtk+tzK9Noh63D zWSnX6wEbxQ9ErFYqhzk2CZWvop1TRUzwvOQRPFpZxpZPPM2KQB91KxXx3enkcSp AyPGH/vUDQGBAfzwZRcH/+ihXf5DA75eJT9rpoJeJZHbaRaBbrgWDYX9zy2ws1Xw tHu+83fJsi8fdikDXOVJpE0I7fvUv7Mx7Wa/zo6OO/0WPRK79ovHuKNB4n1fgpGC /Nlr8NijjuWawcL9MJfZOLjmc3AFUNDMrMBUsDGQ71Vysr5fJe8WHDyoNA4yxdYf h/LTD96DH7D0gLqyaC5Xz2ehXN0UC2dEXDkaK1Z/Sni8c+RKEc2GK6c9Vw+wRNEP yFKujjMVQoD4RJmrQz2me+Fl+oHEu7eQ8TkxwWknuCmPyZLUw8Qmcm56xfBdlfwz /eNEcF6ojJADDq1XOvHMLYxUCSxL7ea1p36vRpOFO3L1o3mbRdlkMyAES+5vZvL0 Xg6jedvYjO/0w4dqUMkMNu82wSUeq1tNg9360HhgoBL4HhshiDqHbsPrgN3Yl300 +4aybEekTXgGxgz1JbwQvWC43k4AGO4PciIkvhWQzxdILwNWN+BxZ6UZMTO1ko5W j3XOVg4gfWM1AgMBAAGjggMuMIIDKjAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY1MzcuY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGQYDVR0RBBIwEIIOcGVybWl0Y2FyZC5jb20wHQYDVR0OBBYEFJUAa4RL /GQNhF2RSQcSs94DuM0VMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYkaAEO+AAAEAwBGMEQCIGqf 187uNuGoXPaJHLIqjGixWTFCajKsLawF9hUEtFgZAiAca4/VaedTH/BKhh1Syviw LBnRQnH0OChHlRDo7z92uAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiRoARIcAAAQDAEcwRQIhAJq/CEa/TKEVj9bf8/MA42Uk8EJHVKTOht1m 9F9gnIRJAiB/6TwADS0DKlDy4+ecLrdGayQIEUqPd55g7ggxl7fsjQB2ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiRoARPEAAAQDAEcwRQIhAMuH qJn4/UNeNWRHffEfiVYaFUaLBxmt9tkPxljqzmvmAiAdkamHxZuU9wsrL2ViWWqH 959rNWw97xiz71hIqs9VpDANBgkqhkiG9w0BAQsFAAOCAQEAm7GhKwBpTN158HRr IDCXcdGJvu3HLOhOs1AHSJ/dCrlEYQX/ha9j+u3tlvHn4lUUZFR4c4TNuC4zSOIK xKDQ99Y3eiN3p5YPQHLPdwMV5kXN57DSTldBVr0qEgrKQVfYTKLbpw9PU/iIrSz6 Vf8vnv7YvJUXX+Ba9dTv9Qcoh6kvO5vNTKhrcd8NzyhgkOGjbAT9fE9HXhJ6kM3P 0BdriEJokidw5pLVjmMATnOTwnCcKSF1dvbRsYdFEhY+6k12JukuhKCbKr5vXhXz oSVj37iVIeZVstxQO3i1BXT6+xdrAp3SKHhWEKDGlRiJOXr6pMEjJ+hcqlTHHt2j AG2KtA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx+hVz2v+FQ3Is3vKUh2L Q7AeflnkEtIibSNoaLEgknQWfG7SX7v72JSoO9Uw0vj1oM58pDAc6pX6L2COxO2T 63Mr02iHrcPNZKdfrARvFD0SsViqHOTYJla+inVNFTPC85BE8WlnGlk88zYpAH3U rFfHd6eRxKkDI8Yf+9QNAYEB/PBlFwf/6KFd/kMDvl4lP2umgl4lkdtpFoFuuBYN hf3PLbCzVfC0e77zd8myLx92KQNc5UmkTQjt+9S/szHtZr/Ojo47/RY9Erv2i8e4 o0HifV+CkYL82Wvw2KOO5ZrBwv0wl9k4uOZzcAVQ0MyswFSwMZDvVXKyvl8l7xYc PKg0DjLF1h+H8tMP3oMfsPSAurJoLlfPZ6Fc3RQLZ0RcORorVn9KeLxz5EoRzYYr pz1XD7BE0Q/IUq6OMxVCgPhEmatDPaZ74WX6gcS7t5DxOTHBaSe4KY/JktTDxCZy bnrF8F2V/DP940RwXqiMkAMOrVc68cwtjFQJLEvt5rWnfq9Gk4U7cvWjeZtF2WQz IARL7m9m8vReDqN529iM7/TDh2pQyQw27zbBJR6rW02D3frQeGCgEvgeGyGIOodu w+uA3diXfTT7hrJsR6RNeAbGDPUlvBC9YLjeTgAY7g9yIiS+FZDPF0gvA1Y34HFn pRkxM7WSjlaPdc5WDiB9YzUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1158773176114371561 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 04:26:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 04:26:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'permitcard.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815551688696938323065709655895203515800655692975787428383298778101582735188524480233105987947348539676464225131992247729816544736380579588072832456623954823998366328853101551478905814956160615995546687633533169198382255096792685419328157262817897703043889531681891103462552954788358255593063125903113145111488207421828533092067149540706368316122877664100203880662179673848284982091861506125576883508462151780943673600128451910736756307429821832832566090964558197357194478925262233786715270509394277552684676592276503545686258333881251675699851752492531889255762319452705149089932461771680226300016659831622386907891755731016818883382371511746179842011578212522538353092981767274580178352766033227429422939283148712789399979469978749845211563781279967914966728210205357583239552708403286686714596950165359627429805333408144859446046654868455632278497083011278008838601102216954275444697877973562702719900898008412653557931032134250777262528660430291011081326196362489035846935448066550038521508572857206873146710716857128813946879029502728351614519633930366397221024699921844938238192061721234202247472524116610879084878286482331189005274939376439429974149134147424779599396027675425790875482372416635340771825994554281044886870123317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6537.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permitcard.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 95006b844bfc640d845d91490712b3de03b8cd15 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001891a0043be000004030046304402206a9fd7ceee36e1a85cf6891cb22a8c68b15931426a32ac2dac05f61504b4581902201c6b8fd569e7531ff04a861d52caf8b02c19d14271f43828479510e8ef3f76b800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001891a00448700000403004730450221009abf0846bf4ca1158fd6dff3f300e36524f0424754a4ce86dd66f45f609c844902207fe93c000d2d032a50f2e3e79c2eb7466b2408114a8f779e60ee083197b7ec8d007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001891a0044f10000040300473045022100cb87a899f8fd435e3564477df11f89561a15468b0719adf6d90fc658eace6be602201d91a987c59b94f70b2b2f6562596a87f79f6b356c3def18b3ef5848aacf55a4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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