*.darwoft.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number d5:c6:64:5a:9c:0a:21:26 was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.darwoft.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): d5:c6:64:5a:9c:0a:21:26Serial Number (int): 15404109915795104038
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: f6:0c:e2:14:c6:14:48:ce:02:38:e2:0a:80:15:cd:11:17:de:a9:8b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 25:0e:be:be:7a:36:c3:32:cb:de:61:e7:b1:1a:3d:71:26:29:7c:d7
Fingerprint (sha256): 8a:8c:bf:68:5f:28:c0:7a:c6:59:a6:ac:d7:59:73:c0:72:ab:de:c1:a2:19:49:2a:db:02:d8:c4:11:35:60:3f
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6358.crl
Check the revocation status for certificate *.darwoft.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.darwoft.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.darwoft.com
darwoft.com
darwoft.com
Other certificates including the domain name darwoft.com
(limited to 100 certificates)
utility.darwoft.com
uranianmedia.com
fynancy.com
happybeer.com.br
darwoft.com
crono.app
mafynetti.fi
www.morevnutry.ru
sm-all.app
utility.darwoft.com
vue.nonkositelecoms.com
darwoft.com
siatur.tucanviajes.com
axadal.com
artvillas.de
www.biciangel.com
www.joecode.io
rocket.darwoft.com
utility.darwoft.com
darwoft.com
api-firebase.capptivation.com
darwoft.com
dusud.com.ar
*.darwoft.com
api-firebase.capptivation.com
rejoicelogistics.ca
utility.darwoft.com
epakki.com
carestreamdental.dentalxr.ai
crono.app
karate-do-prien.de
labelerp.rcloudsoft.app
firstonscene.us
artvillas.de
demo.uat.xybot.studio
www.lukasweese.com
rhetoricalmediaco.com
cv.jokko.app
cv.jokko.app
dev.localcareconnect.com
labelerp.rcloudsoft.app
darwoft.com
uranianmedia.com
fynancy.com
happybeer.com.br
darwoft.com
crono.app
mafynetti.fi
www.morevnutry.ru
sm-all.app
utility.darwoft.com
vue.nonkositelecoms.com
darwoft.com
siatur.tucanviajes.com
axadal.com
artvillas.de
www.biciangel.com
www.joecode.io
rocket.darwoft.com
utility.darwoft.com
darwoft.com
api-firebase.capptivation.com
darwoft.com
dusud.com.ar
*.darwoft.com
api-firebase.capptivation.com
rejoicelogistics.ca
utility.darwoft.com
epakki.com
carestreamdental.dentalxr.ai
crono.app
karate-do-prien.de
labelerp.rcloudsoft.app
firstonscene.us
artvillas.de
demo.uat.xybot.studio
www.lukasweese.com
rhetoricalmediaco.com
cv.jokko.app
cv.jokko.app
dev.localcareconnect.com
labelerp.rcloudsoft.app
darwoft.com
Certificate
The complete raw certificate details for *.darwoft.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjTCCBXWgAwIBAgIJANXGZFqcCiEmMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDYyMzE4NDU1NloX DTI0MDYyMzE4MjAwMVowGDEWMBQGA1UEAwwNKi5kYXJ3b2Z0LmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMWaI71+Ni015IEoNQa4ueVOIwPRbtp7 Bm8T9nkftFjxpwdAdo70ZbrsfBNGM7/CCEGE1rhqSDq7X22Dkj3YlKpLhvcxmq3X 9+QjIUrw9vSEtXuK5XJnip1hy804DQCJPWfarJmvlMUvf8vQdMvfkXinTWVUgyVp vVhRQVI9LrIfGDh8tfV4r+5gLQu3gERvQ/HxE3lsWZv9rHgwtIV5zjCNUqhPMcPW e41Q752cWH6IcCrrsIAs7jOZPQ549s+0qii+qVC8d3xQY8t8jlw5D6LyAAQus96E /xh2E4r2CWvxHTYe7+GuMsX6RbbIRDzk6SVSn3vOEucdbhg0mx3iiD0CAwEAAaOC AzswggM3MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3Js LmdvZGFkZHkuY29tL2dkaWcyczEtNjM1OC5jcmwwXQYDVR0gBFYwVDBIBgtghkgB hv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFk ZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYI KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0 aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcy LmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAlBgNVHREEHjAc gg0qLmRhcndvZnQuY29tggtkYXJ3b2Z0LmNvbTAdBgNVHQ4EFgQU9gziFMYUSM4C OOIKgBXNERfeqYswggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiOmTysgAAAQDAEcwRQIgZbSeQSj/ M7gCKm40C/GV28ld5jQvkNMkxYSQTjJya7ECIQDIbN84GiYI2oy5Y8DhnxdAUdBw NbudKqV/DLHrV8vlqgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABiOmTy5cAAAQDAEcwRQIhALPsf9cyTXb8oeWyewQMfQI1/a2z0blSQKsgQvs5 MD22AiBa1goLXRxHn1zFMo1ZAvFEforO559r2/SyNGe/Vd3w5QB2ANq2v2s/tbYi n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiOmTzA0AAAQDAEcwRQIgGhSYoneA 2dv0HV3UF/NXGgyH/RHemEI0zYiJMehcEuECIQCsvkYPHgF6MIPoTzC1UwAYJyQv z2MY5fwM7VanZAt5OTANBgkqhkiG9w0BAQsFAAOCAQEAEjBUFgoCS8yWa24MHsz3 lXY8Q5GKCAXwsLDxxW3GtJzwkRiez9D5IzV9NUD+ma2S2+WWl5eOGNpbaSEiXd2r MfZmRgIe+p/7+t7bIJNP+R8x9Gp+nE0euTqMnJb5RQJetyCv/CAEEsO1QSGj0uET sDOUdIgO6eCeNDN90hbqaDRpqhyJgbws90AX/PMPeioaVzWTJoVSMs+XnBocjjnv IDLbrht2qa87ie0yG/cYWdZIOOSV6onovSPNixcWtkShkMc9p4/qBV6JLrdI1UaK UGG3ne8MsITDvPlHpNwCkaviMnN1QUN09IZSuJ/spJa9Vxb1qGimad1kmWCKmRyg 4g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZojvX42LTXkgSg1Bri5 5U4jA9Fu2nsGbxP2eR+0WPGnB0B2jvRluux8E0Yzv8IIQYTWuGpIOrtfbYOSPdiU qkuG9zGardf35CMhSvD29IS1e4rlcmeKnWHLzTgNAIk9Z9qsma+UxS9/y9B0y9+R eKdNZVSDJWm9WFFBUj0ush8YOHy19Xiv7mAtC7eARG9D8fETeWxZm/2seDC0hXnO MI1SqE8xw9Z7jVDvnZxYfohwKuuwgCzuM5k9Dnj2z7SqKL6pULx3fFBjy3yOXDkP ovIABC6z3oT/GHYTivYJa/EdNh7v4a4yxfpFtshEPOTpJVKfe84S5x1uGDSbHeKI PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15404109915795104038 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 18:45:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 18:20:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.darwoft.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24944955152992254081711339003764984281302599767457772722582251163633092997139848581061574264041273818876484185376301883786475555127592998383225504445235565232187661233463352763365262542903862736353496970365189439758540510542364021447041249196936484137872675254270473209016080705604989924844928518953725651714638192744745928429440631988797709336460032690578546330149572815651507683112947161083689882006583869634466128901313754173215401756059765501430232748594140924756187510825106805889314458148664469090733843642212858020778833940216601822186394930824138313675078866560782071597435888164416612548697449037700886857789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6358.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darwoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darwoft.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f60ce214c61448ce0238e20a8015cd1117dea98b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188e993cac80000040300473045022065b49e4128ff33b8022a6e340bf195dbc95de6342f90d324c584904e32726bb1022100c86cdf381a2608da8cb963c0e19f174051d07035bb9d2aa57f0cb1eb57cbe5aa00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000188e993cb970000040300473045022100b3ec7fd7324d76fca1e5b27b040c7d0235fdadb3d1b95240ab2042fb39303db602205ad60a0b5d1c479f5cc5328d5902f1447e8acee79f6bdbf4b23467bf55ddf0e5007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188e993cc0d000004030047304502201a1498a27780d9dbf41d5dd417f3571a0c87fd11de984234cd888931e85c12e1022100acbe460f1e017a3083e84f30b553001827242fcf6318e5fc0ced56a7640b7939 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00123054160a024bcc966b6e0c1eccf795763c43918a0805f0b0b0f1c56dc6b49cf091189ecfd0f923357d3540fe99ad92dbe59697978e18da5b6921225dddab31f66646021efa9ffbfadedb20934ff91f31f46a7e9c4d1eb93a8c9c96f945025eb720affc200412c3b54121a3d2e113b0339474880ee9e09e34337dd216ea683469aa1c8981bc2cf74017fcf30f7a2a1a57359326855232cf979c1a1c8e39ef2032dbae1b76a9af3b89ed321bf71859d64838e495ea89e8bd23cd8b1716b644a190c73da78fea055e892eb748d5468a5061b79def0cb084c3bcf947a4dc0291abe2327375414374f48652b89feca496bd5716f5a868a669dd6499608a991ca0e2