ftyco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 07:6b:6c:2c:46:c4:f4:dd was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ftyco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:6b:6c:2c:46:c4:f4:ddSerial Number (int): 534639918195209437
Serial Number lenght: 59 bits, 8 octets
SubjectKeyId: 20:8b:56:27:b4:6f:24:26:b0:70:ec:46:a9:ff:27:f4:80:a7:d1:e5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 29:b6:69:35:1a:00:80:07:e0:c6:6b:b2:9f:4c:3a:99:23:86:aa:76
Fingerprint (sha256): 8c:98:d8:c0:6a:d4:62:4d:72:ef:34:79:7b:7f:8a:bb:54:f0:3e:e8:59:15:f5:c4:99:28:74:4f:db:d9:3e:00
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6661.crl
Check the revocation status for certificate ftyco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ftyco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ftyco.com
Other certificates including the domain name ftyco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for ftyco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHeDCCBmCgAwIBAgIIB2tsLEbE9N0wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzA1MjM0NzE3WhcN MjQwNzA1MjM0NzE3WjAUMRIwEAYDVQQDEwlmdHljby5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCXH1nQeN9F9WrsWOzgtRB1dN9JWxgOGUDkAdYK ONWnhBlMYgoQFzzTg+5et0iXhOqDxjFCCVLErX0CLZmti0IS9P1iCuNIfVHgFaB8 TNE/EIfVxT1Y+zXvurhmxahjtJuWiDjlYIbNWNqcOb5e79TDYMv7w8JtA7Gfazec 2inrtYWxe9BTFPXKLFfwEz5SyMeddcshZJl/H6IfJscxjz49leMLNUMw0BtQ39bx 6yRp4T6oNpl5EZScKdq8xG801aTQA0D2roaNypjGBAkPKA8TVPYtNrWDIVdvJ4gt MQM6UkdlbZ0yNG/9nrmHEhoHLbMC/rfuhrPFQETz/dkXXBhp+Lq5gUmn05poK1RL K429Q4iVVvfrDc9T7b/p9rYcNiVjuXec+5r8O/2qclO1pKxI03x0mL0Mojl+UJoB aYk3S/yzUImyxOkqKWOtrjpwLMc4jdw1genvcKbPyABNBx4C06/T2l//CckRGz5P 2DShw2gENQOfCEnwC5S9UUqKMdtyDmu1cR1dZD2m4X+YJUNgELuWeFF0pPZxirV3 BnnBt2cdVg2QiDz5rWAmBCSNGssMqtuDoNmzhxBaNBC1Td6dsTdD0qW1IAT6YV8z Fkgn6CAPkW3aEolgTDEP12GkWPd+nQqIpB07DgXwTkZ2R1VSQtERsW7mv3Sho15J 7GpZZwIDAQABo4IDKzCCAycwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmG J2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NjYxLmNybDBdBgNVHSAE VjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZp Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAG CCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z aXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDO MBQGA1UdEQQNMAuCCWZ0eWNvLmNvbTAdBgNVHQ4EFgQUIItWJ7RvJCawcOxGqf8n 9ICn0eUwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABiSh0AQQAAAQDAEcwRQIgZpi2Wg+IZ/APczTP 7fX/72ZNDqnFq9MNRsCFmM6F+GACIQD4Sh1FjZ7mmCjmDfWTDMiA7xZJzWs9B32v 7oY5yiBYGgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiSh0 AdEAAAQDAEgwRgIhALUAKRySJjNWBcILsWRS711qiYkV6KBySH//TEXbR4USAiEA yT8+h8rKd0MqJRm3c8jD/g/Ufoz1FjnbVYzS5X+0E5gAdgDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYkodAJfAAAEAwBHMEUCIQDrL0E8tPgwyuRg g/rerxMfJqj+KjqWTEW2mayspSwPgQIgP/+jHLaJkJkWSNwJlWjrghiDrUCdCX2P 9ugca1xCXQIwDQYJKoZIhvcNAQELBQADggEBAJH6DN2ewfw6yniCXaXd0KkD3bXz V1qHlStD/sFtkhJF7jWyZt/JkHFOrxO+XxLwGOc6WXR8R0WuYX9ShhFqmQxuegEf hJpf0t/tPczFPplDaUwBXLitPAcFq3FHu3ImEaTHH3vMe4WRDqIL4u/LGdbV8smb +bpN8nHA2PnuNMMdtM/IZfjeRwD6L/2sCwrizNH3tGHkHCOaUxsP9F05cU8WQ44b IJQRSMwWXxf0pacPCCywHGgPwIckW0IKctNhuwK4Et3YYnk0B02x5Kh4xb7hyaI5 FuIsR5JM+20EyykHNaA7XoR4pMgsuZvb6D/qTiMFhi3WteUqj9ew/l7WnaI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlx9Z0HjfRfVq7Fjs4LUQ dXTfSVsYDhlA5AHWCjjVp4QZTGIKEBc804PuXrdIl4Tqg8YxQglSxK19Ai2ZrYtC EvT9YgrjSH1R4BWgfEzRPxCH1cU9WPs177q4ZsWoY7Sblog45WCGzVjanDm+Xu/U w2DL+8PCbQOxn2s3nNop67WFsXvQUxT1yixX8BM+UsjHnXXLIWSZfx+iHybHMY8+ PZXjCzVDMNAbUN/W8eskaeE+qDaZeRGUnCnavMRvNNWk0ANA9q6GjcqYxgQJDygP E1T2LTa1gyFXbyeILTEDOlJHZW2dMjRv/Z65hxIaBy2zAv637oazxUBE8/3ZF1wY afi6uYFJp9OaaCtUSyuNvUOIlVb36w3PU+2/6fa2HDYlY7l3nPua/Dv9qnJTtaSs SNN8dJi9DKI5flCaAWmJN0v8s1CJssTpKiljra46cCzHOI3cNYHp73Cmz8gATQce AtOv09pf/wnJERs+T9g0ocNoBDUDnwhJ8AuUvVFKijHbcg5rtXEdXWQ9puF/mCVD YBC7lnhRdKT2cYq1dwZ5wbdnHVYNkIg8+a1gJgQkjRrLDKrbg6DZs4cQWjQQtU3e nbE3Q9KltSAE+mFfMxZIJ+ggD5Ft2hKJYEwxD9dhpFj3fp0KiKQdOw4F8E5GdkdV UkLREbFu5r90oaNeSexqWWcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 534639918195209437 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 23:47:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:47:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ftyco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 616525864651303617683364241356855989416503690156466228004580034706952504017580180537620587018637584245886123125461280414805252649313396157049477013524430336075366750928960609335457538025164710252564072691419940310164664383398083766884585191713912522507824412183331829560665445479231264400377888016390548092676736933083078793436898688213399381320387436872339372613792183516596083261036239402336339035656915939959088700265399996399182425138018054260863337724822382425601318640702305366595932546374731235368558908257010289268868323155875044862718893623257716404469957802258431528730620206209987870277791893803971639418648486054297351298733715122353942968621400046783735377607891307165566703241212353804299942547914155027004432624459651021367317480702105183569743449351713666340524871630298598422736536457068575702141564081523954846667028940200712081819761957567671827161637695324406058199345716569451835773778156900701925803025891105886350838943306856321933263725073164201084712357155256212075331229600169581969442878509500707110998189188050769150198026412910736333402046077267082969101421842202886736183639329906971367280769842501619086132007787043295444037733066562457224348668287789080714883300113675273938071987368061936426342308199 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6661.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftyco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 208b5627b46f2426b070ec46a9ff27f480a7d1e5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018928740104000004030047304502206698b65a0f8867f00f7334cfedf5ffef664d0ea9c5abd30d46c08598ce85f860022100f84a1d458d9ee69828e60df5930cc880ef1649cd6b3d077dafee8639ca20581a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189287401d10000040300483046022100b500291c9226335605c20bb16452ef5d6a898915e8a072487fff4c45db478512022100c93f3e87caca77432a2519b773c8c3fe0fd47e8cf51639db558cd2e57fb41398007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001892874025f0000040300473045022100eb2f413cb4f830cae46083fadeaf131f26a8fe2a3a964c45b699acaca52c0f8102203fffa31cb68990991648dc099568eb821883ad409d097d8ff6e81c6b5c425d02 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0091fa0cdd9ec1fc3aca78825da5ddd0a903ddb5f3575a87952b43fec16d921245ee35b266dfc990714eaf13be5f12f018e73a59747c4745ae617f5286116a990c6e7a011f849a5fd2dfed3dccc53e9943694c015cb8ad3c0705ab7147bb722611a4c71f7bcc7b85910ea20be2efcb19d6d5f2c99bf9ba4df271c0d8f9ee34c31db4cfc865f8de4700fa2ffdac0b0ae2ccd1f7b461e41c239a531b0ff45d39714f16438e1b20941148cc165f17f4a5a70f082cb01c680fc087245b420a72d361bb02b812ddd8627934074db1e4a878c5bee1c9a23916e22c47924cfb6d04cb290735a03b5e8478a4c82cb99bdbe83fea4e2305862dd6b5e52a8fd7b0fe5ed69da2