rollcallsolutions.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 90:1c:13:cc:35:40:e7:ea was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rollcallsolutions.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 90:1c:13:cc:35:40:e7:eaSerial Number (int): 10384196608597223402
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 0a:aa:fd:b9:ca:72:80:e7:71:be:2d:15:bc:aa:7d:1d:f4:3b:67:c0
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 87:70:c6:e7:50:a2:33:a5:4b:14:59:45:e9:7d:ad:65:bd:c9:35:8e
Fingerprint (sha256): 93:19:ee:30:4a:00:60:0f:fd:30:4d:4d:14:4d:03:3a:73:be:7a:b6:55:35:bc:0c:50:09:db:53:94:82:9f:2e
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-5357.crl
Check the revocation status for certificate rollcallsolutions.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rollcallsolutions.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rollcallsolutions.com
www.rollcallsolutions.com
www.rollcallsolutions.com
Other certificates including the domain name rollcallsolutions.com
(limited to 100 certificates)
*.rollcallsolutions.com
web.rollcallsolutions.com
auth.biyu.fr
*.rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
www.moddsys.com
*.rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
tarufuku.com
*.rollcallsolutions.com
www.unogiardino.com
david-zohar.com
tarufuku.com
rollcallsolutions.com
naomi-int-travel.com
hartsgarage.us
*.rollcallsolutions.com
hartsgarage.us
rollcallsolutions.com
*.rollcallsolutions.com
web.rollcallsolutions.com
auth.biyu.fr
*.rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
www.moddsys.com
*.rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
*.rollcallsolutions.com
rollcallsolutions.com
tarufuku.com
*.rollcallsolutions.com
www.unogiardino.com
david-zohar.com
tarufuku.com
rollcallsolutions.com
naomi-int-travel.com
hartsgarage.us
*.rollcallsolutions.com
hartsgarage.us
rollcallsolutions.com
*.rollcallsolutions.com
Certificate
The complete raw certificate details for rollcallsolutions.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIJAJAcE8w1QOfqMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDMxODA2MDMyMloX DTI0MDQxNjIyMDQ0MFowIDEeMBwGA1UEAxMVcm9sbGNhbGxzb2x1dGlvbnMuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX+Iuv0l8vC0M3Oe/2Cz 10MTfKLBmNeBH7fyiw9DxOlhZOCzMH1ANk2/GkIGq8THC22QL8SSNr+ZmsHoRm3F 6Zy3HEO5t8mfe0qtHZ9LfCT9Jf9BLCyskNtp6+0PP2k7/LkAJaXjGbQpvlCWVog7 ywK/hmvQSXFanXZMXfbrNXPxwNvZ/1gHrCXDWJLlfdjs8iWEIANqcwD+pjjZ+D+T +q/AeKIgKCPwoc9lzJeg9AkIyBtjc5RRja75xZ1x4jZUmY4wI+vxoMidEjdUVCWn kjIdf85nBHiXZkyUq7y7MnEGClM8tsn3kngJpSADwD053sfVmdwNLw5TCBudQLBu YQIDAQABo4IDUzCCA08wDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmGJ2h0 dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS01MzU3LmNybDBdBgNVHSAEVjBU MEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0 ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEB BGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsG AQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRv cnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMDsG A1UdEQQ0MDKCFXJvbGxjYWxsc29sdXRpb25zLmNvbYIZd3d3LnJvbGxjYWxsc29s dXRpb25zLmNvbTAdBgNVHQ4EFgQUCqr9ucpygOdxvi0VvKp9HfQ7Z8AwggGABgor BgEEAdZ5AgQCBIIBcASCAWwBagB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABhvNQyQQAAAQDAEgwRgIhAJesQYNJjSbS3TOGug2RbiwMfN9rFPS2 Uz/3tpfkKMlSAiEApdCt64VG24FlcEMsezGCPTg8ynFJPby5lKMVRKtRTvMAdwBI sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYbzUMndAAAEAwBIMEYC IQCi9IW7VRVXCDTdZ0E03thsPCqDjkNR/2vKTob15KppRgIhAI+x6vplfx1HoOTW 5RmMvknx8i8MWpUWIuTsRWjcGbaTAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0 vaQ9MEjX+6sAAAGG81DK1gAABAMARzBFAiAzePvvSHnadR7u8uhBGtW1HDZ8gBU2 JArgUh5aWKcZdgIhAIyKAXL+onj8bLgvLxWcpq/yrzojTIXEQLD4gdl+FddYMA0G CSqGSIb3DQEBCwUAA4IBAQB3d3BznFcTfYYONwW+GlVWLVN1lnHGeh7bR01IWTQ6 S1CT/WDSiz3ili9Sesg7xMGs7cEQAhnF9czDTP0IdjJkgULIQKZ/gGF3Yv4zIPI/ xbJTNlz0MmQXRCzqRr8wUaHD6wwbIX2+RFDj1yhZkX0BmhoShR6ma0pplDdWvEjG wUDnWTJwpkwMDrEy7VfEPUessx4qVSyVHYR9fXRhluWBiSCem9N3hgAT86QF5XnI vZnXpcj6QJjGf5bVbVHWoCJoHFLKlP2RjhXaTu2wGZuR7PZ+MI/noxDBUjg/Keo4 V7xSnr5M/jtQxzKaPipVLExnnii9R5bJZB9EKxs3tUcC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX+Iuv0l8vC0M3Oe/2Cz 10MTfKLBmNeBH7fyiw9DxOlhZOCzMH1ANk2/GkIGq8THC22QL8SSNr+ZmsHoRm3F 6Zy3HEO5t8mfe0qtHZ9LfCT9Jf9BLCyskNtp6+0PP2k7/LkAJaXjGbQpvlCWVog7 ywK/hmvQSXFanXZMXfbrNXPxwNvZ/1gHrCXDWJLlfdjs8iWEIANqcwD+pjjZ+D+T +q/AeKIgKCPwoc9lzJeg9AkIyBtjc5RRja75xZ1x4jZUmY4wI+vxoMidEjdUVCWn kjIdf85nBHiXZkyUq7y7MnEGClM8tsn3kngJpSADwD053sfVmdwNLw5TCBudQLBu YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10384196608597223402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 06:03:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 22:04:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rollcallsolutions.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19882303289891167143932775920766837287549999826676090165654611012865697321021628658682130889235282151676051974820798206883660767729757771022947083206877691289327511995229754901280917636311417061246721044524650544693093601476717892115559858026780653592152821247057614429187390971982812077620579100134420960181203841458621960824055562346085297552498871818236420320415045509634815105800202192339702954477153668601511910940328188686978219112558046386672014892891678871610337534217539474280086343424421450271241933433076613642557794041643721847304685665918397069322549319304333256216888518129151229813780753413486987472481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-5357.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollcallsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollcallsolutions.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0aaafdb9ca7280e771be2d15bcaa7d1df43b67c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000186f350c904000004030048304602210097ac4183498d26d2dd3386ba0d916e2c0c7cdf6b14f4b6533ff7b697e428c952022100a5d0adeb8546db816570432c7b31823d383cca71493dbcb994a31544ab514ef300770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000186f350c9dd0000040300483046022100a2f485bb5515570834dd674134ded86c3c2a838e4351ff6bca4e86f5e4aa69460221008fb1eafa657f1d47a0e4d6e5198cbe49f1f22f0c5a951622e4ec4568dc19b693007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000186f350cad6000004030047304502203378fbef4879da751eeef2e8411ad5b51c367c801536240ae0521e5a58a719760221008c8a0172fea278fc6cb82f2f159ca6aff2af3a234c85c440b0f881d97e15d758 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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