iinstruments.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 64:3f:7e:b2:52:9f:0f:10 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=iinstruments.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 64:3f:7e:b2:52:9f:0f:10Serial Number (int): 7223631631680999184
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 09:46:ba:b3:f4:3d:3e:6c:08:98:e9:9b:1b:c5:49:8a:36:fd:95:c9
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): e7:72:37:09:a7:85:a0:23:62:16:fa:5d:31:fc:47:2c:ae:60:c6:9d
Fingerprint (sha256): 9d:3f:b3:8c:70:18:28:d1:30:35:2a:96:61:81:72:9e:1c:67:7d:d8:78:42:89:79:d1:ae:6f:d4:67:fa:6c:7d
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7018.crl
Check the revocation status for certificate iinstruments.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iinstruments.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iinstruments.com
Other certificates including the domain name iinstruments.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for iinstruments.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgIIZD9+slKfDxAwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzE5MDE0NTI0WhcN MjQwNzE5MDE0NTI0WjAbMRkwFwYDVQQDExBpaW5zdHJ1bWVudHMuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqs0bfp4Z8Ddxpn3g4D181ZKQT9d/ x6jz+iuTOkVxSXvuZNMnPqbASTiq+B4HxgnC5tGcC4y1EDpfl8tuRyWqvJyj2jXM Yk8nrf3HTVMPejcnx2nkUuIFD5ZLmQmvDdfD70evhC0n2+oEuMvkIETAI/S7mQz/ tH/yktOt1czpNEcDvG6z/WZmgZBESxM6obZfxmTs2e6/UVxjr7yEN7DbaRuXzqov Tzu/Efne/642001e77/dY9PQL69jZg4qy1nATohrGUTPIh6TOov4qoEluzoWZR7k Ve4X4jDmj6L1dclLzxlUa2fHhzxpI0ogD/oPCeVh2o4eIYJecqrvobrQhX9k8T76 f1auUVB/Wbo0lA46oItBHCyew4qgXJ/6bFb7Us+y16bzkNENC9o8p48JzSB+QXF+ X1bC5qpBtscgkxA+NCL4GtSlZUaNBYx/AURzThq1sKP13zYlPW+88z/w+2ZN4uKu MrEb8DjZexPVLc8pj77Y3OBD4UaCsi24GaU4IHfSfAxSoYjX3UHPDvexT0tq51KR B0jHp9OhmdgXzUU2GFDJPjif9X8W/QAhjVSd3RCtO+Pkbd04Ij2VS+M4FWX3hBcw KRyonpWzJ2LAZC4/8bPxHFL8ygAi+JthbrodsloWiAI7r7yAm1Twh0qrRQxHvD8f Xwi8hS4n+rwsRjsCAwEAAaOCAzIwggMuMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAv MC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNzAxOC5jcmww XQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8v Y2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2 BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHku Y29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNv bS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7 bLPwtCyAzjAbBgNVHREEFDASghBpaW5zdHJ1bWVudHMuY29tMB0GA1UdDgQWBBQJ Rrqz9D0+bAiY6ZsbxUmKNv2VyTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJa9LQGAAABAMASDBG AiEAk5OGo3uqqzZKWgvixQOPLrdBurpbxyLk5cJyn1hfb7QCIQCD+PHVAh7S20mS siToI+ssz8w0LF/PF/TZcW5XQAc26AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABiWvS0OQAAAQDAEcwRQIgM/fWWg1il+4r4WrLJAhAmfG6mNGI dnctJFbzPpDf//sCIQDUp1RyjuOvcY5NnwCfV6I7O5+F8LpJsT/0dLoiAxYLpwB2 ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiWvS0VkAAAQDAEcw RQIgUoEbrAYHdaCbnkF2MKfOufBneqRZhppTR0cbTIeYi20CIQCH31S0XT+U6T6j yh4kQI2RKS96Wk3U11rMAr8MF2C8ADANBgkqhkiG9w0BAQsFAAOCAQEAKkNYl4fH CgOtNjiPFX7Fg5F2Yucma23gNHHVzNP4SFSb+PCWl5tMSvWMKRX0QiIRKJaQCOGL JgK1lN5OOOSlUkUmvRYYKj8vFXzojD6+H9uKQm3f4CaAMxHkovM7T3GOh/54nM2T WzFUNg02cMPelrmbRiJ7tRtkAC7ahoPspJ4FDsTlfoHGRjj1ya78iIj05niMTrx/ Q6r7xBpM37t4ToW9nvgbe52/EdMvu/kKSwKczW0EyoZe885EfKm2jg7+0N7W4TPP DOAKfSX6pIu1Mff8lhn6ER2Sc5o6FXvtD0+CEtspYWfyAs9vaYicN9Tcwyv7vWCr nr8AIRu3yqczXQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqs0bfp4Z8Ddxpn3g4D18 1ZKQT9d/x6jz+iuTOkVxSXvuZNMnPqbASTiq+B4HxgnC5tGcC4y1EDpfl8tuRyWq vJyj2jXMYk8nrf3HTVMPejcnx2nkUuIFD5ZLmQmvDdfD70evhC0n2+oEuMvkIETA I/S7mQz/tH/yktOt1czpNEcDvG6z/WZmgZBESxM6obZfxmTs2e6/UVxjr7yEN7Db aRuXzqovTzu/Efne/642001e77/dY9PQL69jZg4qy1nATohrGUTPIh6TOov4qoEl uzoWZR7kVe4X4jDmj6L1dclLzxlUa2fHhzxpI0ogD/oPCeVh2o4eIYJecqrvobrQ hX9k8T76f1auUVB/Wbo0lA46oItBHCyew4qgXJ/6bFb7Us+y16bzkNENC9o8p48J zSB+QXF+X1bC5qpBtscgkxA+NCL4GtSlZUaNBYx/AURzThq1sKP13zYlPW+88z/w +2ZN4uKuMrEb8DjZexPVLc8pj77Y3OBD4UaCsi24GaU4IHfSfAxSoYjX3UHPDvex T0tq51KRB0jHp9OhmdgXzUU2GFDJPjif9X8W/QAhjVSd3RCtO+Pkbd04Ij2VS+M4 FWX3hBcwKRyonpWzJ2LAZC4/8bPxHFL8ygAi+JthbrodsloWiAI7r7yAm1Twh0qr RQxHvD8fXwi8hS4n+rwsRjsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7223631631680999184 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 01:45:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 01:45:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iinstruments.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696808105590387262161827086083545773560735562346706005682884473070123974076897286632187305110280132114567682564003062950364140449361252835029184040946318876210964886143560165037805987570107583043942578256425987067797600748330419107088865113196929722273447371410905051282011649402166824049510809183911610798944031155856329475884669857785834950933664620562473931462476105149433851374598183689861616081054062136258452970136778266392849604338530705026237327016566356166181175659063295294669136835634367399302009305140564788135925688961789351306017759769094200411514010825380878561261458828308888275108823541810548372475827660404805440478488648619620261622384112840779926309785451444737651529603053547986034543641745800371051501927111633924730867368383316739588267437859122593552941115981952284847906949006128267717055541434368526998057680978040222394561914032175847805961527891115475707730616114253450120261233512645634685789140914845140681267102732865084482079655744058390061548686055663523340652033684270801941650973017140521797407544983697066837641298997523838021617081394968330906309956409399219314873708133951848666368306974428040698618477058450040455855502501253904378407487641132149003926474956772004281373205949812157445141448251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iinstruments.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0946bab3f43d3e6c0898e99b1bc5498a36fd95c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001896bd2d0180000040300483046022100939386a37baaab364a5a0be2c5038f2eb741baba5bc722e4e5c2729f585f6fb402210083f8f1d5021ed2db4992b224e823eb2ccfcc342c5fcf17f4d9716e57400736e800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001896bd2d0e40000040300473045022033f7d65a0d6297ee2be16acb24084099f1ba98d18876772d2456f33e90dffffb022100d4a754728ee3af718e4d9f009f57a23b3b9f85f0ba49b13ff474ba2203160ba7007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001896bd2d1590000040300473045022052811bac060775a09b9e417630a7ceb9f0677aa459869a5347471b4c87988b6d02210087df54b45d3f94e93ea3ca1e24408d91292f7a5a4dd4d75acc02bf0c1760bc00 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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