esign.acurianhealth.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 93:a0:b0:23:82:dd:2f:2a was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=esign.acurianhealth.com,OU=Domain Control Validated
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 93:a0:b0:23:82:dd:2f:2aSerial Number (int): 10637695986414989098
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 97:0e:46:46:eb:7c:35:50:18:a5:1c:1e:b9:c0:fd:e4:d5:3b:43:05
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): be:53:68:61:68:e2:a9:1c:0d:2a:ec:f5:28:31:d2:7f:ab:05:a1:61
Fingerprint (sha256): a0:cd:d9:00:b8:5d:33:83:79:77:a7:4a:cf:d8:9e:bd:16:74:82:87:ad:81:8d:a7:03:8e:1f:23:21:4c:77:f5
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1268.crl
Check the revocation status for certificate esign.acurianhealth.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for esign.acurianhealth.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
esign.acurianhealth.com
www.esign.acurianhealth.com
www.esign.acurianhealth.com
Other certificates including the domain name acurianhealth.com
(limited to 100 certificates)
*.acurianhealth.com
*.acurianhealth.com
*.acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
*.acurianhealth.com
acurianhealth.com
acurianhealth.com
acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
esign.acurianhealth.com
*.acurianhealth.com
esign.acurianhealth.com
screener.acurianhealth.com
acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
*.acurianhealth.com
*.acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
*.acurianhealth.com
acurianhealth.com
acurianhealth.com
acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
esign.acurianhealth.com
*.acurianhealth.com
esign.acurianhealth.com
screener.acurianhealth.com
acurianhealth.com
acurianhealth.com
screener.acurianhealth.com
Certificate
The complete raw certificate details for esign.acurianhealth.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1DCCBbygAwIBAgIJAJOgsCOC3S8qMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE5MDczMDE2MzAxOVoX DTIxMDczMDE2MzAxOVowRTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMSAwHgYDVQQDExdlc2lnbi5hY3VyaWFuaGVhbHRoLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJpSFibZR4irdPse0tmQg6WM1EdZ1CxWIwsf 8pfnxpMXuwS2A3w3IIAnBqYCD289fSuVAKcvQsS7cHiVQ2r0s4/3Xe1ick6sSnH7 R2K/nPj5Uur9Tyul1qwQ/jeIuHK0fyliBYik8uO7ezdxEagWR2fcX6mcLFvVq1LG Re8Ik1baJbnVOvH3iGQoFc94e1h1s78CzhRGsujwoGM4XfEmp++RFwg8/Rd/oJYe LwYTeo9jEIDvltHeX4SXGPHVbfjEuVius2/0sjngOWtjo/C4p0MJJ9Rdim86SLx+ iQUVDhgaKDrgxr6QosX8lk/Czk1e4C3Ki1hZ7zl4NPEY/1SjjJ8CAwEAAaOCA1Uw ggNRMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdv ZGFkZHkuY29tL2dkaWcyczEtMTI2OC5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1t AQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHku Y29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYB BQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0 cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNy dDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjA/BgNVHREEODA2ghdl c2lnbi5hY3VyaWFuaGVhbHRoLmNvbYIbd3d3LmVzaWduLmFjdXJpYW5oZWFsdGgu Y29tMB0GA1UdDgQWBBSXDkZG63w1UBilHB65wP3k1TtDBTCCAX4GCisGAQQB1nkC BAIEggFuBIIBagFoAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA AAFsQ7flKgAABAMARzBFAiBUVfeWkuz3cjOrPlPlaLKJeq/8ArF0jqjoH8wnizhZ PgIhAIJ8+LxUP8X5axVPb/nBd9yfuajIrHu1D9QYn0P6/AgiAHUA7ku9t3XOYLrh Qmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFsQ7fq/gAABAMARjBEAiAEed09dFrF g//Amfyjb/Oyjn2sGEBW/SewKjzHMMXHagIgItxyEa3WKQt6eoJQnPY0TgxqZJAR eD2g7/UeUQ73TDIAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAA AWxDuAd/AAAEAwBIMEYCIQDaB+DgofkAJ7H8Wh5qhlDKg397YffZ3MAr4GWfm+33 uAIhALDCgydYAhT4sGELK2xwWUCH+DMepwMKBLktfm2U3ZcCMA0GCSqGSIb3DQEB CwUAA4IBAQCJqnnzO2OaI3tUL4sNZuRpwUK4/rX8X/HlyyVq+QbrNUoUSZpWOOMy /BR3KgYGexDGS5xsiQjaQJGZlcTqGElinzYb/rb5J5HOufBtPTBFNYY4CMFuX89V GeMH1SUXzOd2LyS6zlLLAHwhG1QB6AGXEqWiU0mWgWoFxQeNL55aW1AduJTg9g81 9f1CN5Rr9wqnq83DxGjdsbEVrCx+I7PJxyup+8oU/zexkKoMcRD97eyRqrpI5wps Y/w1JP8VaHQxu4GxcA/BNraCe/GScIFiFbFT2bVE9NcKr/YUqKWKodgLRL1G7kPh 8foezIF9Anfmjob+v1GOSagPU6BMSaTZ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlIWJtlHiKt0+x7S2ZCD pYzUR1nULFYjCx/yl+fGkxe7BLYDfDcggCcGpgIPbz19K5UApy9CxLtweJVDavSz j/dd7WJyTqxKcftHYr+c+PlS6v1PK6XWrBD+N4i4crR/KWIFiKTy47t7N3ERqBZH Z9xfqZwsW9WrUsZF7wiTVtoludU68feIZCgVz3h7WHWzvwLOFEay6PCgYzhd8San 75EXCDz9F3+glh4vBhN6j2MQgO+W0d5fhJcY8dVt+MS5WK6zb/SyOeA5a2Oj8Lin Qwkn1F2KbzpIvH6JBRUOGBooOuDGvpCixfyWT8LOTV7gLcqLWFnvOXg08Rj/VKOM nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10637695986414989098 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 16:30:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-30 16:30:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esign.acurianhealth.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19481177341506247337765433918784836518795048076124931003314258620645293233786816226251981175175563686037768288734271669280664098185596278908088499942174731190608728516629518749127634885116125887262367743447342772931251054522685264789452413723746244615587821530465279468569534537159275008130495443288085380689920682225333501539395215777977293655636089376410666159491149565456034982403463900768528384395963169261604200608877983099943483162955561805905104754178827442216390174122404469326617050184460716361964396614219439385733294163462460473640504663247418527538360212312167403296972508713890402036496216034441525693599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1268.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.acurianhealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esign.acurianhealth.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 970e4646eb7c355018a51c1eb9c0fde4d53b4305 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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