thermaltex.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number f6:5b:98:7e:87:5d:4d:c5 was issued on by GoDaddy.com, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=thermaltex.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): f6:5b:98:7e:87:5d:4d:c5Serial Number (int): 17751950025415282117
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 1e:e0:6d:54:99:45:79:0f:82:7d:c5:71:76:5d:a3:3a:63:25:7e:e7
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 3a:11:f1:f9:a6:ab:db:af:fe:37:17:1e:7b:c1:b6:f3:a6:d3:61:82
Fingerprint (sha256): a4:f0:dd:6d:1c:b3:b3:37:91:00:7d:af:ba:ee:5b:6b:b0:04:12:25:df:76:d5:2b:fb:66:13:e8:80:e1:95:51
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6416.crl
Check the revocation status for certificate thermaltex.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thermaltex.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
thermaltex.com
Other certificates including the domain name thermaltex.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for thermaltex.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhDCCBmygAwIBAgIJAPZbmH6HXU3FMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDYyOTIxMTMyM1oX DTI0MDYyOTIxMTMyM1owGTEXMBUGA1UEAxMOdGhlcm1hbHRleC5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDtnmGzonbPXLG05g8uWpbnBvi9HmH3 iMcYe0jsnpnl+xrb9Ffg4SJMP8r3qHCMihHgFagAAfCbsmltQwb3vTVEqVreuEw2 MYOLylMhAxvK2wtKc59Hj10iUiOvXI4JaSSwXe7isUvJlptHzUGYzFh93lPZZOJf 4Se4Xl/ghLxKwn0YoTR97bDRkDTapzjPMIAIXU352jzAPlLpwHYDR+8Bi+/b1fcD RJh3cYTRTAnPM3C84VY0aFLFikM+auQa6Sp3twrn3jnDA/QojSYJi1uvmNvsZdsY GI6LPR6u3qNFuI07q7hXktvNCrspQNRpouwO+wERV6wVV7EJhgpv0d453MZpWJ12 rcyIWhgNvh+vzvnxdgJP448yiy9ZmbxBqgz5mest8mRokbXc7JOlqDmQxXCJgNQr EwLYz+r6gMKaB42jvSu6Y6krqgBQ4Y3UnlhqCf5RGftJZNg+T9J6u9og1LsFqYJ6 lIFbdPBOxqlujUrfrTuBRYDtDOp1yafOAZ2DKTTqFnRTVfclXbLUOypJ/RotPJxo TMcJ/EmxBX29wwjUAEkskgupsHUmcLXyxNFuxqqdwVrkqO7HXQNdln7sNp+I+Pgh vHFiyzyjo9dQyCAQPs26XRsdIbXtMguEmaxs/9zLVEj2Bsj00zVCFwsVCaa8fOvi OSv+k0wZbD26KQIDAQABo4IDMTCCAy0wDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NDE2LmNybDBd BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts s/C0LIDOMBkGA1UdEQQSMBCCDnRoZXJtYWx0ZXguY29tMB0GA1UdDgQWBBQe4G1U mUV5D4J9xXF2XaM6YyV+5zCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJCQD0BgAABAMARzBFAiAR WmIgj38FaPAGWC0GrAPzNFTLKglyMBIbcnlcepzN6wIhAJgtCyI5TsncH1opT2Vd oHVnzB7ox6kxbFvK1hXkXRYCAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGJCQD1OwAABAMASDBGAiEA8STGIqA3qgEAsXAcCfaN8TwD1rJYp1Yc F0Tx3jC2eS0CIQDw34/UtcN7YegP+VH6XbFp9Q9yRy6AjlhF0e8DJkj1BwB3ANq2 v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiQkA9bMAAAQDAEgwRgIh AI/oa5gfVQR+08VlZ4FZSCkxuq6KC7n+E7tufni0qMD5AiEAsZ9vxh7pT58gd/uE Jlrh9+ubpJvmT1KEoMzhNJG+adswDQYJKoZIhvcNAQELBQADggEBAFP2yzCBEsly aolfRQ9tUWxMKREix4xZZB7GTRqroGlltYHlnWISQ6ag+SKwBjeBTugd7CmoH+tv K7H3pjm9qZjSfbyOYs3A3rPCO4j7U//4e5qJTmK3ZF/yoNnH0z6EAGKtZbHGy3hC 0sD3RP2eUfdBN/ZUHwO5RrBOhtqGAJGHDbBFoHSeNBF4oK9LZm5Buwg6si1KpMWj EtZag9tXqOLB3GfW9iP4FH/ibOkrW3i7cr9S8z/LKHn1PFSXQNL/bRMO9l1B0T1u Fx3xkCgQ3hFMei8fXlRqqzkssHlf18kfbucv6V3x/UeC+rMdZuH8Zsg6xlltN21u oBoBa7sEAhM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Z5hs6J2z1yxtOYPLlqW 5wb4vR5h94jHGHtI7J6Z5fsa2/RX4OEiTD/K96hwjIoR4BWoAAHwm7JpbUMG9701 RKla3rhMNjGDi8pTIQMbytsLSnOfR49dIlIjr1yOCWkksF3u4rFLyZabR81BmMxY fd5T2WTiX+EnuF5f4IS8SsJ9GKE0fe2w0ZA02qc4zzCACF1N+do8wD5S6cB2A0fv AYvv29X3A0SYd3GE0UwJzzNwvOFWNGhSxYpDPmrkGukqd7cK5945wwP0KI0mCYtb r5jb7GXbGBiOiz0ert6jRbiNO6u4V5LbzQq7KUDUaaLsDvsBEVesFVexCYYKb9He OdzGaViddq3MiFoYDb4fr8758XYCT+OPMosvWZm8QaoM+ZnrLfJkaJG13OyTpag5 kMVwiYDUKxMC2M/q+oDCmgeNo70rumOpK6oAUOGN1J5Yagn+URn7SWTYPk/Serva INS7BamCepSBW3TwTsapbo1K3607gUWA7QzqdcmnzgGdgyk06hZ0U1X3JV2y1Dsq Sf0aLTycaEzHCfxJsQV9vcMI1ABJLJILqbB1JnC18sTRbsaqncFa5Kjux10DXZZ+ 7DafiPj4IbxxYss8o6PXUMggED7Nul0bHSG17TILhJmsbP/cy1RI9gbI9NM1QhcL FQmmvHzr4jkr/pNMGWw9uikCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17751950025415282117 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 21:13:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 21:13:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thermaltex.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 969399631416530617147020031846628085348076614199582202358390099788038786233974798260843970838260803891689304447073967615058073690212749726876799880011652519366496234730222931255856086197655830456215050838558648368357294883171238638772372392016984364969910333870798192997790965179679004281918642563084097905661047691122720675650103412077419005871092092002312757171605005283155339621950238574981132433112476953029310969977856314002624641466506762762542634285074677983137559615988829869314048997085699179947943318481558925818799966965543286808586463236112427810814294543669585906887362253009404506756407734508270006024260054256324381838920959067330097922149903734819571446531596418780659399394351660585745836772779309934729534710467485533527112795941422271949020036842313781323053678965578772072788455572455114596773140227570777868725702498845715577530173278264284707609177276395654470032183684950966539857655827582326874220073002306525265701252487007348564331177767179213440280026063931751948057985728200907008610717865206489675109845716625619744602216400649493306813327120731484410508638738539686680342186247874434942851210204980682931682522930435093786307964346363638910008492915160308854860907672120699191901777999594471719207549481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6416.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermaltex.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ee06d549945790f827dc571765da33a63257ee7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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