prettyr.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number d5:68:4f:b9:63:d6:f1:ad was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=prettyr.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): d5:68:4f:b9:63:d6:f1:adSerial Number (int): 15377628585319133613
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 1a:e6:b6:ad:d3:8c:91:ba:c5:61:af:2b:e6:8a:35:09:c6:75:12:73
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 43:a5:e4:cc:d1:b1:83:12:aa:ec:09:28:bf:75:b9:60:3d:19:93:f4
Fingerprint (sha256): ae:9a:ef:df:fc:9e:c1:31:ce:4e:a0:5a:da:32:33:f7:9a:42:c9:4c:76:51:48:9f:0d:7e:3f:9d:4a:fa:c5:7a
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6890.crl
Check the revocation status for certificate prettyr.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prettyr.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prettyr.com
Other certificates including the domain name prettyr.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for prettyr.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgIJANVoT7lj1vGtMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxNTA5MDEzM1oX DTI0MDcxNTA5MDEzM1owFjEUMBIGA1UEAxMLcHJldHR5ci5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDC0Z8Ya/lDrHFrON/Hk8RwrfOEUJiVhVwd gNIJ1hXLUMfigvujwhsW0J4fWL2EsYB+q+WJfhgUMvlN8bafh20pow0gi/78C4Mo Lge9o4TSEIqzuzFv7D7v7ODUeC/Rhxr5lG7iAf0nbR2lhyGg2j4s2ZJxVsYIIm4/ F61vdZE5DZZtaGnXryCvFT1ihrwQTfTLYPXPOUv7DuVrunE8fEevZSoiSrPMM9Rb fJ4gwY5xZOxUuOEn8vorVwlAEMN2LdaTI0wZfgcUaXzkCl24MjSI5OQh3+ti48DM AqX7mumDk0htzWl4obqxPdO7DAqmPFSQiY4L34TUnCR3Lo3gQjlYCCamAbEWK+Kx at/aabWn25GTrqNP8Wxcbu769Bz+gbZxbW/vRbXVdMfE9FVO/jI5jrKOEH88YMG/ oQtgiWD/6EdeQQWiu0IiaPxxukMa/D6q+VLp+FbHs5PKL+vtuOlZTpOr0roMmL4i i2iRv1pWYwEA6YcuSBaZsYMQupIr/9PLPV26xf+pm18XjwzOp7YtOco2CwI4RjIN ubTo7zBrOLLpAg7sAFfRt2dTocwxSQ65r9XmRkwxouKs4hfSLHfaP9LvBz14iPff rA2zRKENWstJUXihzyNxIxKh/GxULGAvDRitlAiObMMkbPF3cqsieRDxR4Wv0L6h +hxj4+VnHQIDAQABo4IDLDCCAygwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAr oCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02ODkwLmNybDBdBgNV HSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0 aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsG AQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20v MEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl cG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0 LIDOMBYGA1UdEQQPMA2CC3ByZXR0eXIuY29tMB0GA1UdDgQWBBQa5rat04yRusVh ryvmijUJxnUSczCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJWMiu6QAABAMARzBFAiEAszJHYSmu vpxv4h7acl/hP36GELPGdeG1O85ughmIKcQCICIf7ZD8BgOF1sy2XvejqE03+oKc DBlEMyUtt/A1KASBAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGJWMivsgAABAMARzBFAiBJb30bkLHWbFt6g/p7Jf0N4CTJTsodVATSlsXrvSxK HgIhALZSOHXoL4lun13CD1fC6vhkF9Qmeid9xIQ951zDuxjLAHYA2ra/az+1tiKf m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJWMiwDAAABAMARzBFAiEA6nVDnjPE I34uq5cHq3rpsjBEMBb+i1pODzfLeq7S+I8CIEG5YWr9pjV27lK93N/Z2Fv3PLU5 GshgL+4tyEnY3eJkMA0GCSqGSIb3DQEBCwUAA4IBAQAyfFiD4lPL+MotABYTGkDD tbiYJdNc9g8boA8OBocDEaO1A7SZ5Ui7j9z18kyOL/NBZH86XEpBe4hpvPadS7hg wngNAKAPyIag6DGwXh0sFfWrKprl3lPfeLSfWw0M2LHW8lq1uD+RilyjbtPezpLu Bc9xBJudRnQd4lyapeGm1+RxoiiEoO9xe6Ee9Xjth3Qk5ga5JhkhO4uFRUit9rCB D7FnDfkg1FSWqtLOfpNWTejg6Zn/ie7tEXOLrQMWb2tu0Q0Bu26+gtDUqJdXrbxl T9obCO+uZ3l4Pn5V2Bk0ALpmaoJe49xiz9XGkiz422Y+5VB3Tiqn1FN3I3kZ/8oD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwtGfGGv5Q6xxazjfx5PE cK3zhFCYlYVcHYDSCdYVy1DH4oL7o8IbFtCeH1i9hLGAfqvliX4YFDL5TfG2n4dt KaMNIIv+/AuDKC4HvaOE0hCKs7sxb+w+7+zg1Hgv0Yca+ZRu4gH9J20dpYchoNo+ LNmScVbGCCJuPxetb3WROQ2WbWhp168grxU9Yoa8EE30y2D1zzlL+w7la7pxPHxH r2UqIkqzzDPUW3yeIMGOcWTsVLjhJ/L6K1cJQBDDdi3WkyNMGX4HFGl85ApduDI0 iOTkId/rYuPAzAKl+5rpg5NIbc1peKG6sT3TuwwKpjxUkImOC9+E1Jwkdy6N4EI5 WAgmpgGxFivisWrf2mm1p9uRk66jT/FsXG7u+vQc/oG2cW1v70W11XTHxPRVTv4y OY6yjhB/PGDBv6ELYIlg/+hHXkEFortCImj8cbpDGvw+qvlS6fhWx7OTyi/r7bjp WU6Tq9K6DJi+Iotokb9aVmMBAOmHLkgWmbGDELqSK//Tyz1dusX/qZtfF48Mzqe2 LTnKNgsCOEYyDbm06O8waziy6QIO7ABX0bdnU6HMMUkOua/V5kZMMaLirOIX0ix3 2j/S7wc9eIj336wNs0ShDVrLSVF4oc8jcSMSofxsVCxgLw0YrZQIjmzDJGzxd3Kr InkQ8UeFr9C+ofocY+PlZx0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15377628585319133613 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 09:01:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 09:01:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prettyr.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794791499867447050761495465019152030089319300528396537891863774654308044764222941251850140664862851712649945092556812250901525696017562735306216341228454302736803839577611772861425189495172253583080583648489544413946214628288987806237395372532334799019333065013519337924476938651817367478633538431068257348485153934490035408014697362385211481531548992561293489377543951432625642620078772540664034782683483499474713779670550392820788195394831097725908322031146243276047051363034692561966344160711271429709712626781208073145448886971602633613241629432362086414152718843026059493459003527347248874902439571240027028040386085228292434260427116640578406414382090717138439476288748372650845516003085129491589369093317829934771127021489425930002945296301039062391934952832095166079077918141488190777736434590801093336777903617942796854020578265077457941299388032814997661558454377005996776852277554854083187666067619114354399588425752135302653781674674566605269596998858826805811443530604182063548030699385160354444598646972413255785352283664184934995250754192127799801434323406382523532578119749948574541106733019933210924416342720819548224572890701142891366871708541856873560411954485886820697174090963787393222699904330207655835877074717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6890.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettyr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ae6b6add38c91bac561af2be68a3509c6751273 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018958c8aee90000040300473045022100b332476129aebe9c6fe21eda725fe13f7e8610b3c675e1b53bce6e82198829c40220221fed90fc060385d6ccb65ef7a3a84d37fa829c0c194433252db7f03528048100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018958c8afb200000403004730450220496f7d1b90b1d66c5b7a83fa7b25fd0de024c94eca1d5404d296c5ebbd2c4a1e022100b6523875e82f896e9f5dc20f57c2eaf86417d4267a277dc4843de75cc3bb18cb007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018958c8b00c0000040300473045022100ea75439e33c4237e2eab9707ab7ae9b230443016fe8b5a4e0f37cb7aaed2f88f022041b9616afda63576ee52bddcdfd9d85bf73cb5391ac8602fee2dc849d8dde264 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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