sandsrealestate.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number f9:ab:c9:30:91:9f:68:a1 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sandsrealestate.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): f9:ab:c9:30:91:9f:68:a1Serial Number (int): 17990694346900334753
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: df:d1:a2:76:58:8d:35:0b:79:b5:a4:02:cb:dc:25:c2:c9:a7:11:51
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 63:57:1d:be:63:4e:72:27:b5:7c:f9:3a:41:d4:81:1e:93:88:29:6e
Fingerprint (sha256): af:da:35:fe:34:1b:36:26:10:f9:87:60:f8:61:ea:fc:80:51:d6:79:a1:f7:12:25:cd:19:1e:59:89:95:6a:73
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6909.crl
Check the revocation status for certificate sandsrealestate.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sandsrealestate.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sandsrealestate.com
Other certificates including the domain name sandsrealestate.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for sandsrealestate.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjDCCBnSgAwIBAgIJAPmryTCRn2ihMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxNTIxMzIzOVoX DTI0MDcxNTIxMzIzOVowHjEcMBoGA1UEAxMTc2FuZHNyZWFsZXN0YXRlLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOngXXXqxWM/ZG4HzopM5s8F pn+RjJCIMIJXM2JwyFSjkVfatPopBRg8N2t00Zz3Mu4wHIaZbv9NrUCLR1IAosvQ wLNY0XO2CLwcULvztJIaB6ddzffky/teYaOOT25ktGPGmH4iLlm0mZm3EVqJquJi xGfRA4e7/rsEyO698ZCs4nSMl1jW1yV42Lwk61Lgkksb1X9Q7IvHyRq3rVJmznon IzaetIp8GybIf9DmwX+UH01hawXC5IQt31Ui1DCMskoMc1JeiPasJiPqPA6pSQaK wC0vMrEwvsCnnV/lM28/OjU35N5YfukZ2QL83OGleVuumyiCMiaUuOAbTiBiEDVo fJhTEKQ1lpoJCBrLciJb6u3pA25okPoUcWuTPjgt9bud13+XeWUSxyprfBUCPnUf 22tzE98EjkoFiAlB7qV8I3xdLvEBoSk2Dli2Qh4SiMY80ITdNLaxz3hUz+czjvrr /BDnd39X0PcN6MZWmCA5zKxM98TN5WPWGDY9tZO8awqiKPtQIo60rMQiul24nMCF 34SfUersSIAYn8vrpY+DDh7o0fwJjysOEt/EoryBJw5a8sMjJIcGh9YuzSZoTAOp O+RRAjXU1pFIvD4gqK8gb0EAPYlVOwSdmKrUcfPBuEy53RFZkWVmT+vxqkvjtSya nyqG6bv8bsNbioMg28yjAgMBAAGjggM0MIIDMDAMBgNVHRMBAf8EAjAAMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0f BDEwLzAtoCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY5MDku Y3JsMF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0 cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwB AgEwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2Rh ZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRk eS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMw ojPX+2yz8LQsgM4wHgYDVR0RBBcwFYITc2FuZHNyZWFsZXN0YXRlLmNvbTAdBgNV HQ4EFgQU39GidliNNQt5taQCy9wlwsmnEVEwggF+BgorBgEEAdZ5AgQCBIIBbgSC AWoBaAB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiVt4VGsA AAQDAEgwRgIhAP3cw7PuMJLI4K3LKukXMdxt8zTB10sYYnOBbgU9sezMAiEAmq3Q pcezts7CuepsQBLgs84mJpi7WarC+GE3Qy8bgp8AdgBIsONr2qZHNA/lagL6nTDr HFIBy1bdLIHZu7+rOdiEcwAAAYlbeFU5AAAEAwBHMEUCIQC5t5K8ZaAgPD70louV i2lG9xdXTnbdHGUYOEcgYDeYLAIgY+LeuPWjnFHc1fkKjagJSzokMy/dYI2Zzoza fo55Yy8AdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYlbeFWg AAAEAwBGMEQCIGw0eZS/uulz0YUQg93i/WWl4m91rYqE1V/B7zGudH9LAiBq5b48 rtfxH5Pjyr6EpocpmHYm14Krt/0gKVeHtngECzANBgkqhkiG9w0BAQsFAAOCAQEA Hrc6yQSRPBdRANj0HBwVpUlpNGQalSHPR0l8UrPPCmvw153i+iS4x/J4y4+rUpBH Gz4iKPwsrfipCAlCEiP0UWPtGn9vQbZuJl10x+3P7EPWCNulsjV6iz83QZs3ijIo BUzi72DWEBsHGQccOL7C+OwXlyXUic3YSc57Ucdau4zlzVxtnr3rUqgqgcwnBVuo 9BRaNBMAWqEXdUPezLZbiL7JNQuCsdn929ePWc4gIS5NbXwtgpl3KZoKRbdmshHA 9iMu8ShVXzty4DPYfqSj/EkB7GJBEDE3rEIfYJ7ktC7YlZf+ftwdHR7GX8ljuu6x NOqR7otOteA6RrIr2TA7qg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6eBdderFYz9kbgfOikzm zwWmf5GMkIgwglczYnDIVKORV9q0+ikFGDw3a3TRnPcy7jAchplu/02tQItHUgCi y9DAs1jRc7YIvBxQu/O0khoHp13N9+TL+15ho45PbmS0Y8aYfiIuWbSZmbcRWomq 4mLEZ9EDh7v+uwTI7r3xkKzidIyXWNbXJXjYvCTrUuCSSxvVf1Dsi8fJGretUmbO eicjNp60inwbJsh/0ObBf5QfTWFrBcLkhC3fVSLUMIyySgxzUl6I9qwmI+o8DqlJ BorALS8ysTC+wKedX+Uzbz86NTfk3lh+6RnZAvzc4aV5W66bKIIyJpS44BtOIGIQ NWh8mFMQpDWWmgkIGstyIlvq7ekDbmiQ+hRxa5M+OC31u53Xf5d5ZRLHKmt8FQI+ dR/ba3MT3wSOSgWICUHupXwjfF0u8QGhKTYOWLZCHhKIxjzQhN00trHPeFTP5zOO +uv8EOd3f1fQ9w3oxlaYIDnMrEz3xM3lY9YYNj21k7xrCqIo+1AijrSsxCK6Xbic wIXfhJ9R6uxIgBify+ulj4MOHujR/AmPKw4S38SivIEnDlrywyMkhwaH1i7NJmhM A6k75FECNdTWkUi8PiCoryBvQQA9iVU7BJ2YqtRx88G4TLndEVmRZWZP6/GqS+O1 LJqfKobpu/xuw1uKgyDbzKMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17990694346900334753 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 21:32:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 21:32:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandsrealestate.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954132574371429731065192050504274862999402042946926003468024086734498654548729382612015321385367569847844322853024037228356079062523811165677505892381305305946777427133762716607053899589147868048625942602725940265344614160813439350561720764558614046598931153060692695073953849437222804435249434242817571202793526161694323217392588143188443119446947296785891450051133273426899274925041434757972232958000555675996304912679548680125638861932890529479697279812384753931038101339283503701524559098113662579673494274333881437119529103080746421845602958826611799180026979989280854404287631999352375447444019673453734036392543925850952996043217959369232061074373384434483723962388537647223520990970956112274570081017518307248559774406932861393946375952319851022765095312592458843572393775450358066211264909793926336556030732867709538216477419255802693638179466840496822041554850268467900408857565734304773718285927720650143533901520411735396470021138661108752785500894224803434032225824353034403625293028961400822258894236430212082870366627942744068166056578958409213892444551697256666070938942946223181961521095121993116669013445556664496434087530847304383392954945949705676178572374389427463245874393271743859609522355019674366632231947427 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6909.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandsrealestate.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dfd1a276588d350b79b5a402cbdc25c2c9a71151 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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