highradius.org
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number bf:10:cf:c6:04:ca:ef:55 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=highradius.org
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): bf:10:cf:c6:04:ca:ef:55Serial Number (int): 13767732510262488917
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 21:17:70:b1:2e:b0:09:11:ed:17:48:19:64:3a:63:5e:7b:9e:55:d0
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 62:24:a2:a3:ce:7a:c7:03:6e:51:af:5b:f3:e0:a7:4a:43:bb:a8:99
Fingerprint (sha256): b2:6c:1d:42:f0:71:76:62:c1:57:85:80:fa:7b:26:7c:d0:6b:ed:74:ce:b8:f3:c6:05:52:0b:04:45:56:1c:8d
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7223.crl
Check the revocation status for certificate highradius.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for highradius.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
highradius.org
Other certificates including the domain name highradius.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for highradius.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgjCCBmqgAwIBAgIJAL8Qz8YEyu9VMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcyNDA2MzY0N1oX DTI0MDcyNDA2MzY0N1owGTEXMBUGA1UEAxMOaGlnaHJhZGl1cy5vcmcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCguAIWXKLR9LoqQCJKQq9OlQ9PW7SQ OBll6OMdGtLQiJmfp073bPeHoHJ+C2dGyc+tXoRVcrUTWGLYwUeuDE+X/Ez+KpYO YSzCu6WjHr4ISJKowZWqSVZSAa4DyB1m92uBduKPEnW7bRnQRZ4sCcfj+B500cIM 3wONdXzVd4X3vgROViO7RLQc9wpl+oncuaFvljrkJaOYIg9kA7d8V0xWkDCrNyxh 9Oh6rNm69stNQQJa7w9WhaVqBgL6UmzjB9fUaFhgw/0WIXu0Xf1B1UTd+o8px5Tr EPd1uhNK8qb62bVu8W7K/0u8qKRylsqaAPcih12zEpmS37TdeOA15Fex8nvBWamW eTDi1BU6sleyPMdmlgqerMpU9PnHJ+oyHbp/5QAUHiDGGF1XVE4wUDK5si1FEGwA cwb+Gs19N1K1qhMtykBaLm7TBR2b7dVsjSuboIeVUHbm1RXT8UeuSHCuUyfNa7Vw qHWjbYLek+y8rAqsU4SeX/nP0qjCDjMXG7Bo5rFtnBFo1kBH3G90CoOkADDULHkc gUPxZQ8qxhQpJ70xU7dhBC76w2x1+a0HHjh+/NfCPrPqfxYbsmj3uOUynlEsF/Uv yzEMGp9+vl127sOdVQZqbFUL9VMjN5daOGeeVVhXzxPdjMOZ+OY5Ti/YLBnk6PoA 2I1HhCIwwfdPzQIDAQABo4IDLzCCAyswDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS03MjIzLmNybDBd BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts s/C0LIDOMBkGA1UdEQQSMBCCDmhpZ2hyYWRpdXMub3JnMB0GA1UdDgQWBBQhF3Cx LrAJEe0XSBlkOmNee55V0DCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJhp1hiAAABAMARzBFAiEA w9Vn1zHH3CNsQk5jWvwRxt3BjXssQMSTjIzKFVRb2pACIGr9OrhUA4rl7YVp5At6 pVELG2DcK1fW+HirCbNzuRp6AHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGJhp1iYAAABAMASDBGAiEAohznDJ5uR0FALi5PU5pbzYb4+SSkf9VN MN8jqVIzVXECIQDXatML4b5W4XE26V4hH8rZaLEWA4uFbrcWlJ7Vq0V1cQB1ANq2 v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiYadYvgAAAQDAEYwRAIg EbxlgB8Wg/qYnduH/NLzAXOC0T2hVwEYqwPfyvRtIH4CIGQmbWp5aAgyAfbXcnEt Vz3OBeaGS764mspzpimp3CNEMA0GCSqGSIb3DQEBCwUAA4IBAQATA22IymhNOPDL S3v5uwGQAaOuCqo6YDX0QJcXuHeniCtfNLqaQkDuldSP1kessFVetHjxE9OfFcWX dqK0Hm01IVjJUn8yEWR651AcB/FxJAdMOYxEWbNeRgievT5MzKyhIeENfvGD9X11 G4e28a3EGUi2sdlDDrS4NHfeoVh3J76lHhFZmv8CqbqSMH13vX3Tf1l/aU2H9rhJ v8Y7mqgGWatil3CJHlmd101NkWTBFyo57iy9PqlZLXx8GkxY/PqWsYgMzSazNewm 4mJ3LM5Gc7JMNFRh4rNPIhGBDHrlo+ZqWioEgADonw2bfkVyrIaREK6OBJ0Vih0E v5/6v6Mm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoLgCFlyi0fS6KkAiSkKv TpUPT1u0kDgZZejjHRrS0IiZn6dO92z3h6ByfgtnRsnPrV6EVXK1E1hi2MFHrgxP l/xM/iqWDmEswrulox6+CEiSqMGVqklWUgGuA8gdZvdrgXbijxJ1u20Z0EWeLAnH 4/gedNHCDN8DjXV81XeF974ETlYju0S0HPcKZfqJ3Lmhb5Y65CWjmCIPZAO3fFdM VpAwqzcsYfToeqzZuvbLTUECWu8PVoWlagYC+lJs4wfX1GhYYMP9FiF7tF39QdVE 3fqPKceU6xD3dboTSvKm+tm1bvFuyv9LvKikcpbKmgD3IoddsxKZkt+03XjgNeRX sfJ7wVmplnkw4tQVOrJXsjzHZpYKnqzKVPT5xyfqMh26f+UAFB4gxhhdV1ROMFAy ubItRRBsAHMG/hrNfTdStaoTLcpAWi5u0wUdm+3VbI0rm6CHlVB25tUV0/FHrkhw rlMnzWu1cKh1o22C3pPsvKwKrFOEnl/5z9Kowg4zFxuwaOaxbZwRaNZAR9xvdAqD pAAw1Cx5HIFD8WUPKsYUKSe9MVO3YQQu+sNsdfmtBx44fvzXwj6z6n8WG7Jo97jl Mp5RLBf1L8sxDBqffr5ddu7DnVUGamxVC/VTIzeXWjhnnlVYV88T3YzDmfjmOU4v 2CwZ5Oj6ANiNR4QiMMH3T80CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13767732510262488917 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 06:36:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 06:36:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'highradius.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655675424995604348028580928422028014344584159482603237796263010794189357629405062847517983586456598671669134877304497964284212245807330750903464608277352267012907940484555364378326401844823600525721600854151333822441881432485252458135956573630441178880958847965013096737075501586503755157910599230666921513389061724114304819837910941732911950709075078653531792994641851066904634001326507115927945989073643550331722868059121352526585216189676912538928525203401494048683543140095444684567820873158481785678834703582638165337777377325776272310905208128205708650798560469911691997322575672790802550225846657650083007628707282357932657419373795140108408582859387159263640482602584843775968106857359317290575304464389324729764771721100001587789524069361832176019260246880972270679155476118866888264000657884330868069218754156361118994588868273963984655561504536029225156501775526281336848406992950324450583921691498087713702897093473850094323531514482211517503875540513523770042766627118446344106332771375716888264323192990170522493144698730460878570333263535365595065872282458989064710150176265940079983503163880204836283507863168314040189140968003150864409675641437837808022922074995516274973355116712986858385880822159819224888615849933 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7223.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highradius.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 211770b12eb00911ed174819643a635e7b9e55d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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