bumble.jp
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number dd:c0:e9:db:b3:e1:bf:dc was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bumble.jp
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): dd:c0:e9:db:b3:e1:bf:dcSerial Number (int): 15979028607735545820
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 6e:63:e7:75:d0:26:81:33:1f:84:1c:f6:4d:9a:84:18:4a:0a:1c:4a
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 5f:c0:4f:9f:28:85:3c:c7:bb:0c:00:87:c3:16:8f:00:60:b1:61:c5
Fingerprint (sha256): b3:6e:89:0b:b8:50:d5:45:93:69:92:fb:bb:0f:50:3f:f0:f3:2c:28:57:8f:ff:0c:1f:8c:cd:04:95:a2:93:98
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6840.crl
Check the revocation status for certificate bumble.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bumble.jp
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bumble.jp
Other certificates including the domain name bumble.jp
(limited to 100 certificates)
Certificate
The complete raw certificate details for bumble.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHejCCBmKgAwIBAgIJAN3A6duz4b/cMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxMzIxMjQ1OVoX DTI0MDcxMzIxMjQ1OVowFDESMBAGA1UEAxMJYnVtYmxlLmpwMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA8PpvLR46QLH9R02jhikFBw+JqXgpjPXmTIeP bkBC0dLv+pX/wUR7z/Hy0yRukiiQvL6Jmo5cJwWU/isuyB9D1CyzAmirsF+MxNgj wGaFQ/7AqdnXtDRvMnXgWkEMHDQQSKggWLcyvMPNF9R9FN2QenVO7zuCkvsWU7zS NAABhsAFLuq0l1xT5cPfkSLYJZ5WCsR56pPtmB93rs5AT+7AZIYAw26jhOF8ZjPB tpA8rHT+EFcOSKAf4mldNOwlLSCmfuV/ZFnzHWQPqSvHgV4PDP3bldkxPDHDLIZZ 7hRmsNEN4ODQOyt/78cPgserdGHKEFSVl6kVYHysDNZsL7QLSuLuVY3BqqarL8+Q Lf/2aWT8wImt6uXbwlMA+Rlh3wyGqtuTAhg0pxDYxrAgnIhQUprkXCjCXQUIwz1E WgeVMqUPIn6Qm++Fm79VF3nIVBdjfqV8n6KH8Lg/RdJlP8GxWGV83wjxEmN5rAER 8HyyPGUpJDsH+ZERJwBj/7Jrzrytt2vJPSn50KW7Gm3aDrseN3ddwO/F3lv66atV KhtVa8q5acsEUPbs2qrnAIyMuZLOVed7gAFTqCCW+DPaD2RUZXn7B3ouj6x8RSC2 r9o+YsY6GlFpyisVFJbagFqfZxdbWUFZHDaZDzSbYyk0GFwVGxsiWjskEf8XKnlG HFm/Ge0CAwEAAaOCAywwggMoMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6Ap hidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNjg0MC5jcmwwXQYDVR0g BFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEF BQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBA BggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBv c2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyA zjAUBgNVHREEDTALgglidW1ibGUuanAwHQYDVR0OBBYEFG5j53XQJoEzH4Qc9k2a hBhKChxKMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAYlRJJiIAAAEAwBHMEUCIQDZEOcs4YGngopE FFgz/MLFHwIP5djDxYiZi0AR5IDTKAIgP2xjx2VUvNvY6G0TXzOZZBGMG3VjXDtJ vEOHyi8clJQAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYlR JJlSAAAEAwBIMEYCIQDNA3UoGiaSph14RTnuuU2QVS5AQXxMWE+34eZofx3fngIh AMafGj+Fzg1beWALx8LkonmwJJjzT5437LuDO70WL3TcAHcA2ra/az+1tiKfm8K7 XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJUSSaKQAABAMASDBGAiEAkCo/FKa0Wk63 oz6sdV2uP5YX+THAZhthY6scNh6dl8ACIQC47KNNqSiGyRud7QpVb4hnREzp4PB7 yu84GU87VbFKMDANBgkqhkiG9w0BAQsFAAOCAQEAKxYBIpuPS0ulORZLjVokOXJs g4+6sqmWTXgVoyBDo1Hap97CNu8dRjn6VeJ1OEMfPMbgZxTXngQNaPgiQmnN805C hAnduTATTSHd7aNAOZLttKpLmms9LI4TuqbpNXmJyL/OAae1m/BPjh8ojWYPz8WN sGViUZzD4F6+uOLQdQGkePEAyMl0Yza7j+0Ka5fJSPQgJJczMIgwtCpCNYar1UJf Y+xWp11HBBW58zxyIlCtEgaYT43MLy6PeDkm8wcPpVZ8DzCkU+TzgPz+xq9u2+ke 2AhxLyU2sQlYlqdn5KV12ZVbTjym7UUCMww33+FANdiPSxIrE2iSQUD0vtpXyw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8PpvLR46QLH9R02jhikF Bw+JqXgpjPXmTIePbkBC0dLv+pX/wUR7z/Hy0yRukiiQvL6Jmo5cJwWU/isuyB9D 1CyzAmirsF+MxNgjwGaFQ/7AqdnXtDRvMnXgWkEMHDQQSKggWLcyvMPNF9R9FN2Q enVO7zuCkvsWU7zSNAABhsAFLuq0l1xT5cPfkSLYJZ5WCsR56pPtmB93rs5AT+7A ZIYAw26jhOF8ZjPBtpA8rHT+EFcOSKAf4mldNOwlLSCmfuV/ZFnzHWQPqSvHgV4P DP3bldkxPDHDLIZZ7hRmsNEN4ODQOyt/78cPgserdGHKEFSVl6kVYHysDNZsL7QL SuLuVY3BqqarL8+QLf/2aWT8wImt6uXbwlMA+Rlh3wyGqtuTAhg0pxDYxrAgnIhQ UprkXCjCXQUIwz1EWgeVMqUPIn6Qm++Fm79VF3nIVBdjfqV8n6KH8Lg/RdJlP8Gx WGV83wjxEmN5rAER8HyyPGUpJDsH+ZERJwBj/7Jrzrytt2vJPSn50KW7Gm3aDrse N3ddwO/F3lv66atVKhtVa8q5acsEUPbs2qrnAIyMuZLOVed7gAFTqCCW+DPaD2RU ZXn7B3ouj6x8RSC2r9o+YsY6GlFpyisVFJbagFqfZxdbWUFZHDaZDzSbYyk0GFwV GxsiWjskEf8XKnlGHFm/Ge0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15979028607735545820 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 21:24:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 21:24:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bumble.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 983105524503716127267427896911406011180003495874938971200208993157343534215529414104521899467431874487928156540763438267520018863384490379807531344429298016995234700920420122413960160799544649375953757693789441684075417595195519140959359686511372617801858083074258583178764097291454010549390072821970410393020178539312935090434696414532919080969095461211693886435017843882919452060692451556697538322237922705802367803875194060240944591303487677366126403793325848797338284486397507939102813267959457093777485618758976238736251665169211678760461411247165301810946346415445424353953769295299191190815248791687281154348442330057458797215592808208478142614710080246745791083551751066211001954178502678422666738827485847447862238063849264228102727107388862526500596444048191109072455073795390759030697921874437188314108518969396686389902541338813575115364188216935006915361664836183700492001786232327464373866280981127139234572262679961311697350162190514037350159996382286682508395296334279059671154451995407497658958939937816670033415246437129356714872174418914407399211248454504828446248974787168285921010080926817783001842252058130605624974654440776517780563551601941192692018830216938140467758921768868828476935892772067940672257071597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6840.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumble.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e63e775d02681331f841cf64d9a84184a0a1c4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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