hartsville.org
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 26:2f:fd:f2:1e:da:e9:3e was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hartsville.org
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 26:2f:fd:f2:1e:da:e9:3eSerial Number (int): 2751697113688238398
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: ff:1d:60:b0:32:28:c2:7a:8a:b7:01:01:7f:f6:69:b2:98:52:84:42
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 5c:4f:e4:5e:8c:b2:11:42:72:db:73:a0:71:89:d7:e3:ef:50:0c:05
Fingerprint (sha256): b6:ef:f5:7c:9c:55:59:7d:32:d2:a7:34:b1:6a:37:39:bd:4e:ac:01:ac:c9:3b:96:5a:c0:0c:30:c4:cb:dc:e3
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-7145.crl
Check the revocation status for certificate hartsville.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hartsville.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hartsville.org
Other certificates including the domain name hartsville.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for hartsville.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHgTCCBmmgAwIBAgIIJi/98h7a6T4wDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzIyMDcyMzAyWhcN MjQwNzIyMDcyMzAyWjAZMRcwFQYDVQQDEw5oYXJ0c3ZpbGxlLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMPIvttI1NoUpxy3e+9y0/BNam5V3gYR AgIYKD9826/gj/iQvorV/piwte97wnvvntC9vpzuA+Xzguu/jvDCxk2bwHpDAzDp Fmp6pgZ7ZR/dt0/g2kLRKrtZED480z35obmcOsN7LXPCLWWep3IMnZubeUufhhRA 7TAOuUtpN30J4QPa66aKuAXiWy3Jq1rA7YkcB7UVTg52A1AQyEOzYkOO9gy7aHf9 nD2b3oE2YrvG9hBCnUPP6nf3pYbuk1WZwZ42p1wTP34VLa8ohp+snV0pZsMtwG1B YdV8tbeL+cn1A7gS9eSCDlMEaqFlbMZsLVdyYtowq9M5ht5hZWGUbkWIPnXUBWlK V0FMuzTUjy0hxfx2ExZTeT8DemDtVPqhhgaQCYut/wHv94ejlZ4ByLrt0njtzHdr Iim60cwXx79usq5wQo2B1/pQOPPR78UyBys63ktkdctARDAlPLUlpbeK/8M0ZBIT R678yE83i8mis8YeFwCsjB4bvyKMCq24RpIcKEZbyPvkO4Nae6MUDqwHj2dV+6gn 5pR0s+P1g2xTfbxEJpTjLBSjoVcn8vJbwoXiTVxUTjBjoB+n7mgQx1beS0yL/a0I TaqlOoj3tKnHXrqQ6oafh9e0Xd/F2cT2mIDVu4IjXRwZCYs/t2tKTxc9IZTE/OyS cQvSBMYtjXwdAgMBAAGjggMvMIIDKzAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTcxNDUuY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGQYDVR0RBBIwEIIOaGFydHN2aWxsZS5vcmcwHQYDVR0OBBYEFP8dYLAy KMJ6ircBAX/2abKYUoRCMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYl8ewAEAAAEAwBGMEQCIFGU zDRqiFTERFJONTOp87m+PgQyiKK780fjqIyL0Y9BAiBcUulHcqhqnRUdi0Ie9Fg2 KuWcTMis3vcaCCi2QpoBHAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiXx7AOAAAAQDAEcwRQIhALdsL456Y/bCGtSURhZ9ty/TkZoRmq6lGSfh 6Asd1EHOAiA+daDjgdzwyMFEXDpm6cMuidgEDoR5/nmtwJtCU+0AnQB3ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiXx7AZEAAAQDAEgwRgIhALLc Tk/zIjxpuwv/cM//oqPrwQzgSKis07cu6teKV5xvAiEAjyADmh/5ESWvjS5PwwSJ KDcYUiDjvWBi0gs/ywJ8DxMwDQYJKoZIhvcNAQELBQADggEBAD2qTWTTjyAKXnc1 2ipMiO6U5GNxzGq6fKKTYredP7V7tZSnwwOnS0C/orrFbVfMCtQVdVmhCQSE2o1R ye7iiB9nLAsK0KZdCV0ZkyIAelZB8L+nl8bqi2Ai1ontUOQKC4lTO9PDrBjrI2kK Jj1gs3ok38R36jZUouie2loYOIk0+gsyC+KTvPBvwbpXGCZRsVfWmIZHZkfM8Z7X u0XuRtsjqrblpIe5eUIOOaKBw3LQZzFYmL952/O5xCwTAUEv5X1sRozjpbsjpf2w VYOGdQcG91aebZOBW6c9wgSaDQ+0tTWYZKmDbBWriBiV4q+jkRJQJustWHKfQ67/ BIK9X3U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw8i+20jU2hSnHLd773LT 8E1qblXeBhECAhgoP3zbr+CP+JC+itX+mLC173vCe++e0L2+nO4D5fOC67+O8MLG TZvAekMDMOkWanqmBntlH923T+DaQtEqu1kQPjzTPfmhuZw6w3stc8ItZZ6ncgyd m5t5S5+GFEDtMA65S2k3fQnhA9rrpoq4BeJbLcmrWsDtiRwHtRVODnYDUBDIQ7Ni Q472DLtod/2cPZvegTZiu8b2EEKdQ8/qd/elhu6TVZnBnjanXBM/fhUtryiGn6yd XSlmwy3AbUFh1Xy1t4v5yfUDuBL15IIOUwRqoWVsxmwtV3Ji2jCr0zmG3mFlYZRu RYg+ddQFaUpXQUy7NNSPLSHF/HYTFlN5PwN6YO1U+qGGBpAJi63/Ae/3h6OVngHI uu3SeO3Md2siKbrRzBfHv26yrnBCjYHX+lA489HvxTIHKzreS2R1y0BEMCU8tSWl t4r/wzRkEhNHrvzITzeLyaKzxh4XAKyMHhu/IowKrbhGkhwoRlvI++Q7g1p7oxQO rAePZ1X7qCfmlHSz4/WDbFN9vEQmlOMsFKOhVyfy8lvCheJNXFROMGOgH6fuaBDH Vt5LTIv9rQhNqqU6iPe0qcdeupDqhp+H17Rd38XZxPaYgNW7giNdHBkJiz+3a0pP Fz0hlMT87JJxC9IExi2NfB0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2751697113688238398 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 07:23:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 07:23:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hartsville.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798729696095915647787968383584589294156196447750978563036849474304428234456058049494433610649805002869031976711799792028092655112656818349248801124185168815866215154557210888344859279365593903577067957940060786837961410585569397718315057337231229236097373206622406125241971369254996149289465994800512655942777413291243217238777105748483236759159960386848953501526814914292447069486071813221523911808548987607022480423981252190151605908953053952327402390005365409450679448678759930555152554820299484830405407853898311584961571015293738259023750020478294129646727855395090938776437352234721511135611516980329381278060435142579312374702401075905108632400554175998680021213089638977279773800692573645511667752179356370038567333823810859153259015470170546692356357449584710301107206835925788164853100948009729507943672428588216909491287462602283864066008092264859973882855040064114720690090641931127686792383469193043046961976826841799298295707385354186301013669684817149425449071273467297901334314294360228403321553685372631893676686539695993524134377630768239294744997294670033520691273636117252697599157170038189543902785233993361174066547111366914053947764337217226670022768522298203471645921247379297568640210769522087524797952916509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-7145.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartsville.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff1d60b03228c27a8ab701017ff669b298528442 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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