crystalscapes.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 9b:e8:11:b6:d6:55:0d:2a was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=crystalscapes.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 9b:e8:11:b6:d6:55:0d:2aSerial Number (int): 11234248747453320490
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 5d:34:42:29:47:13:aa:0b:03:a5:3b:77:ee:12:d5:0b:64:e6:55:e3
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 6b:bb:d7:d8:92:31:76:d0:82:34:8b:58:71:ef:da:a6:0f:95:5c:f0
Fingerprint (sha256): b9:f0:91:a1:69:e8:06:82:61:e2:c5:57:b2:71:eb:c2:92:9b:5f:e2:81:94:a7:86:0c:b6:f1:4b:13:d2:23:29
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6826.crl
Check the revocation status for certificate crystalscapes.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for crystalscapes.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
crystalscapes.com
Other certificates including the domain name crystalscapes.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for crystalscapes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHiTCCBnGgAwIBAgIJAJvoEbbWVQ0qMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxMzExNTE1N1oX DTI0MDcxMzExNTE1N1owHDEaMBgGA1UEAxMRY3J5c3RhbHNjYXBlcy5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDq7QwQA3OaC+QOOyei5cTW0J+p MKd+CLOdkvQSRNCZFD1MMafSFT9o5/T6iGUicOkhwJ7aCEccRrVloPDerYJOtbIh uWuTAf/YnBkqNvOcCMb39PP10wGo2n0VsePfxi21Ql+6RiPT19s6R2iRWFfYhYfj jcdDwGIisSwhebL9Sd2yOCVd3VkaZVU18WPUiRSiliWBmhIH1RLwJsm9Ms4/8Eyv oKkVFAgDrf9vTmP/UVH1ioka8mTn6KwXwg7z6WqyBnkUCS+JR8BJrnbMtwL2l06p MWk7Vb8bHR2dbZAcdbDQ0iiTFH19zFzooRbEHOVHJaqH4HMTheQdBId7MtbHzQvn APAXFKWuBoUSqJShQi2WIcVYOzhLjh7lRCuDcsqj/+o1t+2go0OD32FXmzvr0W48 DtFeHKflJjmrOfpBms73AsQW6tSnUs3qI0mcYHBCR4H06GMgpKgeP3fEGiNqnrMg 5lZfU9sYLmfdzkjv+Zomzx4duLFVGi/y1O2s18k8muTXKw+jSCmpAulvt4cRvKMK n+fvvcjjT7pNAMBAqxTol5qc1pyzFPZEkOs52tUfovKEuAlD4XNHT1K44o8pehXz 9quOBoexoZiRa5zfWjUhpQlg6s5wMkuor4ck93j2rOY62w6zqedkTgcukc5STtBO g6WsrND6GdukimKBJQIDAQABo4IDMzCCAy8wDAYDVR0TAQH/BAIwADAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQx MC8wLaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02ODI2LmNy bDBdBgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6 Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIB MHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRk eS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHku Y29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz 1/tss/C0LIDOMBwGA1UdEQQVMBOCEWNyeXN0YWxzY2FwZXMuY29tMB0GA1UdDgQW BBRdNEIpRxOqCwOlO3fuEtULZOZV4zCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp AHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJTxf4nwAABAMA RjBEAiAdqZfh/jbcdmQaoWv7PefhbEVsLwQc37ozJ5+zHZeR4gIgWAMUGtQs69Wi WgbIQJFWe5MPRF6OhIJxDD/ghvlDnvIAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bd LIHZu7+rOdiEcwAAAYlPF/mwAAAEAwBIMEYCIQDwAdIswjY/NFdiYpdm45WRmLty lVVA3bNNTuSzabC7UAIhAM0V+ggp/eU/Q/tK45jHNeDGNZ6lRyo1JRlJ1ojLUzdP AHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJTxf6IAAABAMA SDBGAiEAgLQhT/kNII0bQXjj/ugdzi0/5pxYdzFZQsdqR51V69wCIQC/bAdL9I5F CpEvrXoOr2rQJnW3o9Et7qIEktcN5fGr5DANBgkqhkiG9w0BAQsFAAOCAQEAIdZO IumV5y0jCdL5CAV7eR9iIJXIgZklopX2C5OYjldXpsgGMhtZHtRoNoliOCq9ez8H NTGj7TTqlx+VkeVB23fyBWvRVVfxZFxOixpH6G+HHM8fBbl1TyxZcKwedYzSc7IA IbtS6ZXTnAVAMax4Nu6iFOTrz96DgrPyB5S5DNRWIk0aD94N9E24cX83iwxXIOyK XF4lEQk1FVxubEbYJpP7KcbQ7NHwfoLU5EtdDbDXW6izvXXzIiEkm3+y2lRGlvAI umCmKwNpUVhWi67o3nfiKuB6+eAiktsZZ1qBVGz+sU+Bxd4+zCB0ONA/maFKie3k MOtnmQE/btsGfXNotA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6u0MEANzmgvkDjsnouXE 1tCfqTCnfgiznZL0EkTQmRQ9TDGn0hU/aOf0+ohlInDpIcCe2ghHHEa1ZaDw3q2C TrWyIblrkwH/2JwZKjbznAjG9/Tz9dMBqNp9FbHj38YttUJfukYj09fbOkdokVhX 2IWH443HQ8BiIrEsIXmy/UndsjglXd1ZGmVVNfFj1IkUopYlgZoSB9US8CbJvTLO P/BMr6CpFRQIA63/b05j/1FR9YqJGvJk5+isF8IO8+lqsgZ5FAkviUfASa52zLcC 9pdOqTFpO1W/Gx0dnW2QHHWw0NIokxR9fcxc6KEWxBzlRyWqh+BzE4XkHQSHezLW x80L5wDwFxSlrgaFEqiUoUItliHFWDs4S44e5UQrg3LKo//qNbftoKNDg99hV5s7 69FuPA7RXhyn5SY5qzn6QZrO9wLEFurUp1LN6iNJnGBwQkeB9OhjIKSoHj93xBoj ap6zIOZWX1PbGC5n3c5I7/maJs8eHbixVRov8tTtrNfJPJrk1ysPo0gpqQLpb7eH EbyjCp/n773I40+6TQDAQKsU6JeanNacsxT2RJDrOdrVH6LyhLgJQ+FzR09SuOKP KXoV8/arjgaHsaGYkWuc31o1IaUJYOrOcDJLqK+HJPd49qzmOtsOs6nnZE4HLpHO Uk7QToOlrKzQ+hnbpIpigSUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11234248747453320490 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:51:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 11:51:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crystalscapes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958414320800626175928814584017858320471019837544450120176435937627652590148803828368319611736209797395567291502443382460601461644106567566862504649169829626182819821733399072594989412987025564653298030484624213771601301904100939147557838136945298170917528367835896987336718967460195958691684714771690038694373663330159565175036510892958422823404238225122909439909842717664728420025573299819942256059647176867605200833203659624880507670771743799005414130899242101604184697109131218877926469819668151269705156936347593599382015411335193081950716732700477793858666999521936206349831820974253030279748460645750074996534997802930327298421887381528142660044964657674548622391545374801528875316611675549438282345348206772245771064639679834230871733217009136730877240862159378920897994047254019218944708356640723010115476369041154735121932705319597040523623411769928244921879392109643212651404498951895444680935422081936024995540698939539238871126144318260384776772565483378048471326943976363294818066425776539676522610728530803688640724964777839384514482285222635847576969516526303047199965810253115625625163495504612944925769173511893560863907457416338947387228275207474428659621645522537790629108394493857957002395057152239131470107672869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6826.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalscapes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d3442294713aa0b03a53b77ee12d50b64e655e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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