trusttrue.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number a3:81:53:e1:d2:f8:13:73 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=trusttrue.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): a3:81:53:e1:d2:f8:13:73Serial Number (int): 11781790329550148467
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: c6:f2:46:24:5a:e5:01:98:c0:d1:78:4d:33:39:ce:20:ad:43:9d:8b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 10:91:39:22:d9:55:bf:e8:9a:90:96:58:b2:dd:2a:6b:67:aa:1d:fe
Fingerprint (sha256): c2:a8:78:62:14:5f:30:54:a2:5f:dc:e2:75:48:ea:63:fe:37:58:94:0f:65:62:bd:c9:44:76:aa:4a:f9:43:db
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6569.crl
Check the revocation status for certificate trusttrue.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for trusttrue.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
trusttrue.com
Other certificates including the domain name trusttrue.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for trusttrue.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfzCCBmegAwIBAgIJAKOBU+HS+BNzMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcwNDAwNTE0MFoX DTI0MDcwNDAwNTE0MFowGDEWMBQGA1UEAxMNdHJ1c3R0cnVlLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJrJT9mJFXuYqcM0z5w0BVrtGGurFtRO fQBpxDcyA3NdsWvSGd5Z/r+5HoWOHSNxOUMIdz7SZlPuO9/cmF4uSwJ41osSloqZ Rw3EiyRW8X4EK2tMlN6Q4MG/2dRF4aB7N0t7pau1UOor+oRHNd2jdaJ/atB7fVCk cCuM4TrhAtgkCu+mGBWwj4OAJS3/Kfbj4wmSJezsWUXFn82gNEQqz24M5xsxk/Px HakYCflvfM8LhK3QdP2DeNO3rt7n7RhyX+UEaFmcEj8pBsgeBILWkmUunEUIIRNm xaqdJoK475lqFKAH5f3REx7UWW+iId+F9pOmImpwqGLN4DaBOo3EeJKPHXa6f6J3 16fcOxzUEbxWYT1e824BFQShA9VIo7oFQjajUjQj5y0ZPd4vnHeWiIrIqBMAh87O Y+RhI0+PYEv+77bpY5PLBsoMEa4BPvwXikD4THWdHePvIqUtbeJYrb46w5G8QxFF OrW6zyTP/dHKnwaYAwWX3dIqf+sO8k8slsd45YjnZr0edTWQ2v7S0BCbMhImTHYr bhMKponW7IabhuCI44CXBx+50N344QDQdES6d4gwbRm66jn1vCA8h49mgK3MOL5C N7QhkShlfSrQFu21wGvrAp3F3SaaHmRq9OFex1ur/Qd29FnR6d9imk9FjpzZ61Zo az11AY/+5R17AgMBAAGjggMtMIIDKTAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAt oCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMxLTY1NjkuY3JsMF0G A1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2Nl cnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYI KwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNv bS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20v cmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz 8LQsgM4wGAYDVR0RBBEwD4INdHJ1c3R0cnVlLmNvbTAdBgNVHQ4EFgQUxvJGJFrl AZjA0XhNMznOIK1DnYswggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV 2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiR5iOVUAAAQDAEcwRQIhAIOG Ynpzgri+r0rr+MBRvhthWG7/C3RQX8xfbsFl28+WAiBhWfNTbTqLBpC3TYFguPHO mB7ZsOv9KEbLq1OGHi0tBAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiR5iOiIAAAQDAEcwRQIgegpvI/IP7wF9+iPg8Ct9NUWBzNI8f/dsMISE RSMK1LsCIQCwWa+riw28VR1bMD6tiK49suCnbCvr8uK7J62qjSLhSgB1ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiR5iOoYAAAQDAEYwRAIgWN0K oye9pKtEFU0dn+ONrE1Vxd5JI7VyT0jUhRRxIXsCIFdcK/AoYAJAMU055gi8qyy2 0F5LVou9yZm3U8z14OWrMA0GCSqGSIb3DQEBCwUAA4IBAQCVNUbKU7MZV6Mr8mSg lwEYYTc0PxA0HD8bA/8EtBCgFK+tJwwkLWC7l1SVnmbdJMvGi+Ev/lNJ+RECzLA8 fDQ/oPuIqk7mfZNSkbwOOvGHzzYLmEwMJax7vNNH6QkPpdkQZ599SKA0DdPI69Le mjWmvbmnRL2Tgvs918jVzwCMoJxc3B9JZCU96V9j1xnVyjR9BW1cJ3AtjJbIqhm0 HlnL5maM4lD0QME1G0BJWzQs6j0XwVNYmTF/apAMU+HaVQt2eydWCLYeahzj2tEJ mTz5I2l+ZmbfOuFivgyJrZ0Lx7KkKukE8PPnh2XL9nRv2Htb2FI+SKxo8af+ZuH/ KwOR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmslP2YkVe5ipwzTPnDQF Wu0Ya6sW1E59AGnENzIDc12xa9IZ3ln+v7kehY4dI3E5Qwh3PtJmU+4739yYXi5L AnjWixKWiplHDcSLJFbxfgQra0yU3pDgwb/Z1EXhoHs3S3ulq7VQ6iv6hEc13aN1 on9q0Ht9UKRwK4zhOuEC2CQK76YYFbCPg4AlLf8p9uPjCZIl7OxZRcWfzaA0RCrP bgznGzGT8/EdqRgJ+W98zwuErdB0/YN407eu3uftGHJf5QRoWZwSPykGyB4EgtaS ZS6cRQghE2bFqp0mgrjvmWoUoAfl/dETHtRZb6Ih34X2k6YianCoYs3gNoE6jcR4 ko8ddrp/onfXp9w7HNQRvFZhPV7zbgEVBKED1UijugVCNqNSNCPnLRk93i+cd5aI isioEwCHzs5j5GEjT49gS/7vtuljk8sGygwRrgE+/BeKQPhMdZ0d4+8ipS1t4lit vjrDkbxDEUU6tbrPJM/90cqfBpgDBZfd0ip/6w7yTyyWx3jliOdmvR51NZDa/tLQ EJsyEiZMdituEwqmidbshpuG4IjjgJcHH7nQ3fjhANB0RLp3iDBtGbrqOfW8IDyH j2aArcw4vkI3tCGRKGV9KtAW7bXAa+sCncXdJpoeZGr04V7HW6v9B3b0WdHp32Ka T0WOnNnrVmhrPXUBj/7lHXsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11781790329550148467 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 00:51:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 00:51:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trusttrue.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 631473315193891391841297869449430774400076620865885414385688281034654300228453104230200596809966982729088985662566836043447607104248999973263957724453045854140935404573287011325416048228493175733398338795851863598232084182421971565633153599284554287684661353939633328156858915221221833121519830430226609075126522600355190566686835943468051544449817493423881211450629163773556179012679356042896310406034907257560370300429344804519373047719911943906127185075890761454604248536729647017408840474244372555242930773148071985679303903452666655439418328616455673814916715922414772904902807216764135717188582817003134254329006369469921439459149333099557932118243225505854771639316445171413209965903855523646888251552569640870370927226498584673660843440173857720694294105837994851199284485527048143591934405284189036559556212386595552109300877327505693857805476726391488357097183688366852697555040783782872741374573366364862593184039446838712450656673883991630046256863603916860540294053150553311774403660677774938824463888693699368048925862714239402943410650218637745665883332864743787716782526145867458533464543112561806205005506709461900960801629461890753878651841279717985450842749255369526566238225299559414721496584528034192440997256571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6569.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trusttrue.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c6f246245ae50198c0d1784d3339ce20ad439d8b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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