bhutanresort.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 44:f8:5e:5c:b1:57:06:64 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bhutanresort.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 44:f8:5e:5c:b1:57:06:64Serial Number (int): 4969825941008615012
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 8f:2e:da:bf:c9:77:f5:0e:69:72:f0:34:03:6c:1a:06:b5:c3:48:fa
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 20:31:4b:f4:aa:8f:a0:a1:03:ac:c9:b9:e8:64:2d:1b:6d:1b:74:9d
Fingerprint (sha256): c6:00:54:0d:98:06:52:79:59:f5:27:ec:0d:b6:97:e4:40:ab:d0:85:de:0b:21:48:2b:df:96:10:f4:39:e5:4c
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6562.crl
Check the revocation status for certificate bhutanresort.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bhutanresort.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bhutanresort.com
Other certificates including the domain name bhutanresort.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for bhutanresort.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhTCCBm2gAwIBAgIIRPheXLFXBmQwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzAzMTk1NjIwWhcN MjQwNzAzMTk1NjIwWjAbMRkwFwYDVQQDExBiaHV0YW5yZXNvcnQuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwb0n7NxFB32eOrTUOTBNyYSU6/PD 9a6tbKOt+oC9pUtYlzc4tPbrhNFR08YkQT+U4bpdEZm/ZvwQIoyF6VNR7UyEWhv5 QH7B39B5/CYyiJWllQufGWvCHfiaDSymkJ0DZlQB0wKu4TAPr0u0ie+b3bSP3KTT Q+hIunt4UAbIHTpjWLZN597+RwwBQzOoybti54NuANg0hwIuyikA3h0CPKbWU5Ri 67+NIMNlb1FPoQW/yF1XVmBs1VHGwMEQ1nKJeo5Q3j23JGmj3MD/2B+ksz5YUaOt a4SFh7JwhEp2hIUR2lCzhL2pm/fzw/7VoQjqAOuF1vD2dJcWaNTyGntza/jC7Co0 HRg3fUp1qaYkA4GkQrHTK5C+8Y5cFm7WOKIDy7AkkV3TAYRxIq2hkgGB9SP3dQWL A6DrwB3oFCZuFTeL/5lYLLpeevzV04+4YWevPi7oU+MDwd5CsBbsqAyeSF2Xnrka WLmdw+2FsPUgSsJ8Zn4NH+j6DLYApBu2EIolow5qJHepLzwDkKtsh9CF4Hl7fKZw omqtdyL+m/nAPWM6qkhbOtCdazrYb9aUM/SkI0oUrf/ULoyc6DDeEPvCs6PvjlJ3 AOqFENFC+dkvdZCk9FXImVm7k2raE6NMInUsp5WWSRIlHbh/vFrgWaA0hBSo6bhp rj3oKU3zp5qMvLUCAwEAAaOCAzEwggMtMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAv MC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNjU2Mi5jcmww XQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8v Y2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2 BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHku Y29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNv bS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7 bLPwtCyAzjAbBgNVHREEFDASghBiaHV0YW5yZXNvcnQuY29tMB0GA1UdDgQWBBSP Ltq/yXf1Dmly8DQDbBoGtcNI+jCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJHVPYpgAABAMARzBF AiB3HYaxywhSSIF8H89l3qlQ1YCpOznpuUCPsGDbA1Pl4AIhAP+ubxFoJKcg1M77 dUH+QK5PEQieHdSZ7Of1CG+sVE2yAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGJHVPZdgAABAMARzBFAiBvEut2CgoqQA1ARSNk7+WpDqnX1mmb /29CzylsBDUQxQIhAIpa2uxWtal26B+9uEFZ/9X1XKxOu2E2mK3a9Mkm1EhQAHYA 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJHVPZ5AAABAMARzBF AiEAw8jIcsObVXDtRWwAiybKPO5FgQXk1b/EVgXk8c5pUmYCIEz70zQ7I25p/HG/ ZfyE6TrT0oKeAJPDrRe++nqB1GzmMA0GCSqGSIb3DQEBCwUAA4IBAQA/sdXJdgdE 9eyigr4v5RznLiVwQ3Kz4mELSVcvJf4d2h751yxAgckNUtu1Jqxb4pJ/nodwGIGH CX+bpTEcaM99FAEc7KSfvASfedDJ3Fuoimi2TN2s50Egxrhiis0LdT7XB2zbi6hv SH6GIoeWRTBtZVPdT00ZMSaJQjTGJ8IXj+J/Mj7oOeyiLjprFMly4sE+d88TcORD SYUpfcUr1vHte4W8eZsEoN8wWKRhN96JCNocwukNEbAfTYkvQ3PZDxPdfUyZyHiq m/Crm2ziB/UCn6aUFpKah/TW5mtc9QG/1ryS15Ob8BZIOzA0oCO8xjTWpkvmL0Xs cA+j/daTyrdF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwb0n7NxFB32eOrTUOTBN yYSU6/PD9a6tbKOt+oC9pUtYlzc4tPbrhNFR08YkQT+U4bpdEZm/ZvwQIoyF6VNR 7UyEWhv5QH7B39B5/CYyiJWllQufGWvCHfiaDSymkJ0DZlQB0wKu4TAPr0u0ie+b 3bSP3KTTQ+hIunt4UAbIHTpjWLZN597+RwwBQzOoybti54NuANg0hwIuyikA3h0C PKbWU5Ri67+NIMNlb1FPoQW/yF1XVmBs1VHGwMEQ1nKJeo5Q3j23JGmj3MD/2B+k sz5YUaOta4SFh7JwhEp2hIUR2lCzhL2pm/fzw/7VoQjqAOuF1vD2dJcWaNTyGntz a/jC7Co0HRg3fUp1qaYkA4GkQrHTK5C+8Y5cFm7WOKIDy7AkkV3TAYRxIq2hkgGB 9SP3dQWLA6DrwB3oFCZuFTeL/5lYLLpeevzV04+4YWevPi7oU+MDwd5CsBbsqAye SF2XnrkaWLmdw+2FsPUgSsJ8Zn4NH+j6DLYApBu2EIolow5qJHepLzwDkKtsh9CF 4Hl7fKZwomqtdyL+m/nAPWM6qkhbOtCdazrYb9aUM/SkI0oUrf/ULoyc6DDeEPvC s6PvjlJ3AOqFENFC+dkvdZCk9FXImVm7k2raE6NMInUsp5WWSRIlHbh/vFrgWaA0 hBSo6bhprj3oKU3zp5qMvLUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4969825941008615012 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 19:56:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 19:56:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bhutanresort.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790385715213020822735351003696337657579544407627633989645445434840685317434624201557175726010416998905877188618402783840289126144364449205776098411979631956868021254320694095295635835224118268075598666383959017739339762318454280128762296765996161248265347867048124911985639345126745726842580976927009052816812751052950247111841729777154342043304376616576988037903296690451970190642366527972928844160740975890258116205889900788828964547824768577177863901798422597328777161436983900398744743669023854721522214908140437980098109474063286833061300500391358666873141964376997468898351065468143064610451213934019047093684999993221012308741151324488806411205615994583522354030947116368198108047194574943423678216698052388897407764030190226393741379550601900562791729634045291945738735807628177277837445372524014736335574315182912386363875382650282075939161112572598400216841262258980828766389487121356417645537463885709208605999947321543531992013379728506485791729653073536165773532404397969832440485087366797579470009604221005570518803375765958028609695934329920935361663884606275062643708974930007451525482947652621451107463262622780706251711004803663625426279841104010980640346877019395996959012367727555490429377369936251145594033978549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6562.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhutanresort.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f2edabfc977f50e6972f034036c1a06b5c348fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001891d53d8a600000403004730450220771d86b1cb085248817c1fcf65dea950d580a93b39e9b9408fb060db0353e5e0022100ffae6f116824a720d4cefb7541fe40ae4f11089e1dd499ece7f5086fac544db200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001891d53d976000004030047304502206f12eb760a0a2a400d40452364efe5a90ea9d7d6699bff6f42cf296c043510c50221008a5adaec56b5a976e81fbdb84159ffd5f55cac4ebb613698addaf4c926d44850007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001891d53d9e40000040300473045022100c3c8c872c39b5570ed456c008b26ca3cee458105e4d5bfc45605e4f1ce69526602204cfbd3343b236e69fc71bf65fc84e93ad3d2829e0093c3ad17befa7a81d46ce6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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