viadex.com
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number f1:0d:fc:76:41:0c:7c:4a was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=viadex.com
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): f1:0d:fc:76:41:0c:7c:4aSerial Number (int): 17369816922665548874
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: e7:ae:dd:b2:d4:43:f4:be:c3:d7:c9:67:35:41:8f:7b:45:4d:5a:ab
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): b9:d5:ac:8a:ac:33:b4:b2:e8:d1:cd:2e:27:1a:f5:d4:6a:5b:82:f4
Fingerprint (sha256): ca:ed:e8:d7:91:9e:c4:c5:9b:c3:22:c5:ed:2e:35:00:07:db:54:69:1d:54:e4:df:79:73:e1:65:96:08:86:f9
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-660.crl
Check the revocation status for certificate viadex.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for viadex.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
viadex.com
www.viadex.com
www.viadex.com
Other certificates including the domain name viadex.com
(limited to 100 certificates)
chat.viadex.com
viadex.com
support.viadex.com
viadex.com
vmas.viadex.com
viadex.com
webmail.viadex.com
support.viadex.com
support.viadex.com
wiki.viadex.com
www.viadex.com
support.viadex.com
sbnfw.viadex.com
www.viadex.com
support.viadex.com
support.viadex.com
monitoring.viadex.com
www.viadex.com
support.viadex.com
service.viadex.com
saleswiki.viadex.com
viadex.com
*.viadex.com
*.viadex.com
support.viadex.com
support.viadex.com
*.viadex.com
viadex.com
owa.viadex.com
viadex.com
support.viadex.com
support.viadex.com
www.viadex.com
viadex.com
support.viadex.com
viadex.com
vmas.viadex.com
viadex.com
webmail.viadex.com
support.viadex.com
support.viadex.com
wiki.viadex.com
www.viadex.com
support.viadex.com
sbnfw.viadex.com
www.viadex.com
support.viadex.com
support.viadex.com
monitoring.viadex.com
www.viadex.com
support.viadex.com
service.viadex.com
saleswiki.viadex.com
viadex.com
*.viadex.com
*.viadex.com
support.viadex.com
support.viadex.com
*.viadex.com
viadex.com
owa.viadex.com
viadex.com
support.viadex.com
support.viadex.com
www.viadex.com
Certificate
The complete raw certificate details for viadex.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGtTCCBZ2gAwIBAgIJAPEN/HZBDHxKMA0GCSqGSIb3DQEBCwUAMIHGMQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEl MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEzMDEGA1UECxMq aHR0cDovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMTQwMgYD VQQDEytTdGFyZmllbGQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcy MB4XDTI0MDEwMTE0NTAxMVoXDTI1MDEwMTE0NTAxMVowFTETMBEGA1UEAxMKdmlh ZGV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANuKFFaf7WZs DD3lYoTu+OInLkQ1Nxg/BfPqiniqtmsX5ep4Qp1GaIFXFEoE09BkNdt2wqNJZLTs TMblrGPUosn6op5EMuDQ39BhXKw/1khSZFO4Xz2b48DGVsAdblW6suxgPcZUVa7c ajLmLRkHAUCg/IfutKfnwGMWdUgmgpoce3YANuLTEu5T0slrCfx/Agwd/mzelYZF 8L7CQbAB2vdjZcSLhsS07VfG0h0aGwxEdZXmmH/Zdl/0LrHCVpKlTawa3O/bjq/U KubmEDxyAHP1Kxss2rVjIfuC4kmRA9iPnN/aJOSbwomaPE9kHK312gisY4QU9WRy qCB3E99zV3UCAwEAAaOCA1QwggNQMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9BgNVHR8ENjA0MDKg MKAuhixodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcyczEtNjYwLmNy bDBjBgNVHSAEXDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0dHA6 Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8wCAYG Z4EMAQIBMIGCBggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3Nw LnN0YXJmaWVsZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDovL2NlcnRpZmlj YXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcyLmNydDAfBgNV HSMEGDAWgBQlRYFoUCY4PTstLL7Natm2PbNmYzAlBgNVHREEHjAcggp2aWFkZXgu Y29tgg53d3cudmlhZGV4LmNvbTAdBgNVHQ4EFgQU567dstRD9L7D18lnNUGPe0VN WqswggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AE51oydcmhDDOFts1N8/Uusd 8OCOG41pwLH6ZLFimjnfAAABjMWA9IAAAAQDAEgwRgIhAJpLxWQJDe26BaZ1DR28 JGgtpKGpO7whVLPYHJ0mWMh0AiEAjBpEsk0Fvvi+jKyKJetLlhTz1x/Bj4jrgt9V 74z3NnYAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAYzFgPWK AAAEAwBHMEUCIGPoqDrbFzsLQyibl0b9DCF0JRt/Oh/nvoVGTu0a9NssAiEAyXzT FBC0hmkZHczzto+Ez/96wBFR1reHCqMy/tuSMokAdgDm0jFjQHeMwRBBBtdxuc7B 0kD2loSG+7qHMh39HjeOUAAAAYzFgPZbAAAEAwBHMEUCICOSAs5xPcWS5sXw09jR 951JFZjVg0mGMGkRsT+BTZ+TAiEAkQxYPqJhr0KpqjlUl7Mhkmqk2Fvrx8zNzHsW buh/TTwwDQYJKoZIhvcNAQELBQADggEBAKBTkNSto24l994UP5fJXlRnQolOfge+ gtMCcOgaQesKbzDIrHPx9sINaCVkfOhxXpBTxv+tbGrLs6qTAgL3pC5tSRFKT/Jq Ws0kyO48JE840P3XOEtTNqx9aQJPDXTF7QGymxAkCpDfrqWP9OVoa+eIwTeamPlR KkJtIQVWONuTbiFfij/NzEiZVnFdCiGS4/8dKOSNhTyUrYBpNctWJ64vor+gOPfQ 6l9375XJLF12iAMwTm4Khy62/ALyLpP5zEWsvAnKIJZY7lzSt1wEnb2sM6gkv8Oq K1z6Ogu6o8cLRrh4u2LXb6NdEsxy30XbhoWuBJATnZKmbKgZTeh/PZE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24oUVp/tZmwMPeVihO74 4icuRDU3GD8F8+qKeKq2axfl6nhCnUZogVcUSgTT0GQ123bCo0lktOxMxuWsY9Si yfqinkQy4NDf0GFcrD/WSFJkU7hfPZvjwMZWwB1uVbqy7GA9xlRVrtxqMuYtGQcB QKD8h+60p+fAYxZ1SCaCmhx7dgA24tMS7lPSyWsJ/H8CDB3+bN6VhkXwvsJBsAHa 92NlxIuGxLTtV8bSHRobDER1leaYf9l2X/QuscJWkqVNrBrc79uOr9Qq5uYQPHIA c/UrGyzatWMh+4LiSZED2I+c39ok5JvCiZo8T2QcrfXaCKxjhBT1ZHKoIHcT33NX dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17369816922665548874 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 14:50:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 14:50:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viadex.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27714278300509035671433864055690032820027193965327543526277445867088927616955368684178242807893916133584150248444797333633679078523437846072565219205324759300813403892479505092759634289217703877311278490966782157153671767015767466179576140318312774070915852319945708192960698684181685025128408950930473573174435397608490716259666912632416470812576680366471694271711729135911097879584744324543120572960339294700261923410997955876399815739635197570718341843649688195142782578462594095249811304823832707643119734430500545379920727973505719239198597828443783530237238753365853409321875544668735522598714242952167727257461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-660.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viadex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viadex.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e7aeddb2d443f4bec3d7c96735418f7b454d5aab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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