ship7.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number e2:d5:fa:c5:03:25:70:df was issued on by GoDaddy.com, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ship7.com,OU=Domain Control Validated
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): e2:d5:fa:c5:03:25:70:dfSerial Number (int): 16345246146679369951
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 4b:b6:26:fd:ac:e9:d8:e0:1e:c3:16:25:d8:30:28:70:3d:63:38:44
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): f3:fb:da:7e:c0:15:3e:90:40:a7:12:11:f2:ac:48:30:06:1e:0b:8c
Fingerprint (sha256): cc:fa:f6:2c:34:99:67:4f:5d:04:6d:80:87:a2:95:84:c7:ef:95:db:1e:33:3f:27:63:e5:42:48:82:57:10:7b
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1780.crl
Check the revocation status for certificate ship7.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ship7.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ship7.com
www.ship7.com
www.ship7.com
Other certificates including the domain name ship7.com
(limited to 100 certificates)
ship7.com
support.simpleintranet.org
cdn.ship7.com
support.simpleintranet.org
ship7.com
ship7.com
my.ship7.com
support.precisionextraction.com
my.ship7.com
ship7.com
my.ship7.com
my.ship7.com
support.precisionextraction.com
ship7.com
new.ship7.com
support.precisionextraction.com
ship7.com
form.foresume.com
ship7.com
sni.cloudflaressl.com
cdn.ship7.com
ship7.com
info.dramatistsguild.com
support.precisionextraction.com
ship7.com
support.precisionextraction.com
survey.ship7.com
survey.ship7.com
support.simpleintranet.org
ship7.com
support.simpleintranet.org
survey.kanarys.com
my.ship7.com
support.precisionextraction.com
zoho.allsale.co.za
my.ship7.com
survey.ship7.com
support.simpleintranet.org
support.simpleintranet.org
ship7.com
ship7.com
support.precisionextraction.com
ship7.com
support.simpleintranet.org
cdn.ship7.com
support.simpleintranet.org
ship7.com
ship7.com
my.ship7.com
support.precisionextraction.com
my.ship7.com
ship7.com
my.ship7.com
my.ship7.com
support.precisionextraction.com
ship7.com
new.ship7.com
support.precisionextraction.com
ship7.com
form.foresume.com
ship7.com
sni.cloudflaressl.com
cdn.ship7.com
ship7.com
info.dramatistsguild.com
support.precisionextraction.com
ship7.com
support.precisionextraction.com
survey.ship7.com
survey.ship7.com
support.simpleintranet.org
ship7.com
support.simpleintranet.org
survey.kanarys.com
my.ship7.com
support.precisionextraction.com
zoho.allsale.co.za
my.ship7.com
survey.ship7.com
support.simpleintranet.org
support.simpleintranet.org
ship7.com
ship7.com
support.precisionextraction.com
ship7.com
Certificate
The complete raw certificate details for ship7.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIJAOLV+sUDJXDfMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIwMDMwNzA2MDIwOVoX DTIxMDUyMzEyNTE0OVowNzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMRIwEAYDVQQDEwlzaGlwNy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDg2VO2iXiDClBQuObuGjf4gBXL5aBWrcZCG9FTmdoDkurX3vGRLEN7 3G82ho/gPd0zfFFQg2Vs3Yl337Sy0FQYVIGI2YcvwAV725Tup/DlZw+tYnj9Op0P FEI58M7OD9hnKQQZ1s1Sl36PxQGX3O2xnlUdms16t/D2OT+T2OQzs2zmTHldBy23 MX4TvYD17WCEsrBwi5ARiVekxBOiROsVWx+cB2Qabr5WBZSLedTPohxh7Y8Jou+O GGHmLDDZqFN/44HCu4Q8iAYn91FGle7/lDjd10TT39Q2X+vKb+L7bxMtQXbmPuyA U9ta4ShfCAcq6pgRgntKdDm0BEk+KGFVAgMBAAGjggLAMIICvDAMBgNVHRMBAf8E AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMC BaAwOAYDVR0fBDEwLzAtoCugKYYnaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGln MnMxLTE3ODAuY3JsMF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEF BQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5 LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0 ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAU QMK9J47MNIMwojPX+2yz8LQsgM4wIwYDVR0RBBwwGoIJc2hpcDcuY29tgg13d3cu c2hpcDcuY29tMB0GA1UdDgQWBBRLtib9rOnY4B7DFiXYMChwPWM4RDCCAQUGCisG AQQB1nkCBAIEgfYEgfMA8QB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I DdwQAAABcLOWOncAAAQDAEgwRgIhAL7NahU4she8huYPGa6jrbTgBUAmHTbd50UO tTJoCLHYAiEAt0p6ngGqB24OzsTo0SVx9KadVZIANY7boogsRbsb6mIAdgBElGUu sO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAXCzljy6AAAEAwBHMEUCIFY0 cgpTZjKorGcej0pnS8aHWizLVDOQ79D2p/tAj3pZAiEA5LUjWJ85UQUfeYlrvhpW Dk1HRim1KBlVNj4A8am018MwDQYJKoZIhvcNAQELBQADggEBADzssghCVO6mm5cd dBdEO4M3oB4UL5izs+yNEGaoVAVW+TjO+GuZZymhwmp13ZOp7OrjTwOkRMM7MxrC kVB30dAnfYZ3pt9ocanmTnB/9fHqSdJR20RRZv812eZ01Wqd7LBdwIuSIGKGKtwf 45TSww1QssX43cCR6RY/v6siLnYsIPBkbHNikHSjR76wGiXkg3MPPT++jfg0ghSn t616gpIOaj8FSLhKjknzgUEtdiTz0bikGC941Fa2O6+zkswOUA87w+UKIRI3veKv GOLvnewaIT6y7fuJ00lH5LT7RYmYEzUM6SFG/OKnQ3rtRss2pjQWbwZvym7TV6JT aUIADXs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NlTtol4gwpQULjm7ho3 +IAVy+WgVq3GQhvRU5naA5Lq197xkSxDe9xvNoaP4D3dM3xRUINlbN2Jd9+0stBU GFSBiNmHL8AFe9uU7qfw5WcPrWJ4/TqdDxRCOfDOzg/YZykEGdbNUpd+j8UBl9zt sZ5VHZrNerfw9jk/k9jkM7Ns5kx5XQcttzF+E72A9e1ghLKwcIuQEYlXpMQTokTr FVsfnAdkGm6+VgWUi3nUz6IcYe2PCaLvjhhh5iww2ahTf+OBwruEPIgGJ/dRRpXu /5Q43ddE09/UNl/rym/i+28TLUF25j7sgFPbWuEoXwgHKuqYEYJ7SnQ5tARJPihh VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16345246146679369951 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 06:02:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-23 12:51:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ship7.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28384548252294802422701886226769264269821417523656949116092332544482899781349089837864772071399141902651621927089982517004945985446106518136477775123322266574537695056481765908246160166625009395406380874220025840812002067815289063830056814721451732907912813160218353709027660786411693079715125495158765989254024192259949369404940626092269882135890570357656791869986335606192673197079467699325032453484593090593900324027631518718456945936908146093878567628890848506360501659219055860254685149404771623731823999952524457001169848660481256948805076763342595269867578140873280627007846212332889846965766260186900337287509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1780.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ship7.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ship7.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4bb626fdace9d8e01ec31625d83028703d633844 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000170b3963a770000040300483046022100becd6a1538b217bc86e60f19aea3adb4e00540261d36dde7450eb5326808b1d8022100b74a7a9e01aa076e0ecec4e8d12571f4a69d559200358edba2882c45bb1bea620076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000170b3963cba000004030047304502205634720a536632a8ac671e8f4a674bc6875a2ccb543390efd0f6a7fb408f7a59022100e4b523589f3951051f79896bbe1a560e4d474629b5281955363e00f1a9b4d7c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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