dixxo.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 48:d9:e3:ad:0a:3c:ea:da was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dixxo.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 48:d9:e3:ad:0a:3c:ea:daSerial Number (int): 5249477173017635546
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: db:2e:d2:24:35:21:38:9c:cc:ce:89:ac:e7:33:41:c5:20:07:4f:5b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 71:6b:f8:2f:84:0b:5b:fc:cc:4a:41:3c:04:4e:0b:09:79:6a:6e:86
Fingerprint (sha256): e5:80:eb:3f:ce:bb:9a:51:0f:26:02:ae:b3:5f:0f:03:c6:e3:c6:a7:5d:4e:95:a4:27:da:98:a9:40:20:ef:a6
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6582.crl
Check the revocation status for certificate dixxo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dixxo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dixxo.com
Other certificates including the domain name dixxo.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for dixxo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHeDCCBmCgAwIBAgIISNnjrQo86towDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzA0MDg0MzQ3WhcN MjQwNzA0MDg0MzQ3WjAUMRIwEAYDVQQDEwlkaXh4by5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDN/H9nKivyCyt0vYL+SbJInOkjWq1zLpImsAzV 4FuGI2PlnoddNJmrcTi01ko3wZ9v3h4VO1O/JpxIqY/c47Me5lgMWKl7ZVio4XQg i4I5GKFbRT9iZuH+t/+9rziSm291tYmmGBgp9zVkjHkpmloHRArlnS6YIYQVyVGG les3UJxVXPKjYKI1xOUWLZyAvdF69DfQqj/PbAKHVQwGUg3XZUqsgB4BeHd7wpXA 52g1mXWuMJ3ddOG4+oRxjYnvf9ucix30wVEHPS6H/ntMr1ChPUU3b6g8D2EnKvbQ wNDliSdntIqAiaspQjgvthjAYbdcrlnxQkxWM6ohLc+NW+tya3HXQzyekLcHHGIJ OVF0PBLV63c30tfIN0FMBpCV9acxfFtD/q/6y99kUXaMj0uwY9kvAV9l0UFHnRG6 vxgL1m+3NqQQa1YTD8/flMGaBv6yRA37xsHz5A0j/O9bdoovW6x+pp31yNcUCN1R ccpJhj18i/h7HItVbr22ljPESRnVvwK4P1uJrqJ12UIStshmc2YVDzkacfut1mZZ Ih6Ip0gDMAgA/ehzKRwQ3jEC4MpeBR8sQdWAq8ah24g+aU83fkDbu13tx7gkN6sD wvaGo80gUcjXjCBIbSEJcH1UVJ59dyEq9FoPp2rLD73pQi9Pd4r5jfL5Waa6b39W d42/CQIDAQABo4IDKzCCAycwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmG J2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02NTgyLmNybDBdBgNVHSAE VjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZp Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAG CCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z aXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDO MBQGA1UdEQQNMAuCCWRpeHhvLmNvbTAdBgNVHQ4EFgQU2y7SJDUhOJzMzoms5zNB xSAHT1swggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABiSASdiEAAAQDAEcwRQIgVg1cbniLunx/7YgO v4LUs50XFZ3eLNrBmJOoQjmcKXECIQDvZ+pU1+nES/DgSAcLJRx6//0O/sOTkqn/ l+CqYdL0iQB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiSAS dvgAAAQDAEgwRgIhANc9wBRmO/2pUSqpasNSFjWVcm2pbYiLMVv9HI3S6qpvAiEA graRddrFYLQafVYxAIdqQnBu4ls75fsgFh/BaSxMLrQAdgDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYkgEndYAAAEAwBHMEUCIHWI9lMX+oePmj03 eKwEi/AE5Zsy8jNDQuxH0aZYvz7kAiEAg44Aqwg3WOQw2BmMQbKe2lMT54duHYOx oHsdQA30OcwwDQYJKoZIhvcNAQELBQADggEBAKep5m4/3fkcTJ9Fr4IbjLczj4/0 K4ckEb4dl0/K7Zy8GNkC7FBlOrNrJmYQV4RPfn2Xn5Yq8BqbufuQsJiZ18w4ND/S DhI2Lq/RVLDYi0Lre+ILuVVy6eFZYWP1AAAtSsj3mzGZmsUpG1P3narZnEyjNpNY ZdR8vSMRH4SAjB1yMBtRThx8h9oIOW9gnfNyLooGyORlc5tfRXava4G541vVPW4p 4tqSTzWOtRzcjzB8x4s+sr3457bzZG9Pmw0Wz2Sc/w+Lfa3MI12y3XZ9LMhxBWZp vtfDuTbrw98Vm72uoJtXuwVV2QRbj++1Dk56HXy5K8Nhj7cFFVMKTf7K4n8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzfx/Zyor8gsrdL2C/kmy SJzpI1qtcy6SJrAM1eBbhiNj5Z6HXTSZq3E4tNZKN8Gfb94eFTtTvyacSKmP3OOz HuZYDFipe2VYqOF0IIuCORihW0U/Ymbh/rf/va84kptvdbWJphgYKfc1ZIx5KZpa B0QK5Z0umCGEFclRhpXrN1CcVVzyo2CiNcTlFi2cgL3RevQ30Ko/z2wCh1UMBlIN 12VKrIAeAXh3e8KVwOdoNZl1rjCd3XThuPqEcY2J73/bnIsd9MFRBz0uh/57TK9Q oT1FN2+oPA9hJyr20MDQ5YknZ7SKgImrKUI4L7YYwGG3XK5Z8UJMVjOqIS3PjVvr cmtx10M8npC3BxxiCTlRdDwS1et3N9LXyDdBTAaQlfWnMXxbQ/6v+svfZFF2jI9L sGPZLwFfZdFBR50Rur8YC9ZvtzakEGtWEw/P35TBmgb+skQN+8bB8+QNI/zvW3aK L1usfqad9cjXFAjdUXHKSYY9fIv4exyLVW69tpYzxEkZ1b8CuD9bia6iddlCErbI ZnNmFQ85GnH7rdZmWSIeiKdIAzAIAP3ocykcEN4xAuDKXgUfLEHVgKvGoduIPmlP N35A27td7ce4JDerA8L2hqPNIFHI14wgSG0hCXB9VFSefXchKvRaD6dqyw+96UIv T3eK+Y3y+Vmmum9/VneNvwkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5249477173017635546 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 08:43:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 08:43:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dixxo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840350864464103600388737946773667293494110814565694970581245537248189422349515120992403414306671427101680851783511740674336136547287941818129584222090602118987425203978531492865640690157326270434591210364056605854200140148808180717326254882839867566040118117032899667614691441592761606691383773480989757626272759344176545558859882726768063208250147538837083025763625086053875886496539418693389477988107587266947660003666035810182646533588399412975513840681370338336963291688983011262191914755997569782011645744412043998540815160143110169299039864370519902451563568675223642083155323472477002911752132116264610915397895755232632107835715368162377948742108609531595794985648161958340346327749183433577674561487801634292920075950707942533440206048400932601879298102813638254398626283585362634968472700516846801186211313378650382052863013657799049911932494575610341878740680657308890419387243984935741703441591443748521176109428607548174344971150069028806570309348804052850805584469796773208233283994247669466795516243746941892460082309995414811574696455830421631155211152491655601071992984242834930676742525699248560309094424014199378316117143590398832188772352112462554911287621674268776523890837690125374385802969254836967320394252041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6582.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixxo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db2ed2243521389cccce89ace73341c520074f5b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a7a9e66e3fddf91c4c9f45af821b8cb7338f8ff42b872411be1d974fcaed9cbc18d902ec50653ab36b26661057844f7e7d979f962af01a9bb9fb90b09899d7cc38343fd20e12362eafd154b0d88b42eb7be20bb95572e9e1596163f500002d4ac8f79b31999ac5291b53f79daad99c4ca336935865d47cbd23111f84808c1d72301b514e1c7c87da08396f609df3722e8a06c8e465739b5f4576af6b81b9e35bd53d6e29e2da924f358eb51cdc8f307cc78b3eb2bdf8e7b6f3646f4f9b0d16cf649cff0f8b7dadcc235db2dd767d2cc871056669bed7c3b936ebc3df159bbdaea09b57bb0555d9045b8fefb50e4e7a1d7cb92bc3618fb70515530a4dfecae27f