agapegrocery.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 6d:eb:55:f1:d0:10:c3:d8 was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=agapegrocery.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 6d:eb:55:f1:d0:10:c3:d8Serial Number (int): 7920518866727388120
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 41:01:c4:6c:e6:0a:37:73:bd:df:e2:d1:3e:ca:5d:1e:d1:84:f8:a0
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 2d:9b:c6:9a:05:ea:ea:54:0f:70:8b:a3:1c:31:e0:a7:0e:ee:9b:67
Fingerprint (sha256): e9:dc:53:c9:38:d0:34:46:a7:bd:2f:fb:54:3b:57:c4:cc:bd:9b:64:7d:63:df:35:91:eb:22:f9:f3:6c:fb:10
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-11527.crl
Check the revocation status for certificate agapegrocery.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agapegrocery.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agapegrocery.com
Other certificates including the domain name agapegrocery.com
(limited to 100 certificates)
mail.rhr.group
mail.sakthifertilizers.com
hrms.informationevolution.com
mail.appasamy.com
mail.appasamy.com
mail.appasamy.com
fmqhrms.firminiq.com
mail.tracenter.com
mail.appasamy.com
www.agapegrocery.com
hrms.pitsolutions.com
mail.technologycenteronline.com
www.agapegrocery.com
mail.appasamy.com
mail.ittafi.com
www.agapegrocery.com
mail.montessorividyalaya.com
mail.montridge.in
people.arkafincap.com
mail.librelabs.io
mail.eksoftware.in
mail.vardhinigroup.com
mail.appasamy.com
webmail.jeenasikho.in
mail.agapegrocery.com
mail.appasamy.com
people.arkafincap.com
mail.appasamy.com
agapegrocery.com
mail.innoappstech.com
people.arkafincap.com
mail.trimtab-global.com
mail.sakthifertilizers.com
hrms.informationevolution.com
mail.appasamy.com
mail.appasamy.com
mail.appasamy.com
fmqhrms.firminiq.com
mail.tracenter.com
mail.appasamy.com
www.agapegrocery.com
hrms.pitsolutions.com
mail.technologycenteronline.com
www.agapegrocery.com
mail.appasamy.com
mail.ittafi.com
www.agapegrocery.com
mail.montessorividyalaya.com
mail.montridge.in
people.arkafincap.com
mail.librelabs.io
mail.eksoftware.in
mail.vardhinigroup.com
mail.appasamy.com
webmail.jeenasikho.in
mail.agapegrocery.com
mail.appasamy.com
people.arkafincap.com
mail.appasamy.com
agapegrocery.com
mail.innoappstech.com
people.arkafincap.com
mail.trimtab-global.com
Certificate
The complete raw certificate details for agapegrocery.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIIbetV8dAQw9gwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMxMTExMTkxODQ5WhcN MjQxMTExMTkxODQ5WjAbMRkwFwYDVQQDExBhZ2FwZWdyb2NlcnkuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtkAGFm8Jwiuaf5HKbLz1hHArYz +HRRUeK8QVC7wm9j8nLMpsH8CyIVfeP9wmptmlSJmNuIV6JoZUyl71awas1pMDRU TNlhneoDKYHNKma/B/k/9rNUnO+1be86X3TjVgFbdSYYulDWeU7U+86jmS8GkJHX R/mMJ9TtboAL5HXCH84pWCrdjYzIBHiUeIfROKmJaZGuaSICcVcbPsoyGZvyUkyt +qPxGdgWfMCX+0EXMbEybN5gg2B7fBm1m0atFprwPdA8pw3qpl1kfJtqx0gpQZaH QhzYc6ZNsnwkh9T5b31BEhFbbrQ1YqgtE32NHUiLLdjOrbjxhMEfl+oMXwIDAQAB o4IDNDCCAzAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDgYDVR0PAQH/BAQDAgWgMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9j cmwuZ29kYWRkeS5jb20vZ2RpZzJzMS0xMTUyNy5jcmwwXQYDVR0gBFYwVDBIBgtg hkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdv ZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcw AoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dk aWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAbBgNVHREE FDASghBhZ2FwZWdyb2NlcnkuY29tMB0GA1UdDgQWBBRBAcRs5go3c73f4tE+yl0e 0YT4oDCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcA7s3QZNXbGs7FXLedtM0T ojKHRny87N7DUUhZRnEftZsAAAGLv9KTNgAABAMASDBGAiEAjtmArXe2m+WXTeaY byb+KqdEF1pWDvayX56DW3kaCpACIQCYg5w3jziMmOtYtKEtEdEg6ma6vAOb7lPk VimYes4cbwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi7/S k9YAAAQDAEcwRQIgfgnoraD7doHtR2ahG29ayf80NyxSY7+pRTS7t75wf60CIQD6 WYuGlr/wgR7CILHGPiNoajirhxQbLG2l3YCcP8ga1gB3AFWB1MIWkDYBSuoLm1c8 U/DA5Dh4cCUIFy+jqh0HE9MMAAABi7/Sl/AAAAQDAEgwRgIhALPGR9NZ8UwQlMUZ e7u1vdqtnqxuxSpZnec+iACSRA1XAiEAxdgbZn6QzX/EP0MFve8u4zTgJ4LrU48B hTDf/G+aAd0wDQYJKoZIhvcNAQELBQADggEBAEbR5JtA3AXTrNeCpSHSZPMUBke0 AhCsOAQrKUvoBRmv4CeNt3IewKVXiDCHZGXRwxZxyvXDRdqsS5TM7Vj2ZE/jExQh qgF+GR7VyAFq1wN5t2b1NZI0/jrO9DBt1/IQ1pIkwhquHITKJrD0md2q6b4nL/kd sxFRcDI2rhY0vEITENmbEME3wnYvpA4GW1wL5XALv5su9ML5X7/YyM2bM3wug6/D St8oI3h6XZxYykXxaVE8W5Ccuh0ObPRot7KYmeA59OkWrlRDwtuPKAHUXKTOvSXl OoE/zzLgKPbzpVRV+I2M+BM/EeJPf3uKj+L9le42JMu5jWmoUv/ktgBRW8A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtkAGFm8Jwiuaf5HKbL z1hHArYz+HRRUeK8QVC7wm9j8nLMpsH8CyIVfeP9wmptmlSJmNuIV6JoZUyl71aw as1pMDRUTNlhneoDKYHNKma/B/k/9rNUnO+1be86X3TjVgFbdSYYulDWeU7U+86j mS8GkJHXR/mMJ9TtboAL5HXCH84pWCrdjYzIBHiUeIfROKmJaZGuaSICcVcbPsoy GZvyUkyt+qPxGdgWfMCX+0EXMbEybN5gg2B7fBm1m0atFprwPdA8pw3qpl1kfJtq x0gpQZaHQhzYc6ZNsnwkh9T5b31BEhFbbrQ1YqgtE32NHUiLLdjOrbjxhMEfl+oM XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7920518866727388120 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-11 19:18:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-11 19:18:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agapegrocery.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20795487778493855136114379655449192257387475214841471731734133514353782679948226498835515212580261915343198740409318808206009924485914027715558226267916609994270433868364757866059570638622764680928881389132357423819877740423128361809447029654424140323562578192756558743663011409682474096185306588196772617394741631871215615877691682445827493705669991600850831221286061132022352561220765291054391781736783567548668759234484792516017369995380225905616463547187452018558815335340740375204463066237712545021632397703171256698190654908205378378045640414813769847819084136346757502822948798064589128613105588548454889163871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-11527.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agapegrocery.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4101c46ce60a3773bddfe2d13eca5d1ed184f8a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bbfd2933600000403004830460221008ed980ad77b69be5974de6986f26fe2aa744175a560ef6b25f9e835b791a0a9002210098839c378f388c98eb58b4a12d11d120ea66babc039bee53e45629987ace1c6f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bbfd293d6000004030047304502207e09e8ada0fb7681ed4766a11b6f5ac9ff34372c5263bfa94534bbb7be707fad022100fa598b8696bff0811ec220b1c63e23686a38ab87141b2c6da5dd809c3fc81ad60077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018bbfd297f00000040300483046022100b3c647d359f14c1094c5197bbbb5bddaad9eac6ec52a599de73e880092440d57022100c5d81b667e90cd7fc43f4305bdef2ee334e02782eb538f018530dffc6f9a01dd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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