*.ibsa.ch
Issued by Starfield Secure Certification Authority
About this certificate
This digital certificate with serial number 27:85:a5:66:8d:1e:67 was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ibsa.ch,OU=Domain Control Validated
Starfield Technologies, Inc.
Company registration number: 10688435
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 27:85:a5:66:8d:1e:67Serial Number (int): 11124469528338023
Serial Number lenght: 54 bits, 7 octets
SubjectKeyId: 0e:85:3f:9f:4a:d5:59:c6:33:8a:2b:ab:8c:af:5b:2c:58:f5:49:65
AuthorityKeyId: 49:4b:52:27:d1:1b:bc:f2:a1:21:6a:62:7b:51:42:7a:8a:d7:d5:56
Fingerprint (sha1): e4:b0:af:ee:9e:61:c5:73:b7:27:a8:a0:a1:5f:fb:92:9e:7e:ab:e3
Fingerprint (sha256): ec:73:3d:07:50:65:62:37:e3:fb:88:37:3c:04:2b:24:64:4d:00:8b:b4:f0:89:f1:9f:38:61:b1:69:fa:82:a7
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sf_intermediate.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfs1-25.crl
Check the revocation status for certificate *.ibsa.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ibsa.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ibsa.ch
ibsa.ch
ibsa.ch
Other certificates including the domain name ibsa.ch
(limited to 100 certificates)
imperva.com
ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
imperva.com
career.ibsa.ch
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
*.ibsa.ch
ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
mailch.ibsagroup.com
imperva.com
outlook.ibsa.ch
imperva.com
link.ibsago.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
imperva.com
imperva.com
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
career.ibsa.ch
*.ibsa.ch
*.ibsa.ch
imperva.com
*.ibsa.ch
imperva.com
imperva.com
outlook.ibsa.ch
outlook.ibsa.ch
ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
imperva.com
career.ibsa.ch
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
*.ibsa.ch
ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
mailch.ibsagroup.com
imperva.com
outlook.ibsa.ch
imperva.com
link.ibsago.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
imperva.com
imperva.com
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
career.ibsa.ch
*.ibsa.ch
*.ibsa.ch
imperva.com
*.ibsa.ch
imperva.com
imperva.com
outlook.ibsa.ch
outlook.ibsa.ch
Certificate
The complete raw certificate details for *.ibsa.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIHJ4WlZo0eZzANBgkqhkiG9w0BAQUFADCB3DELMAkGA1UE BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAj BgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOTA3BgNVBAsTMGh0 dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeTEx MC8GA1UEAxMoU3RhcmZpZWxkIFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 eTERMA8GA1UEBRMIMTA2ODg0MzUwHhcNMTMwNzE5MTkxODE3WhcNMTYwNzE5MTkx ODE3WjA3MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxEjAQBgNV BAMMCSouaWJzYS5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3x KylSne+h6SEA67fwEmD96eNZyet+3eG8uGaqyQeBCUv3WzZXalBOv38oUQnNn0DE f1uniowZsKZHqbvrNJZMg8pHtLgioYHgjiDR+Qjb1O2W2PmIxsFvIFDtsxpiEalo upHb4j89edYvFGNTmPmvYkSZAGZXuy8ebwfqc2MSjzNsg1WmRnbSGwGlyiPn66NQ 6dV3jusdpMPCQLffDfxbKhopiIlTFjWEsAiJ0C59mI8q+JD6yF1VA+S9X0RcfN6y g2OzYlr/fY9s4/GctIZrRSFtB90J00xVaJQ1DHCn/TPNcU7wmr0Zjvq/AIPl3yxi G2C30Ay8cvXwixfzL3kCAwEAAaOCAckwggHFMA8GA1UdEwEB/wQFMAMBAQAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA5BgNV HR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmczEt MjUuY3JsMFkGA1UdIARSMFAwTgYLYIZIAYb9bgEHFwEwPzA9BggrBgEFBQcCARYx aHR0cDovL2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5 LzCBjQYIKwYBBQUHAQEEgYAwfjAqBggrBgEFBQcwAYYeaHR0cDovL29jc3Auc3Rh cmZpZWxkdGVjaC5jb20vMFAGCCsGAQUFBzAChkRodHRwOi8vY2VydGlmaWNhdGVz LnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvc2ZfaW50ZXJtZWRpYXRlLmNy dDAfBgNVHSMEGDAWgBRJS1In0Ru88qEhamJ7UUJ6itfVVjAdBgNVHREEFjAUggkq Lmlic2EuY2iCB2lic2EuY2gwHQYDVR0OBBYEFA6FP59K1VnGM4orq4yvWyxY9Ull MA0GCSqGSIb3DQEBBQUAA4IBAQAGyAU5wa7SwwhxEeUF/+GWaPrGoVX5ZL3ID3uc YzkWTty9/53cln1YUY2aEdiHUiUBiONZP3ujgLCh0PvS4Uevbr3pWayVoW+vkdL1 KcE9zGGT2yzOEPCKWXZwzqimnsob15YSbXCLZ6vKMIWFJER7Vs+KWFmHMxYULc8s ugt1vGZK4uSyj2WhPXEcdHTfpdANMpAmOVNo6U0j5yK5rST43L6H03VVNaqHNBDi E91gmgO4c7BuX/vuLdviDfcowedF0lhocjrnZ70lwcjPtYiErm17arIg2CRR5KK4 HIYuz1mItqaBJvNeBiZxKRNrUcFbXVdqF3bHFpqQRFQKWGOU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fErKVKd76HpIQDrt/AS YP3p41nJ637d4by4ZqrJB4EJS/dbNldqUE6/fyhRCc2fQMR/W6eKjBmwpkepu+s0 lkyDyke0uCKhgeCOINH5CNvU7ZbY+YjGwW8gUO2zGmIRqWi6kdviPz151i8UY1OY +a9iRJkAZle7Lx5vB+pzYxKPM2yDVaZGdtIbAaXKI+fro1Dp1XeO6x2kw8JAt98N /FsqGimIiVMWNYSwCInQLn2Yjyr4kPrIXVUD5L1fRFx83rKDY7NiWv99j2zj8Zy0 hmtFIW0H3QnTTFVolDUMcKf9M81xTvCavRmO+r8Ag+XfLGIbYLfQDLxy9fCLF/Mv eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11124469528338023 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.starfieldtech.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10688435' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-19 19:18:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-19 19:18:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibsa.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28017590066189345171859756816358100171812440828356652754804974907752837467323172932821767344373550224735616427092854344347774263696942507051540522769102382842779023986658053219895953037387001304383181394137173986508974850591989148926541257987872075087512360721107917492314447598560449760630580798999965925011863620049320415885914620116145623139830382407253079059353346399745904288496124054724258418304492357006136802893240345539704814233016052179250444847503621250197197417265884503098469620537771442785051616379488058443122910082458598525985394797797638436515809983186180340197812999029541034329166309144927831011193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfs1-25.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sf_intermediate.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 494b5227d11bbcf2a1216a627b51427a8ad7d556 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibsa.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibsa.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0e853f9f4ad559c6338a2bab8caf5b2c58f54965 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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