packagepro.atlanticpkg.com
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 66:ea:dd:4a:6f:a0 was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=packagepro.atlanticpkg.com,OU=Domain Control Validated
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 66:ea:dd:4a:6f:a0Serial Number (int): 113158921023392
Serial Number lenght: 47 bits, 6 octets
SubjectKeyId: a3:9a:62:a6:4c:fd:bb:e9:ca:3c:42:32:6b:ac:75:90:11:bb:43:1e
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): b6:fc:62:e2:1e:02:1f:11:5a:c6:58:0c:f5:85:22:12:ea:78:03:82
Fingerprint (sha256): f5:9b:91:6f:35:2a:7d:10:3c:41:95:e7:a1:1c:e9:e2:2a:c1:8c:1c:f8:4b:20:a5:47:d2:6a:3c:84:5f:61:0c
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-4.crl
Check the revocation status for certificate packagepro.atlanticpkg.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for packagepro.atlanticpkg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
packagepro.atlanticpkg.com
www.packagepro.atlanticpkg.com
www.packagepro.atlanticpkg.com
Other certificates including the domain name atlanticpkg.com
(limited to 100 certificates)
www.atlanticpkg.com
packagepro.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
packagepro.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
packagepro.atlanticpkg.com
stretch.atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
packagepro.atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
packagepro.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
packagepro.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
packagepro.atlanticpkg.com
stretch.atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
packagepro.atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
Certificate
The complete raw certificate details for packagepro.atlanticpkg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIGZurdSm+gMA0GCSqGSIb3DQEBCwUAMIHGMQswCQYDVQQG EwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTElMCMG A1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEzMDEGA1UECxMqaHR0 cDovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMTQwMgYDVQQD EytTdGFyZmllbGQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4X DTE0MDMxNzE3MDkzOVoXDTE1MDMxNzE3MDkzOVowSDEhMB8GA1UECxMYRG9tYWlu IENvbnRyb2wgVmFsaWRhdGVkMSMwIQYDVQQDExpwYWNrYWdlcHJvLmF0bGFudGlj cGtnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAItseZX2/0Fe ZQ4iY58dcNsaHLAGvO7y9DDhfVWhSm8z69fjaLrquhOEQsKx8m+Nhg25BvGzRYJj zGE9r6ECkvZSA1faIZhUwGEEFVVYIdnueggRvyztRohYtqQ4oURKH8w5alb/Xvdf liRDtn6rHYuO3JYieaXQfKpud3jpau15njo+cO2qm3+CXKEgM+D86tNmmZo4sL95 tdGAc9dR5VCdiupzx7OhuhXMQ1+YJZZpitLEC9X9RZJ2E2UOi67dKgfJLjS8cgVU 6zcqTRUhWNeVW/+FW9kCJ/66MyjqzwU9y9xZAt6WPH/0VfPzSU2HnrLcPU8sV4lt BQfLflyZ7JECAwEAAaOCAegwggHkMA8GA1UdEwEB/wQFMAMBAQAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcyczEtNC5j cmwwWQYDVR0gBFIwUDBOBgtghkgBhv1uAQcXATA/MD0GCCsGAQUFBwIBFjFodHRw Oi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMIGC BggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnN0YXJmaWVs ZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDovL2NlcnRpZmljYXRlcy5zdGFy ZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcyLmNydDAfBgNVHSMEGDAWgBQl RYFoUCY4PTstLL7Natm2PbNmYzBFBgNVHREEPjA8ghpwYWNrYWdlcHJvLmF0bGFu dGljcGtnLmNvbYIed3d3LnBhY2thZ2Vwcm8uYXRsYW50aWNwa2cuY29tMB0GA1Ud DgQWBBSjmmKmTP276co8QjJrrHWQEbtDHjANBgkqhkiG9w0BAQsFAAOCAQEAEwoC Wr67xelPNpBhEGV2KNcXhK20Bop47jI7Oh+ttzJwUzfk5eLcimjagQ2RLqRIMuip QidGG13HweFEteR6Vlsmla+eCyuJd34lvKgVYB9C7SJ/VeCaxBZLIJ68C5Rva2Wi bHPp9vKyxZ3SzUM4003vL3sxaPFLZ1HNm8zY0SDThZ1Qi9mqKo6GeDe5eE/HxhiS R5L2/7FAigWD3IzYE/Qi14d0sk066alF3SmlIUmxVXIqPSNXKeHJLGr9Ft3o6W1r R+HYWa9Pi3DJPisExEu6+MJiaNy1MKI/os1Trr2N7fciQfWs2Iu7vnPnyMykXTdM 0ZUnCYukRtsqocU8hw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2x5lfb/QV5lDiJjnx1w 2xocsAa87vL0MOF9VaFKbzPr1+Nouuq6E4RCwrHyb42GDbkG8bNFgmPMYT2voQKS 9lIDV9ohmFTAYQQVVVgh2e56CBG/LO1GiFi2pDihREofzDlqVv9e91+WJEO2fqsd i47cliJ5pdB8qm53eOlq7XmeOj5w7aqbf4JcoSAz4Pzq02aZmjiwv3m10YBz11Hl UJ2K6nPHs6G6FcxDX5gllmmK0sQL1f1FknYTZQ6Lrt0qB8kuNLxyBVTrNypNFSFY 15Vb/4Vb2QIn/rozKOrPBT3L3FkC3pY8f/RV8/NJTYeestw9TyxXiW0FB8t+XJns kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 113158921023392 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-17 17:09:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-17 17:09:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'packagepro.atlanticpkg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17600615379067205591652300392337052160971431679422280115677785823796338000004979008051023123428319744754198921401317096886982360016132284365387003035702970271728060714384154703030677221833450621567488124464148372454630968384684454362167856756358943626282379255483385960522581781077426205370937873231928641370170779267888275030237916813366115290381160749801835346061901838667241596875828092810226434276757968615041766226656150503625071326660078953417716539736696545582724418179106057934377989749136868848992918063318102949908520258518022857768176254482142920298845502520653298010970219696855259266960881342478699588753 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packagepro.atlanticpkg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.packagepro.atlanticpkg.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a39a62a64cfdbbe9ca3c42326bac759011bb431e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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