edkco.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 2f:9d:d9:be:b4:1d:8b:1b was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=edkco.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 2f:9d:d9:be:b4:1d:8b:1bSerial Number (int): 3431137904215034651
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 66:ad:a0:6b:d1:44:d8:89:76:cd:63:fe:fd:82:b9:cb:d1:a4:19:9b
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 19:0e:ab:2a:fe:6b:7c:7e:ce:ea:d9:ff:1c:2b:89:db:5e:13:ac:cd
Fingerprint (sha256): f9:ab:a6:73:16:c5:60:72:7a:4a:ba:fb:0d:ff:c4:91:a4:08:97:4a:52:78:49:39:01:80:c0:b0:ed:ed:2d:d1
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6944.crl
Check the revocation status for certificate edkco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for edkco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
edkco.com
Other certificates including the domain name edkco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for edkco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHeDCCBmCgAwIBAgIIL53ZvrQdixswDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1 cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNzE2MjIwMDE2WhcN MjQwNzE2MjIwMDE2WjAUMRIwEAYDVQQDEwllZGtjby5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCzIG9Hb5F7Y9rhXCeXE6Kb3lj+wgifkRzvxlmh oHWuXCS/+zJJS0fSgEvR8zdn/HNmSMljQZGn7wieizNNdzVZkpN1ZBXryimEWVXx SP/xIKjRkzv7wmp2q9p1opkdT3dDwP6nJRfBJz4pxY8Q58eDrNBHLtQhl2u7EeGI BZOs5Qf6GzwRBgn+FcDuRa21lru1SxBOZ3iHoBBnviDU0P6LANB+NPUo68cG7lw9 7c0/MT2EJhQhqUjNavGdNpLcaYJ8R4e2+2kl4NpR31Ka8nDAs7AHu+19JKDSipvl SThfd02nCBtsP5Jq9J7n1I72i8/KKKu5THF4brvT+ESWRyGwyNtw1K5Nq/iecQX6 gSGsNB8SgXl3Ek90Ug2InktuCQCY5IuLleeXX3vu9dmlAmstnSi+blYhXj4gX+hD 6f6q/+boc8iOthj0Kk6E/oS5qTuFNNVjWburttFH543WEJfSbBSj5sBm1wm527wP mi58y9M0p7zQ6AQ7cPU/2zVoSRniwESyN7h4kDnpYNYJcXvWeV9SQS5dedTWjF6S CWDdgT+CwxvYNE332AMVy0XgQqcrUeImrz1GZVUotz7znkVEoXo1KfLgvfoCJrhi cFNOCgrHPlY8zMzcy/rFy+LmigGXIIkOXIPrzR6Pxt6Vn93eYNx32XGXUBCCz1Cb YgL6tQIDAQABo4IDKzCCAycwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8wLaAroCmG J2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02OTQ0LmNybDBdBgNVHSAE VjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZp Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEAG CCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z aXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/tss/C0LIDO MBQGA1UdEQQNMAuCCWVka2NvLmNvbTAdBgNVHQ4EFgQUZq2ga9FE2Il2zWP+/YK5 y9GkGZswggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABiWC3/DMAAAQDAEgwRgIhALjnPeNtY2gYcpMX bGB2GnBzGMf5Ie1llU6hL1xYe++nAiEA2jIUM23DFOfAA952dR0J0C3+KSMk9esD 42HDXxlBsv4AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYlg t/0CAAAEAwBHMEUCIAYzVOHWEfUMWA/LK2DzrRVyssCC0HHMEYfX2PGZcPL3AiEA 5c8Z25HD6NCUvUknR5nGo/wlcQkhsYD+auvuzyj1AMIAdgDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYlgt/13AAAEAwBHMEUCIQD7CaRyDAIo5az6 IOj/PXFUKxkxKx9Xm6dvcVyzfE33xgIgP/0kCEedEGeRTyCcw6gmGQ3frxLmAUwz F7ZJC9R60qIwDQYJKoZIhvcNAQELBQADggEBAKcAIrBPEqQNBe+3Z5Htidj5irHx D70Dh++GMmK7qr1LEBK1yPMj35vCxtnMgzPjJkTW2r+15HlZQb79tXZZuDiTRilp nnZOedtux92w/41fRQeyf5dAfSnBznLt416Qi4SjKnR8XK8dgwH/uWmaR3x/t2qT wgab5S6KO6lXxVZVXdn81b4t59OECpZ/BqAHvC6AF2v2sqZuuNlsW4jbC6Tpu8cz N6jnlC2Zv6e/w3c4JS/q1KXbbtoVk+4eSqEUKp4mACD2g/PyXrJZvTrjE9vZEXl7 GF4AaNS9SELYtPrr4s1EvxiymxM4H4dPF1o7RC9JhbqhP8TOvt68T+2O46o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsyBvR2+Re2Pa4VwnlxOi m95Y/sIIn5Ec78ZZoaB1rlwkv/sySUtH0oBL0fM3Z/xzZkjJY0GRp+8InoszTXc1 WZKTdWQV68ophFlV8Uj/8SCo0ZM7+8JqdqvadaKZHU93Q8D+pyUXwSc+KcWPEOfH g6zQRy7UIZdruxHhiAWTrOUH+hs8EQYJ/hXA7kWttZa7tUsQTmd4h6AQZ74g1ND+ iwDQfjT1KOvHBu5cPe3NPzE9hCYUIalIzWrxnTaS3GmCfEeHtvtpJeDaUd9SmvJw wLOwB7vtfSSg0oqb5Uk4X3dNpwgbbD+SavSe59SO9ovPyiiruUxxeG670/hElkch sMjbcNSuTav4nnEF+oEhrDQfEoF5dxJPdFINiJ5LbgkAmOSLi5Xnl1977vXZpQJr LZ0ovm5WIV4+IF/oQ+n+qv/m6HPIjrYY9CpOhP6Euak7hTTVY1m7q7bRR+eN1hCX 0mwUo+bAZtcJudu8D5oufMvTNKe80OgEO3D1P9s1aEkZ4sBEsje4eJA56WDWCXF7 1nlfUkEuXXnU1oxekglg3YE/gsMb2DRN99gDFctF4EKnK1HiJq89RmVVKLc+855F RKF6NSny4L36Aia4YnBTTgoKxz5WPMzM3Mv6xcvi5ooBlyCJDlyD680ej8belZ/d 3mDcd9lxl1AQgs9Qm2IC+rUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3431137904215034651 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 22:00:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 22:00:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edkco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730773170852386930024998530590560832915200698127452627944166202529109694479196148830467732860481557655021984199651438193907766529183521515772465638059826446592449940901777587487553919539287357834526138682779424790446894508212339691905881454615031503299894202048572890687429802079123703171519237688455230970133432200564708975434058631060969603239820148758639331010805580099580433463742592489999707197795084302066564451913943514749373114575925058448601733410426285733096302113586583234710188635352236702021774783910202252731103725421453239458884039888442214120661600201831443934072095944874727026410838817710737995740927052326870199653527194426059927441996081349066089369862957441300340303739022770792544795446621881530838647720565487903028178780969862022713830998226587170029813989375005724927056380901732349466220500229050839165551266541481728276416771078445640656593542031015432272941973225858084862245365668454426102886230212610074887954352431255263132706739877056782343160498838852494256181987584394071867357996127506337156515282775634466964144893502231244508665029846389774053947775778895495014510469369508477336545156378923113131740156712439864097351154080129844037543585099610003652685959707370825905884446564857336668635724469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6944.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edkco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66ada06bd144d88976cd63fefd82b9cbd1a4199b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018960b7fc330000040300483046022100b8e73de36d6368187293176c60761a707318c7f921ed65954ea12f5c587befa7022100da3214336dc314e7c003de76751d09d02dfe292324f5eb03e361c35f1941b2fe00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018960b7fd0200000403004730450220063354e1d611f50c580fcb2b60f3ad1572b2c082d071cc1187d7d8f19970f2f7022100e5cf19db91c3e8d094bd49274799c6a3fc25710921b180fe6aebeecf28f500c2007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018960b7fd770000040300473045022100fb09a4720c0228e5acfa20e8ff3d71542b19312b1f579ba76f715cb37c4df7c602203ffd2408479d1067914f209cc3a826190ddfaf12e6014c3317b6490bd47ad2a2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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