windsorphotographer.com
Issued by Go Daddy Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number b1:f8:e0:96:14:2b:2c:de was issued on by GoDaddy.com, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=windsorphotographer.com
GoDaddy.com, Inc.
Organization:
GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
Organization unit: http://certs.godaddy.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): b1:f8:e0:96:14:2b:2c:deSerial Number (int): 12824246874125577438
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: f1:b8:a7:b5:c3:d0:b6:09:dc:eb:fa:14:27:bc:a0:fc:6d:bc:73:a5
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce
Fingerprint (sha1): 17:cf:45:b6:ef:dd:09:48:fb:14:02:9a:ab:89:9e:a4:60:2e:3b:04
Fingerprint (sha256): fc:8d:b0:4a:fe:31:7c:a7:b5:69:77:a0:64:1a:19:d7:38:b7:20:ad:c9:be:54:0c:b3:d3:56:c7:6e:5e:8e:d2
Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt
Revocation information
OCSP Server: http://ocsp.godaddy.com/CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6764.crl
Check the revocation status for certificate windsorphotographer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for windsorphotographer.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
windsorphotographer.com
Other certificates including the domain name windsorphotographer.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for windsorphotographer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHlTCCBn2gAwIBAgIJALH44JYUKyzeMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIzMDcxMTE0MTYxOVoX DTI0MDcxMTE0MTYxOVowIjEgMB4GA1UEAxMXd2luZHNvcnBob3RvZ3JhcGhlci5j b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDX20FeD4XLcpqwueqW pZmBFfXnure4vNH2XZDbb2SteLzKt1SzN8NZaRPezHszYII05LkcjzOFzy1i4QoG eb/ok/EuR3/pdsaksfG1NIol1y9eC4nURePI2V/u3X3c7cB5c9tImqjdfeWCbfRA DtjwPHtVDstaVK/PBp0AeU0djjeWopdNAagbOaDejaEWBMFzYFbtwLohOfmjAmGW 4GH33LL7BIiNLUCqCRYKPwvrL/Z2K1d4NRMvrAnJ8u9r2a7tJ4snZKxJc1wRugtv eLUXwOfzg4UhSadkp8u3ccUYoX2X/soUlVlLwsQcX92WOLGbh6K742GJxmdz/w0L NRTJOkqjioC8P3buIUUWIKOtNwwJBpMR7lXe8xYXPPYL85mBPOp0/+H2eXf7t00w h9nU9WQuXX4GXEbgk4knHIn87nFJGv43mBATVvF/eFZiIrB5pevSm4+2KhfrdHNH esLZmwz5ms1TNkKpBjmIhIswqzQKVchO6JaMaa9bMiggkZ1a+aymc9uYnJPs1cwd VIws5+SeX8pLIzY3nJI1m1gEIj3xU5c0DjQ85tC/daMDY6lkfXCk33L36mk9Zmh4 dsOFrkrB90MK9tvgf5pP1WNG9ZE8cM2ckFxA5IdXNkJ2Fux338l90YbLsHL5hA7r Y1324FT8CW61Ks313F5KaY+XowIDAQABo4IDOTCCAzUwDAYDVR0TAQH/BAIwADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgG A1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS02 NzY0LmNybDBdBgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEW K2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYG Z4EMAQIBMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au Z29kYWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdv ZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeO zDSDMKIz1/tss/C0LIDOMCIGA1UdEQQbMBmCF3dpbmRzb3JwaG90b2dyYXBoZXIu Y29tMB0GA1UdDgQWBBTxuKe1w9C2Cdzr+hQnvKD8bbxzpTCCAX8GCisGAQQB1nkC BAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA AAGJRU9sZgAABAMASDBGAiEAlgDnzBnD0RjKldwmhGiiEKAEFmTU5Tba56LPLgee jNMCIQDbe03tLqzV/rv0JRkVTiBze41BfRF0sKKfcUbg6qHX/gB3AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiUVPbXoAAAQDAEgwRgIhAPtOwojo xSxOpFu2YMqn2BxJUJJth6GjtOIlGG8un0x7AiEAuK8l4I4c67BVV/Ac6O4pFb7k piBKwLyerGpHngfcTBwAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7 qwAAAYlFT23gAAAEAwBGMEQCIFxLlC43BoB6f+DvpwLkiLJ/ItM8Y+wv15AnpUaE D4tDAiA9tl6OLSOF8VDsqcuJo3hMQO0SaJe1PvNBoVMz90xaXDANBgkqhkiG9w0B AQsFAAOCAQEAX3Gc4jbVYutVKDBjOQKj26fYxI68AT+JaQglfHzFbGu8UPBMGk3y yx6rQcMpsndpMTFgQyw/LmpkiH5kjywvke4t8jFceJsej5RtPyV1b/Q5woNFUl48 2R8gJPbpDaCfTZYPZkqvlsFvt/sOamgYNOK3MdeFAwyAbhkEvbfLrG8PWvDkjhpE 4CctkbXjIcJW+6VVlq6sc01pvAn48wH1XzOjU8uwSr2Mg0nEEAwVxlRfv3cb5Vyu y9SqCx+6YwlO71k581UrRvf4ASyrCnTPAJAAjs2SBjMyf6R3rD/+SKv1wLpu8NHz xhxvYGM4ko7VN2Bl6okuWgmZccFGXav69A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA19tBXg+Fy3KasLnqlqWZ gRX157q3uLzR9l2Q229krXi8yrdUszfDWWkT3sx7M2CCNOS5HI8zhc8tYuEKBnm/ 6JPxLkd/6XbGpLHxtTSKJdcvXguJ1EXjyNlf7t193O3AeXPbSJqo3X3lgm30QA7Y 8Dx7VQ7LWlSvzwadAHlNHY43lqKXTQGoGzmg3o2hFgTBc2BW7cC6ITn5owJhluBh 99yy+wSIjS1AqgkWCj8L6y/2ditXeDUTL6wJyfLva9mu7SeLJ2SsSXNcEboLb3i1 F8Dn84OFIUmnZKfLt3HFGKF9l/7KFJVZS8LEHF/dljixm4eiu+NhicZnc/8NCzUU yTpKo4qAvD927iFFFiCjrTcMCQaTEe5V3vMWFzz2C/OZgTzqdP/h9nl3+7dNMIfZ 1PVkLl1+BlxG4JOJJxyJ/O5xSRr+N5gQE1bxf3hWYiKweaXr0puPtioX63RzR3rC 2ZsM+ZrNUzZCqQY5iISLMKs0ClXITuiWjGmvWzIoIJGdWvmspnPbmJyT7NXMHVSM LOfknl/KSyM2N5ySNZtYBCI98VOXNA40PObQv3WjA2OpZH1wpN9y9+ppPWZoeHbD ha5KwfdDCvbb4H+aT9VjRvWRPHDNnJBcQOSHVzZCdhbsd9/JfdGGy7By+YQO62Nd 9uBU/AlutSrN9dxeSmmPl6MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12824246874125577438 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 14:16:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 14:16:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'windsorphotographer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880617551785803415173517195938024941393903954491903607058607760266138409441267320790895135054895040461723431558052916640736297973675682267174807830695623978675270956076635861222119481500113710703022557064430875578642133312272637939413556267545329757420445696693083038089682090990396755302781195094369826623144835364309631382382391428965642884466821096584289875413516118335659424189442615497790893186630321366664181608398679021649908648325634868948842093760109289046216719231404068702044010694020859317408567982293447945807834443751340076131053251444923637804623461840413009424238340444585854951471008084669007613795778019538446247726685590796331023421414744292645155287286427529758481179300099246769487863117362086811150619860489993150329010397811040337847108886695101089071497323868765166797252674804303213756419319171042245874055036739812313676802526758670429736762617977657953504944527469505447275488988318690950797939024481686761305268546240601623875279409914201372013420840164542470530683888155819410196242176163324501268881058977931626669899531399605515469805511690389053982563753403527145851307605435744093951925905838267407272149053455415195293337016592263264733082889567883097533492127858420071945975717335348759202087540643 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6764.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsorphotographer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f1b8a7b5c3d0b609dcebfa1427bca0fc6dbc73a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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