webrtc.rong-data.com
- 上海荣数信息技术有限公司 -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 54:06:25:45:5d:6a:94:2a:e0:98:78:11 was issued on by GlobalSign nv-sa.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
上海荣数信息技术有限公司
Organization:
上海荣数信息技术有限公司
State / Province:
上海
Locality: 上海
Country: CN
Locality: 上海
Country: CN
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 54:06:25:45:5d:6a:94:2a:e0:98:78:11Serial Number (int): 26004170387027236315698067473
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: d6:bf:33:af:95:bb:36:e5:93:29:41:ad:e3:c5:db:8c:6c:04:7b:7b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): db:6c:13:16:2f:b9:7c:b5:7c:3a:fe:98:ba:6e:d1:52:c5:2d:9e:f4
Fingerprint (sha256): fc:f1:58:bb:ae:0c:b1:98:97:a4:1f:d9:f4:5a:0c:df:72:3c:ad:d1:8d:48:65:f1:13:f4:6a:09:0f:77:5f:3f
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate webrtc.rong-data.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webrtc.rong-data.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webrtc.rong-data.com
Other certificates including the domain name rong-data.com
(limited to 100 certificates)
resource.leagcard.com
mall.rong-data.com
resource.leagcard.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
mall.rong-data.com
www.rong-data.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
web.rong-data.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
api.rong-data.com
webrtc.rong-data.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
*.leagcard.com
mall.rong-data.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
mall.rong-data.com
webrtc.rong-data.com
mall.rong-data.com
resource.leagcard.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
mall.rong-data.com
www.rong-data.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
web.rong-data.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
api.rong-data.com
webrtc.rong-data.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
*.leagcard.com
mall.rong-data.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
mall.rong-data.com
webrtc.rong-data.com
Certificate
The complete raw certificate details for webrtc.rong-data.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIMVAYlRV1qlCrgmHgRMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEyMDEwMzU4MDJaFw0y NTAxMDEwMzU4MDFaMH0xCzAJBgNVBAYTAkNOMQ8wDQYDVQQIDAbkuIrmtbcxDzAN BgNVBAcMBuS4iua1tzEtMCsGA1UECgwk5LiK5rW36I2j5pWw5L+h5oGv5oqA5pyv 5pyJ6ZmQ5YWs5Y+4MR0wGwYDVQQDExR3ZWJydGMucm9uZy1kYXRhLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIjiB6aoAR2c+rRU5GgCa0IuSGff wb3V575i2PaCQBHVDOkFwrl9+xP2mvbCyrW2qTf4rTWsSXh5WT/CV09Okl8apP98 EioJg8yUL0bdXdF51w8Tn019VfhhXEZPDT77gPdPu8iVfH+R74i3TCPeATkrHYQP 9e3paxuz22AZa17ebwI/5wnn2/VkS+N4CGRf9fs4GMyl/x9azFHhPKdVWkLxWh2H JM1Sf0P7RPbDUT37X/yZAfojxnza3DgMsK6Yy7wA+oDkd39VjDw3sohsM/ey3ttA qAk6P3BKCs8PXLyASKEa77XFVT68rNULmzrbnbl5EU3uzNzAO2CRV6ptSiMCAwEA AaOCAeEwggHdMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGOBggrBgEF BQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24u Y29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0 cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAE TzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9i YWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKg MIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNy bDAfBgNVHREEGDAWghR3ZWJydGMucm9uZy1kYXRhLmNvbTAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMC s+swHQYDVR0OBBYEFNa/M6+VuzblkylBrePF24xsBHt7MBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFA7JGtmtQlMSUopLQs7leNJpn6GzX 4PypHedtCQZpvcOR1ikwvcwF/A2YDs1HZx1oU4rnzflQyDNIq1n50Ykuqm5enezW KNPLSB6aoSQAGrrB4MpJ36gg7ren4kSubilsRuIAitRCcfavqcF+JBzKVqZATgjD f1s0xpDTOaTTibbMyh/qfVzqlhEFZjK6xIEFcXULHz/GmhIdzUTy2O/8duz8ScyY Z7Mp+IWcYVGq80Ml/ZBVvbrgO18J7Kux/A5CcRc0P/qMAZDwpRKIo4tB6nhURAiI jOcB0wPklxw9vd4zVtFvc8zKlM65/eLqLirLxneifpDEh98IjFRpTqdJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOIHpqgBHZz6tFTkaAJr Qi5IZ9/BvdXnvmLY9oJAEdUM6QXCuX37E/aa9sLKtbapN/itNaxJeHlZP8JXT06S Xxqk/3wSKgmDzJQvRt1d0XnXDxOfTX1V+GFcRk8NPvuA90+7yJV8f5HviLdMI94B OSsdhA/17elrG7PbYBlrXt5vAj/nCefb9WRL43gIZF/1+zgYzKX/H1rMUeE8p1Va QvFaHYckzVJ/Q/tE9sNRPftf/JkB+iPGfNrcOAywrpjLvAD6gOR3f1WMPDeyiGwz 97Le20CoCTo/cEoKzw9cvIBIoRrvtcVVPrys1QubOtuduXkRTe7M3MA7YJFXqm1K IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 26004170387027236315698067473 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 03:58:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 03:58:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海荣数信息技术有限公司' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webrtc.rong-data.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17279868966679127312098582933411429103067032855194823545814845296104680115804286929229713133310627017041315402112134787644315866848473984493880307822941331884554149368616210420792333148044893428694823502151324280848608690220125605591053266581186442934066668160662917243862886643333102397535766119297428486389948475975142092911018558178972820374778121629914209357257768827563813458907764570586574973224505082095035436510372081249862307501011669343408596097524462237683017419781955314858214627676368452325720421150249170494619167876228421469056591937139053058862600670370041022468224993416991753973391746914420131711523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webrtc.rong-data.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d6bf33af95bb36e5932941ade3c5db8c6c047b7b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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