cdktesting-us-east-1-stack-2.lb.cvent.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 06:a2:04:62:9f:4a:af:fc:6f:f9:30:33:68:f2:f8:2b was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdktesting-us-east-1-stack-2.lb.cvent.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:a2:04:62:9f:4a:af:fc:6f:f9:30:33:68:f2:f8:2bSerial Number (int): 8816609009088886460859453176989022251
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 2b:52:a9:7f:f8:2d:72:62:42:73:2f:d6:6e:14:4f:59:db:ca:9b:5e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 95:1c:04:78:fb:e5:e2:06:5f:92:5f:be:69:1e:92:6d:ce:1a:50:eb
Fingerprint (sha256): 00:8a:8a:16:6e:b5:af:8d:2c:ef:75:3a:d6:35:24:57:cf:cd:d4:64:df:57:f4:ab:15:b8:ff:84:15:9f:c4:a7
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate cdktesting-us-east-1-stack-2.lb.cvent.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdktesting-us-east-1-stack-2.lb.cvent.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdktesting-us-east-1-stack-2.lb.cvent.com
Other certificates including the domain name cvent.com
(limited to 100 certificates)
www.cvent.com
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com
*.cvent.com
cds3.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
cds2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
test.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
csn-gdpr-service.core-app-prod.cvent.cloud
cds3.cvent.com
www.cvent.com
isignatures.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
advocates.cvent.com
community.cvent.com
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com
*.cvent.com
cds3.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
cds2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
test.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
csn-gdpr-service.core-app-prod.cvent.cloud
cds3.cvent.com
www.cvent.com
isignatures.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
advocates.cvent.com
community.cvent.com
Certificate
The complete raw certificate details for cdktesting-us-east-1-stack-2.lb.cvent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIQBqIEYp9Kr/xv+TAzaPL4KzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIyMTEwNDAwMDAwMFoXDTIzMTIwMzIzNTk1OVowNDEy MDAGA1UEAxMpY2RrdGVzdGluZy11cy1lYXN0LTEtc3RhY2stMi5sYi5jdmVudC5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGk5pdapE9lKDZ4HKj 9+3AwGRVlRrgAQr3i0J0AFE9vzaeGjwB0mKBkBcavcg9uAr6el0SUDYHzACv/uKG GQ82g7XsdJJvWP4s87P9vhHv3VahriCu6s2wpBNSoyamvQVPqupH9KcWUcOm2NFs Iq6P46j9nKpMcTH2l8DbpplUgZrbF1HJUjBkwFtDnaER3ycXK6/6gqz9UFhqKMrS R6vA49wxPy5AwgJ7+T0QxJZKq7ZaSIdx+J4hoK1PD58w/+0jtgGez3BR5l5LNiQo Onbi8cM/HKlIraGmQKb06T/2qSsp/cSzb9Q4Vn2Ng9d9b3BfL7BtLfDpLv7hOUZf Fm1bAgMBAAGjggGVMIIBkTAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC 4jAdBgNVHQ4EFgQUK1Kpf/gtcmJCcy/WbhRPWdvKm14wNAYDVR0RBC0wK4IpY2Rr dGVzdGluZy11cy1lYXN0LTEtc3RhY2stMi5sYi5jdmVudC5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCo3WSMGkXK/k2SZMqb3mnvdzAgVL4ElLRQ6QKXD2I0dCI5AOiMSn95Ok3d 7oe/8hjR6/T9jTHP+aZIAYr8eDLgD6AlvJzIdVok2GVaEpsJayOXPDXu2ygKFsOn ZuR1Mo8PjsyeXosGBSPjhmeuAlChtA9I/zHXB2YfLD17IxLAv1iEfzWudRh3hRJW ruEv7Ps4CjUX7+tArpNt2msUCYsMSCBbQBw6YPxWGMO+75oMdFslGZkFXlT+7Vq9 XaKRvrZhpyZ2e+yOBfq0EhJZJjsJiKBtQdBHLcKGIHim+S8OfgCEQkDJ4CtGiT78 QLy5lac+6HoYTc/Gi1v03LZuNP0u -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpOaXWqRPZSg2eByo/ft wMBkVZUa4AEK94tCdABRPb82nho8AdJigZAXGr3IPbgK+npdElA2B8wAr/7ihhkP NoO17HSSb1j+LPOz/b4R791Woa4grurNsKQTUqMmpr0FT6rqR/SnFlHDptjRbCKu j+Oo/ZyqTHEx9pfA26aZVIGa2xdRyVIwZMBbQ52hEd8nFyuv+oKs/VBYaijK0ker wOPcMT8uQMICe/k9EMSWSqu2WkiHcfieIaCtTw+fMP/tI7YBns9wUeZeSzYkKDp2 4vHDPxypSK2hpkCm9Ok/9qkrKf3Es2/UOFZ9jYPXfW9wXy+wbS3w6S7+4TlGXxZt WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8816609009088886460859453176989022251 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdktesting-us-east-1-stack-2.lb.cvent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25067970129384517368454785176996482905987422937590636487182332957572523013100513179944234373713035364124237996677984193346243204188909517736717963178958865761434288093363800618569552218408820481905809516709542843369856613984293134592064311531861495403827129571348867440585110091642012631589341918721975516869860274645531799430777084080807854017045299536014319647823274588740387815405939104929415526693470127314395845441593429110208704163565617806730006131162993939511743670369945223803904711821022131971574011232643960955560282469728844973346663370465105270926047284346862168378103181096534728348141632313953409723739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b52a97ff82d726242732fd66e144f59dbca9b5e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdktesting-us-east-1-stack-2.lb.cvent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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