*.bluechew.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:a6:87:56:63:2f:e7:ab:a3:36:26:57:b0:84:e9:99 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.bluechew.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:a6:87:56:63:2f:e7:ab:a3:36:26:57:b0:84:e9:99Serial Number (int): 19473858189121002327876085660611045785
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 61:91:18:3e:b6:80:52:e2:9d:a2:e5:05:c5:2a:43:fb:f3:2e:a3:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 05:53:13:63:f9:53:a2:ae:99:de:63:83:40:c2:7f:29:c4:3f:f4:a0
Fingerprint (sha256): 00:a5:65:89:d3:c5:56:14:55:36:55:d9:8d:61:0f:54:bc:e7:6b:f9:57:aa:fb:38:e3:df:6d:75:e1:e4:bf:6c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.bluechew.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bluechew.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bluechew.com
Other certificates including the domain name bluechew.com
(limited to 100 certificates)
nfd2019.live
studio.aegro.design
*.bluechew.com
www.bluechew.com
panorama.flurweg.app
www.scenesound.app
www.bluechew.com
app.sportpals.net
dev.physicians.bluechew.com
dashboard.remotepresence.io
react-pb.com
ux.bluechew.com
gilmoreassoc.com
offthebeatenpath.me
carfactory-prod.imagin.studio
www.glamping.com.uy
kreationfilms.co.in
rtc6.bluechew.com
chicken-dinner.com
www.tmhrakennus.fi
www.datetimeutil.com
itemstorage.io
uae.estate
md.bluechew.com
dev-guidelines.orgaster.jp
portal.goswitch.dk
cms.pitsengartcraft.co.za
*.bluechew.com
www.ethionxtgen.com
hiragram.app
acc.vivere.app
egemenerdem.info
ancoconstruction.co.nz
*.bluechew.com
xml.volan.app.br
l.htwettoe.com
go.bluechew.com
harpermurphyllc.com
grovi.co
bluechew.com
haystak.ai
rtc10.bluechew.com
rtc2.bluechew.com
crm.airlift.app
rn.bluechew.com
staging-superadmin.evfy.sg
rtc8.bluechew.com
eyecaretownhall.allerganbroadcast.com
order.stulo.co.za
management.thermolog.biz
everyday-works.com
rtc8.bluechew.com
www.exporthealth.app
geeknuts.in
stamo.io
help.bluechew.com
api.block-party.app
80bkc.com
msg.uperb.com
try.bluechew.com
www.studioaleksandrow.pl
referrals.freecalls.world
rtc9.bluechew.com
saimir.ca
www.bluechew.com
app-staging.aider.ai
suje-project.ml
help.bluechew.com
test.provider.bluechew.com
www.comelearn.es
www.sunrisesoapindustries.in
rtc5.bluechew.com
rnkd.app
www.colab.academy
namer.ai
www.b1x.app
*.bluechew.com
app.muteyaar.com
dev.bluechew.com
jamesdbruner.com
holidaysportsmanshow.com
metalens.app
fairylullaby.com.au
huaweitheme.app
beta.bana.sa
rtc1.bluechew.com
stridercattle.com
task.laxmidental.com
nurses.bluechew.com
store.vcloudcam.vn
livrome.com.br
get-started.renewglow.com
www.loveat.app
ecoemedicina.es
dias-art.ch
cromy.club
www.bluechew.com
elladody.com
rtc1.bluechew.com
rtc4.bluechew.com
studio.aegro.design
*.bluechew.com
www.bluechew.com
panorama.flurweg.app
www.scenesound.app
www.bluechew.com
app.sportpals.net
dev.physicians.bluechew.com
dashboard.remotepresence.io
react-pb.com
ux.bluechew.com
gilmoreassoc.com
offthebeatenpath.me
carfactory-prod.imagin.studio
www.glamping.com.uy
kreationfilms.co.in
rtc6.bluechew.com
chicken-dinner.com
www.tmhrakennus.fi
www.datetimeutil.com
itemstorage.io
uae.estate
md.bluechew.com
dev-guidelines.orgaster.jp
portal.goswitch.dk
cms.pitsengartcraft.co.za
*.bluechew.com
www.ethionxtgen.com
hiragram.app
acc.vivere.app
egemenerdem.info
ancoconstruction.co.nz
*.bluechew.com
xml.volan.app.br
l.htwettoe.com
go.bluechew.com
harpermurphyllc.com
grovi.co
bluechew.com
haystak.ai
rtc10.bluechew.com
rtc2.bluechew.com
crm.airlift.app
rn.bluechew.com
staging-superadmin.evfy.sg
rtc8.bluechew.com
eyecaretownhall.allerganbroadcast.com
order.stulo.co.za
management.thermolog.biz
everyday-works.com
rtc8.bluechew.com
www.exporthealth.app
geeknuts.in
stamo.io
help.bluechew.com
api.block-party.app
80bkc.com
msg.uperb.com
try.bluechew.com
www.studioaleksandrow.pl
referrals.freecalls.world
rtc9.bluechew.com
saimir.ca
www.bluechew.com
app-staging.aider.ai
suje-project.ml
help.bluechew.com
test.provider.bluechew.com
www.comelearn.es
www.sunrisesoapindustries.in
rtc5.bluechew.com
rnkd.app
www.colab.academy
namer.ai
www.b1x.app
*.bluechew.com
app.muteyaar.com
dev.bluechew.com
jamesdbruner.com
holidaysportsmanshow.com
metalens.app
fairylullaby.com.au
huaweitheme.app
beta.bana.sa
rtc1.bluechew.com
stridercattle.com
task.laxmidental.com
nurses.bluechew.com
store.vcloudcam.vn
livrome.com.br
get-started.renewglow.com
www.loveat.app
ecoemedicina.es
dias-art.ch
cromy.club
www.bluechew.com
elladody.com
rtc1.bluechew.com
rtc4.bluechew.com
Certificate
The complete raw certificate details for *.bluechew.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIQDqaHVmMv56ujNiZXsITpmTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMjIwMDAwMDBaFw0yMDAyMjIx MjAwMDBaMBkxFzAVBgNVBAMMDiouYmx1ZWNoZXcuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEArIlR9/BpuakSpfQBRjZz270n1aGeyelBZbL8D4HR xoH4Vqy94JIIj9OM8OBHNbEk792CP2Ta+FIdtW3WogGxQdhOx8inv20o7kHUf1ft YdwC+ety6AJacBUgqnkngOVPdLfVuTafjCVwTwMlJRFnQGubO16qEfzVRM+/KlTF NMBY25iZJRsclbmpGzaM3DfUPgQdLnBUoEBeHg3qqLsT8EnG4t1CSj7CKL9HOmay IrGQqmYRvvGoTkVRyYEbz9Pj1kjEBgBHUcx2FQgqqd2JeFKeV5GFFrF07o0b1UFj U3Wkjz1VMmmWJBY+GtBt18eAPZ9y5nj4z4KNjAlRiL0KYwIDAQABo4ICejCCAnYw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFGGRGD62 gFLinaLlBcUqQ/vzLqN4MBkGA1UdEQQSMBCCDiouYmx1ZWNoZXcuY29tMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEF BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRy dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVz dC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAWh2snr+ AAAEAwBHMEUCIFWgoQ4FQ8KbYbavFSYPnSUHgymaHaRJvLxU1IhHc7SdAiEAqHuj yvseBDged+iLLBwVWX8CuUuPwQJg1zegFofldZwAdgCHdb/nWXz4jEOZX73zbv9W jUdWNv9KtWDBtOr/XqCDDwAAAWh2snvHAAAEAwBHMEUCIQCEjRvO/iqWJIvHdRYh RFDtZbPZLdAE4dfe8cLm2P54kwIga+xyl7Gmxb8iOc/dPbXlqxnJQse+trGlqYSM TVYuj5UwDQYJKoZIhvcNAQELBQADggEBACRux6I0nOpxoHTXBxepfGRUqShyat8k fMinholdmUBiwqyfYWJj7cYrCO2ySHALSOEh8HIOf1zdugMSqgM2IGy7ExwR5Be0 c8Ane2dR4dGtuI/gYyXt9dumt8ZIbHv9DfyrrisaLd8Yl1dVOlDOQJpMgF5SJCfq XcQAhvLAxKuaUHnKxsbFqehjRFy+w/4fp0rPDECsJwU5A2ETmUNrS9XgDivDzuMg 48JoicaPXmjTCbSeL340i2j3Qg/jjHDq7UlWJfClFqCwJ/HYGbkRUWgQNSqJMTvf /KQEwgtoz2WREOyceRJeNyYnl6XO4nDKg6Wesl1ni1U7iVGUaZiSvqw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIlR9/BpuakSpfQBRjZz 270n1aGeyelBZbL8D4HRxoH4Vqy94JIIj9OM8OBHNbEk792CP2Ta+FIdtW3WogGx QdhOx8inv20o7kHUf1ftYdwC+ety6AJacBUgqnkngOVPdLfVuTafjCVwTwMlJRFn QGubO16qEfzVRM+/KlTFNMBY25iZJRsclbmpGzaM3DfUPgQdLnBUoEBeHg3qqLsT 8EnG4t1CSj7CKL9HOmayIrGQqmYRvvGoTkVRyYEbz9Pj1kjEBgBHUcx2FQgqqd2J eFKeV5GFFrF07o0b1UFjU3Wkjz1VMmmWJBY+GtBt18eAPZ9y5nj4z4KNjAlRiL0K YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19473858189121002327876085660611045785 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bluechew.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21780703563381525989493378858376654717126880670137678090731408414436759911117358770976014571317681789165714759339438531928349605883952248127042610163887652636862548230402407026806055196434612344805522999060450417423871533077472539496706785801395684894269958598526607797742081728024833159563299981494591256293910545635822426733861440992818210745560676061325469133599052940116094224705907307756268533034615134363174071784256594775386522731026757294539680062894765219127090068297612410818038378401988346631323853384185077846913935919835688633914931003953903246014934144459382906691472598541897461752635913716952997890659 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6191183eb68052e29da2e505c52a43fbf32ea378 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluechew.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016876b27afe0000040300473045022055a0a10e0543c29b61b6af15260f9d250783299a1da449bcbc54d4884773b49d022100a87ba3cafb1e04381e77e88b2c1c15597f02b94b8fc10260d737a01687e5759c0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016876b27bc70000040300473045022100848d1bcefe2a96248bc77516214450ed65b3d92dd004e1d7def1c2e6d8fe789302206bec7297b1a6c5bf2239cfdd3db5e5ab19c942c7beb6b1a5a9848c4d562e8f95 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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