*.gumgum.com
Issued by Amazon
About this certificate
This digital certificate with serial number 03:5a:3a:63:a5:b3:25:6a:ee:28:e3:51:6c:b3:2e:a3 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.gumgum.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5a:3a:63:a5:b3:25:6a:ee:28:e3:51:6c:b3:2e:a3Serial Number (int): 4456174979249583856642085822793985699
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 56:e6:c7:6b:34:1a:54:07:ff:ff:b9:31:5e:d7:55:48:7c:48:a8:12
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 99:61:b2:3f:c8:38:f5:b6:8a:7c:ce:d2:35:17:a5:a0:dd:f9:50:d5
Fingerprint (sha256): 00:a6:48:fa:6e:b7:3f:92:5e:29:59:32:4a:14:ec:cb:9e:5e:6e:cd:e8:1e:57:91:46:a4:4b:50:73:bc:b1:ec
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.gumgum.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gumgum.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gumgum.com
Other certificates including the domain name gumgum.com
(limited to 100 certificates)
*.gumgum.com
ceros2.map.fastly.net
techblog.gumgum.com
insights.gumgum.com
san-003.ceros.com
sales.gumgum.com
corporatestatus.tyro.com
san-003.ceros.com
san-003.ceros.com
insights.gumgum.com
san-003.ceros.com
ceros4.map.fastly.net
techblog.gumgum.com
ceros4.map.fastly.net
san-002.ceros.com
ceros2.map.fastly.net
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
ceros4.map.fastly.net
san-003.ceros.com
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
*.dlrgroup.com
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
enomstatus.com
corporatestatus.tyro.com
san-002.ceros.com
*.advertising-api.gumgum.com
gumgum.com
san-003.ceros.com
ixlwvc.com
san-003.ceros.com
*.verity-api.dev.va.ggops.com
san-003.ceros.com
ceros4.map.fastly.net
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
san-002.ceros.com
insights.gumgum.com
*.exp.gumgum.com
ceros2.map.fastly.net
ceros2.map.fastly.net
gumdrops.gumgum.com
corporatestatus.tyro.com
www.store.gumgum.com
san-003.ceros.com
gumgum.com
ceros4.map.fastly.net
san-003.ceros.com
*.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
*.gumgum.com
san-002.ceros.com
*.gumgum.com
ceros4.map.fastly.net
3-14.exp.gumgum.com
san-002.ceros.com
*.gumgum.com
sports-api--dev.sports.ggops.com
san-004.ceros.com
ceros4.map.fastly.net
corporatestatus.tyro.com
san-003.ceros.com
*.ceros.com
*.gumgum.com
san-003.ceros.com
san-003.ceros.com
techblog.gumgum.com
gumgum.com
techblog.gumgum.com
ceros4.map.fastly.net
ceros2.map.fastly.net
*.gumgum.com
san-002.ceros.com
san-002.ceros.com
5752754626625536-fe1.pantheonsite.io
*.gumgum.com
corporatestatus.tyro.com
5752754626625536-fe1.pantheonsite.io
3.14-hersheys.exp.gumgum.com
ceros2.map.fastly.net
5752754626625536-fe1.pantheonsite.io
techblog.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
san-003.ceros.com
*.gumgum.com
ceros2.map.fastly.net
enomstatus.com
ceros2.map.fastly.net
techblog.gumgum.com
insights.gumgum.com
san-003.ceros.com
sales.gumgum.com
corporatestatus.tyro.com
san-003.ceros.com
san-003.ceros.com
insights.gumgum.com
san-003.ceros.com
ceros4.map.fastly.net
techblog.gumgum.com
ceros4.map.fastly.net
san-002.ceros.com
ceros2.map.fastly.net
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
ceros4.map.fastly.net
san-003.ceros.com
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
*.dlrgroup.com
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
enomstatus.com
corporatestatus.tyro.com
san-002.ceros.com
*.advertising-api.gumgum.com
gumgum.com
san-003.ceros.com
ixlwvc.com
san-003.ceros.com
*.verity-api.dev.va.ggops.com
san-003.ceros.com
ceros4.map.fastly.net
san-002.ceros.com
san-003.ceros.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
san-002.ceros.com
insights.gumgum.com
*.exp.gumgum.com
ceros2.map.fastly.net
ceros2.map.fastly.net
gumdrops.gumgum.com
corporatestatus.tyro.com
www.store.gumgum.com
san-003.ceros.com
gumgum.com
ceros4.map.fastly.net
san-003.ceros.com
*.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
san-002.ceros.com
*.gumgum.com
san-002.ceros.com
*.gumgum.com
ceros4.map.fastly.net
3-14.exp.gumgum.com
san-002.ceros.com
*.gumgum.com
sports-api--dev.sports.ggops.com
san-004.ceros.com
ceros4.map.fastly.net
corporatestatus.tyro.com
san-003.ceros.com
*.ceros.com
*.gumgum.com
san-003.ceros.com
san-003.ceros.com
techblog.gumgum.com
gumgum.com
techblog.gumgum.com
ceros4.map.fastly.net
ceros2.map.fastly.net
*.gumgum.com
san-002.ceros.com
san-002.ceros.com
5752754626625536-fe1.pantheonsite.io
*.gumgum.com
corporatestatus.tyro.com
5752754626625536-fe1.pantheonsite.io
3.14-hersheys.exp.gumgum.com
ceros2.map.fastly.net
5752754626625536-fe1.pantheonsite.io
techblog.gumgum.com
5752754626625536-fe1.pantheonsite.io
san-003.ceros.com
corporatestatus.tyro.com
ceros2.map.fastly.net
san-003.ceros.com
*.gumgum.com
ceros2.map.fastly.net
enomstatus.com
Certificate
The complete raw certificate details for *.gumgum.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEWTCCA0GgAwIBAgIQA1o6Y6WzJWruKONRbLMuozANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODAxMjgwMDAwMDBaFw0xOTAyMjgx MjAwMDBaMBcxFTATBgNVBAMMDCouZ3VtZ3VtLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALP8ERsNTpXev4u3rA19HrJXowPmkjFL41cTu5jARwxp /Rhwn+Mkhr/4U1wc9Cub9GDaSDp/+Ikb9WhbhZXruC8ZVjIQhFGZho/5bQAZ3Hor J7vJdNYbYTlNmaEz+4J35xVCm5ZQMyW1dYKWc/cP6Df7DkQQCqtR/11FlvBz7GWq cp3/kg19PzFK0sJ2g8xr1hrhlg2QeDfYw//exmREb0SLAzEMqcQqGyYfpajapCMC oc6m3v9u7kPolL5E4lfV9ZyWr9KYaDjqDGt0toZvwWu+8T2pm1j7weVUaKnPTdWu kok+QgmmtmCC9mX6GzOotKxPahwTBqjWtPMKBdr5LocCAwEAAaOCAXAwggFsMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBRW5sdrNBpU B///uTFe11VIfEioEjAXBgNVHREEEDAOggwqLmd1bWd1bS5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEApCG/ 9mLivJJdMZnEZdQty1GdR0A+cpI/2N9JZJdsASh8Q+eXKN1kvOR5PoJmv35306XP Etzj46EPaPwXZsMmLJYrZWtF1JfvhKPrM3AA7Zsr3DYgWIOcaoc5GPC2Wgn8a2Is 2oZmw4yjM4/6NOSkZE/HmfRte1rchLUOTlHX4viTqDVq17O0+RZWhlO8arPyi+Gv T5It9kogWSJztDxiI8oIcDv+I3Hrk83cJqVWp6a68z6ktY+dl6uRyKlAYgro/p2a AnoNXXatjs+wf/2aBSDfVj5vsjncHksWwQc4H0IhRlG00Jf0B/mGLLhMTDVJi0Gd r4WkD7jYyXTS//GgMA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/wRGw1Old6/i7esDX0e slejA+aSMUvjVxO7mMBHDGn9GHCf4ySGv/hTXBz0K5v0YNpIOn/4iRv1aFuFleu4 LxlWMhCEUZmGj/ltABnceisnu8l01hthOU2ZoTP7gnfnFUKbllAzJbV1gpZz9w/o N/sORBAKq1H/XUWW8HPsZapynf+SDX0/MUrSwnaDzGvWGuGWDZB4N9jD/97GZERv RIsDMQypxCobJh+lqNqkIwKhzqbe/27uQ+iUvkTiV9X1nJav0phoOOoMa3S2hm/B a77xPambWPvB5VRoqc9N1a6SiT5CCaa2YIL2ZfobM6i0rE9qHBMGqNa08woF2vku hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4456174979249583856642085822793985699 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gumgum.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22720955370067430073804614487304477687328603147761966427383211950358903202903252872677954815717676525753021578954096053908207567002934477721166046454761829459726146666414352415616667171800796764297021342572100313954780404641684352675285112165118192794157188493124729735834036833100654934372833148523685453252475420462136250059077490590843678101542508831809316684075101953137903441601940759760290548080437089305492424708314423220908218802784311762296396594949739496450382326868231781523388156260870652493230298363620808553782181981357572557660352508237758198209575550988109808228738155140877259040896263522114495655559 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56e6c76b341a5407ffffb9315ed755487c48a812 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gumgum.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a421bff662e2bc925d3199c465d42dcb519d47403e72923fd8df4964976c01287c43e79728dd64bce4793e8266bf7e77d3a5cf12dce3e3a10f68fc1766c3262c962b656b45d497ef84a3eb337000ed9b2bdc362058839c6a873918f0b65a09fc6b622cda8666c38ca3338ffa34e4a4644fc799f46d7b5adc84b50e4e51d7e2f893a8356ad7b3b4f916568653bc6ab3f28be1af4f922df64a20592273b43c6223ca08703bfe2371eb93cddc26a556a7a6baf33ea4b58f9d97ab91c8a940620ae8fe9d9a027a0d5d76ad8ecfb07ffd9a0520df563e6fb239dc1e4b16c107381f42214651b4d097f407f9862cb84c4c35498b419daf85a40fb8d8c974d2fff1a030