*.ebolaresponse.iom.int
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:70:c6:23:2d:a8:39:26:c7:e8:00:00:fb:22:5f:25 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ebolaresponse.iom.int
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:70:c6:23:2d:a8:39:26:c7:e8:00:00:fb:22:5f:25Serial Number (int): 20523975889147044687874626399934504741
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 03:8a:fd:26:ae:0b:9d:8c:4a:e5:3d:de:58:5e:45:16:c0:a9:f4:4b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 68:bd:34:64:c7:49:4d:0e:89:73:c5:92:ff:74:2a:ac:54:5b:76:27
Fingerprint (sha256): 01:90:42:24:0e:11:e1:0b:d8:47:97:ac:16:a9:c7:51:17:0a:45:8e:10:9e:e7:b3:b6:85:07:fb:6a:f5:c9:85
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.ebolaresponse.iom.int
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ebolaresponse.iom.int
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ebolaresponse.iom.int
Other certificates including the domain name iom.int
(limited to 100 certificates)
support.bluelabel.net
*.burundi.iom.int
GMSGuate.iom.int
colombia.oim.org.co
*.drcongo.iom.int
*.uruguay.iom.int
support.bluelabel.net
support.bluelabel.net
*.croatia.iom.int
kf.kobo.iom.int
*.srilanka.iom.int
*.ebolaresponse.iom.int
maldives.iom.int
www.rosanjose.iom.int
rosanjose.iom.int
unitedkingdom.iom.int
*.mhdpakistan.iom.int
support.bluelabel.net
beta.iom.int
*.rodakar.iom.int
externalconsultantsoigmonitoring.iom.int
*.denmark.iom.int
mic.iom.int
rosanjose.iom.int
*.syria.iom.int
*.croatia.iom.int
albania.iom.int
*.donate.iom.int
*.pakistan.iom.int
telerad-mhd.iom.int
*.timor-leste.iom.int
p-mrcis.cloud.iom.int
publications.iom.int
*.missingmigrants.iom.int
d-eaps.iom.int
programamesoamerica.iom.int
d-mgi-api.iom.int
nigeriadtm.iom.int
*.tunisia.iom.int
www.rosanjose.iom.int
www.rosanjose.iom.int
*.crisisresponse.iom.int
*.weblog.iom.int
im4mmp-uat.iom.int
*.spain.iom.int
support.bluelabel.net
webmail.iom.int
nepal.iom.int
*.lgbt.iom.int
*.nicaragua.iom.int
kmrepository.iom.int
*.micicinitiative.iom.int
support.bluelabel.net
gss.iom.int
iom-nederland.nl
programamesoamerica.iom.int
madportal.iom.int
*.techatwork.iom.int
beratung.iom.int
*.pvigm.iom.int
programamesoamerica.iom.int
maldives.iom.int
www.italy.iom.int
oimperu.org
*.nepal.iom.int
www.programamesoamerica.iom.int
*.micicinitiative.iom.int
maldives.iom.int
ext-globalroster.iom.int
ee.kobo.iom.int
*.primi.iom.int
*.unitedkingdom.iom.int
*.weareallin.iom.int
kmhub.iom.int
kosovo.iom.int
*.panama.iom.int
paraguay.iom.int
*.myanmar.iom.int
*.spain.iom.int
rohingyarrosomorghor.iom.int
*.environmentalmigration.iom.int
*.missingmigrants.iom.int
*.zimbabwe.iom.int
iom.int
*.liberia.iom.int
*.italy.iom.int
*.mmp.iom.int
ecuadorimsodk.iom.int
fseuc-3.freshservice.com
Iraqimsuat.cloud.iom.int
ecampus.iom.int
*.thailand.iom.int
*.ch.iom.int
compass.iom.int
portal.iom.int
*.slovenia.iom.int
*.romania.iom.int
ammportal.iom.int
*.southafrica.iom.int
*.burundi.iom.int
GMSGuate.iom.int
colombia.oim.org.co
*.drcongo.iom.int
*.uruguay.iom.int
support.bluelabel.net
support.bluelabel.net
*.croatia.iom.int
kf.kobo.iom.int
*.srilanka.iom.int
*.ebolaresponse.iom.int
maldives.iom.int
www.rosanjose.iom.int
rosanjose.iom.int
unitedkingdom.iom.int
*.mhdpakistan.iom.int
support.bluelabel.net
beta.iom.int
*.rodakar.iom.int
externalconsultantsoigmonitoring.iom.int
*.denmark.iom.int
mic.iom.int
rosanjose.iom.int
*.syria.iom.int
*.croatia.iom.int
albania.iom.int
*.donate.iom.int
*.pakistan.iom.int
telerad-mhd.iom.int
*.timor-leste.iom.int
p-mrcis.cloud.iom.int
publications.iom.int
*.missingmigrants.iom.int
d-eaps.iom.int
programamesoamerica.iom.int
d-mgi-api.iom.int
nigeriadtm.iom.int
*.tunisia.iom.int
www.rosanjose.iom.int
www.rosanjose.iom.int
*.crisisresponse.iom.int
*.weblog.iom.int
im4mmp-uat.iom.int
*.spain.iom.int
support.bluelabel.net
webmail.iom.int
nepal.iom.int
*.lgbt.iom.int
*.nicaragua.iom.int
kmrepository.iom.int
*.micicinitiative.iom.int
support.bluelabel.net
gss.iom.int
iom-nederland.nl
programamesoamerica.iom.int
madportal.iom.int
*.techatwork.iom.int
beratung.iom.int
*.pvigm.iom.int
programamesoamerica.iom.int
maldives.iom.int
www.italy.iom.int
oimperu.org
*.nepal.iom.int
www.programamesoamerica.iom.int
*.micicinitiative.iom.int
maldives.iom.int
ext-globalroster.iom.int
ee.kobo.iom.int
*.primi.iom.int
*.unitedkingdom.iom.int
*.weareallin.iom.int
kmhub.iom.int
kosovo.iom.int
*.panama.iom.int
paraguay.iom.int
*.myanmar.iom.int
*.spain.iom.int
rohingyarrosomorghor.iom.int
*.environmentalmigration.iom.int
*.missingmigrants.iom.int
*.zimbabwe.iom.int
iom.int
*.liberia.iom.int
*.italy.iom.int
*.mmp.iom.int
ecuadorimsodk.iom.int
fseuc-3.freshservice.com
Iraqimsuat.cloud.iom.int
ecampus.iom.int
*.thailand.iom.int
*.ch.iom.int
compass.iom.int
portal.iom.int
*.slovenia.iom.int
*.romania.iom.int
ammportal.iom.int
*.southafrica.iom.int
Certificate
The complete raw certificate details for *.ebolaresponse.iom.int in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhDCCA2ygAwIBAgIQD3DGIy2oOSbH6AAA+yJfJTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMjMwMDAwMDBaFw0yMTAzMjMx MjAwMDBaMCIxIDAeBgNVBAMMFyouZWJvbGFyZXNwb25zZS5pb20uaW50MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5bKin+ZBk4My0fRJmhWo9StRydM pc5vbR2E/xta90oGYhEgDww5gQQnsaJNJxxvd4hTUQPPMPZDBliRXhRSpYnk05aW N1ZrCLOhoXsx6CqNort9E87EJ1B81yq17GnqW1Ruecy85mu4JJxOv11bLWuInCS1 HJ04bheTLXX8Wq7BrAXmpIInnvBbS5CQpVfB3uq3DLMj1oraeyY7QvEGElv//kyk gdlqJH86MKJclncJU8N6XPA9ln+ilxzqCXh7u+9tSz8Cks8qBG+mKFOtTOui7KiL yexrL6UNWBoUPUT0Ax4NorAs0xXT5Q3I/PILNPvc5rwEZWWqxKqXOvZUsQIDAQAB o4IBkDCCAYwwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O BBYEFAOK/SauC52MSuU93lheRRbAqfRLMCIGA1UdEQQbMBmCFyouZWJvbGFyZXNw b25zZS5pb20uaW50MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAEC MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAB0YKwieAkC8 +E7EA7uSa5TFYN5BZpeePOw84qgO7ZHvTEEHbBd899jzx+XurGofS1uZPpp2LVO8 dff8IqKuO07OfCA5yvTkaS8QsVEMfZmpdKfbsTmspBGsaAvYZKmcVHgApkkhlk/5 XtwlmEQ6vKEArPjV5E+HAw5OjTkZLxNd8A6/UuNgCk7ofH5yfIoN6eGr1SlXL2vo R9Xs2vsgzmHCOQORVrxidKiigjii4LfZ/jfgK3n4G3Pyk0DPDua2/Yc1ZF2Xivur kZu4aLOObCEGuvePEohDDGdFMl23BG0dyBJTFdkSagzpMezqp+yNigZaFX6NsZTU 7HcYWi6nmdw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5bKin+ZBk4My0fRJmhW o9StRydMpc5vbR2E/xta90oGYhEgDww5gQQnsaJNJxxvd4hTUQPPMPZDBliRXhRS pYnk05aWN1ZrCLOhoXsx6CqNort9E87EJ1B81yq17GnqW1Ruecy85mu4JJxOv11b LWuInCS1HJ04bheTLXX8Wq7BrAXmpIInnvBbS5CQpVfB3uq3DLMj1oraeyY7QvEG Elv//kykgdlqJH86MKJclncJU8N6XPA9ln+ilxzqCXh7u+9tSz8Cks8qBG+mKFOt TOui7KiLyexrL6UNWBoUPUT0Ax4NorAs0xXT5Q3I/PILNPvc5rwEZWWqxKqXOvZU sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20523975889147044687874626399934504741 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ebolaresponse.iom.int' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19641295169891986053399424702428064698229623658022707883203355133628151849644746396671471846266618289519244263794056931824366340158401921073834164472762585449418023569330324953834168997612400554607528917508130603599082001036162542756005647658865158149299799385362904554024542274576275994347473901633418671058578374830457353473923062041989954352578468075242855888580330244619195987712296960620472688092128780197296046433090605914473524313940584602639060903082119988487844584084621280273523210112253222207994475548260266369587819897549315785179479530872084468928360692363105677471426038477295623052066991790847750984881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 038afd26ae0b9d8c4ae53dde585e4516c0a9f44b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebolaresponse.iom.int' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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