trade.ig.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0d:0e:e3:a9:e5:7d:d4:b8:88:13:86:b0:da:3e:b6:d0 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=trade.ig.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:0e:e3:a9:e5:7d:d4:b8:88:13:86:b0:da:3e:b6:d0Serial Number (int): 17357273668787075296648664287228638928
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 50:8e:f2:14:44:e8:b1:a4:9e:15:2f:74:52:34:76:c8:42:e8:62:60
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c6:ed:13:7f:ae:90:02:38:dd:e5:b3:a8:8b:a0:37:c0:d8:b7:cc:94
Fingerprint (sha256): 02:06:f9:68:54:7e:31:06:7d:09:60:38:4c:95:1f:9a:ff:9b:b6:f9:7b:63:00:b3:5c:a3:a2:67:3a:61:66:a8
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate trade.ig.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for trade.ig.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
trade.ig.com
*.trade.ig.com
*.trade.ig.com
Other certificates including the domain name ig.com
(limited to 100 certificates)
pages.chartsdtu.ig.com
statuspage.io
private-cloud.status.ovhcloud.dev
affiliates.ig.com
incapsula.com
affiliates.ig.com
statuspage.io
statuspage.io
status-media.bucketeer.jp
status-media.bucketeer.jp
etfscreener.ig.com
statuspage.io
router-ext-covg.ig.com
affiliates.ig.com
investments.ig.com
trade.ig.com
*.raf.ig.com
secure05.stage.lithium.com
community.ig.com
*.test.client-onboarding.ig.com
statuspage.io
mybranch.staging.tradedtu.ig.com
sbc2.ig.com
secure05.stage.lithium.com
sfbaccessuk1.ig.com
sepsbe.status.symantec.com
sepsbe.status.symantec.com
test-staging-branch-hoist.webshell.tradedtu.ig.com
edge.dtu.iggroup.net
statuspage.io
statuspage.io
autodiscover.ig.com
statuspage.io
autodiscover.ig.com
statuspage.io
payments.ig.com
status-media.bucketeer.jp
community.ig.com
statuspage.io
statuspage.io
chartsprd.ig.com
igamerica.ig.com
statuspage.io
web.ig.com
sitca.ig.com
status-media.bucketeer.jp
status-media.bucketeer.jp
affiliates.ig.com
test.chartsdtu.ig.com
statuspage.io
academy-api.ig.com
statuspage.io
statuspage.io
web.ig.com
statuspage.io
statuspage.io
web.ig.com
pages.chartsdtu.ig.com
*.dtu-dealing.mobile.ig.com
net-cpm.marketdatasystems.com
statuspage.io
dgs.ig.com
uat.webshell.tradedtu.ig.com
sts.iggroup.net
academy-api.ig.com
imperva.com
web.ig.com
statuspage.io
igamerica.ig.com
labgroup.ig.com
private-cloud.status.ovhcloud.dev
statuspage.io
secure05.stage.lithium.com
*.ig.com
statuspage.io
statuspage.io
statuspage.io
services.ig.com
investments-api.ig.com
igamerica.ig.com
statuspage.io
staging-branch-hoist.staging.tradedtu.ig.com
access.ig.com
statuspage.io
sepsbe.status.symantec.com
sfbaccessuk1.ig.com
status-media.bucketeer.jp
web-ca.ig.com
localhost.ig.com
affiliates.ig.com
incapsula.com
sepsbe.status.symantec.com
uat.screener.ig.com
academy-api.ig.com
uat.webshell.tradedtu.ig.com
affiliates.ig.com
investments.ig.com
secure05.stage.lithium.com
private-cloud.status.ovhcloud.dev
web.ig.com
statuspage.io
private-cloud.status.ovhcloud.dev
affiliates.ig.com
incapsula.com
affiliates.ig.com
statuspage.io
statuspage.io
status-media.bucketeer.jp
status-media.bucketeer.jp
etfscreener.ig.com
statuspage.io
router-ext-covg.ig.com
affiliates.ig.com
investments.ig.com
trade.ig.com
*.raf.ig.com
secure05.stage.lithium.com
community.ig.com
*.test.client-onboarding.ig.com
statuspage.io
mybranch.staging.tradedtu.ig.com
sbc2.ig.com
secure05.stage.lithium.com
sfbaccessuk1.ig.com
sepsbe.status.symantec.com
sepsbe.status.symantec.com
test-staging-branch-hoist.webshell.tradedtu.ig.com
edge.dtu.iggroup.net
statuspage.io
statuspage.io
autodiscover.ig.com
statuspage.io
autodiscover.ig.com
statuspage.io
payments.ig.com
status-media.bucketeer.jp
community.ig.com
statuspage.io
statuspage.io
chartsprd.ig.com
igamerica.ig.com
statuspage.io
web.ig.com
sitca.ig.com
status-media.bucketeer.jp
status-media.bucketeer.jp
affiliates.ig.com
test.chartsdtu.ig.com
statuspage.io
academy-api.ig.com
statuspage.io
statuspage.io
web.ig.com
statuspage.io
statuspage.io
web.ig.com
pages.chartsdtu.ig.com
*.dtu-dealing.mobile.ig.com
net-cpm.marketdatasystems.com
statuspage.io
dgs.ig.com
uat.webshell.tradedtu.ig.com
sts.iggroup.net
academy-api.ig.com
imperva.com
web.ig.com
statuspage.io
igamerica.ig.com
labgroup.ig.com
private-cloud.status.ovhcloud.dev
statuspage.io
secure05.stage.lithium.com
*.ig.com
statuspage.io
statuspage.io
statuspage.io
services.ig.com
investments-api.ig.com
igamerica.ig.com
statuspage.io
staging-branch-hoist.staging.tradedtu.ig.com
access.ig.com
statuspage.io
sepsbe.status.symantec.com
sfbaccessuk1.ig.com
status-media.bucketeer.jp
web-ca.ig.com
localhost.ig.com
affiliates.ig.com
incapsula.com
sepsbe.status.symantec.com
uat.screener.ig.com
academy-api.ig.com
uat.webshell.tradedtu.ig.com
affiliates.ig.com
investments.ig.com
secure05.stage.lithium.com
private-cloud.status.ovhcloud.dev
web.ig.com
Certificate
The complete raw certificate details for trade.ig.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIQDQ7jqeV91LiIE4aw2j620DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDYwNDAwMDAwMFoXDTI0MDcwMjIzNTk1OVowFzEV MBMGA1UEAxMMdHJhZGUuaWcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwh+ZnFAVEvyqIPXplfEM5a/LDOAjoIPhKJwLM7WLFKFc2OVHyGdEjI6v fhBt9nHxrtmKxWaymQTgILp0tR8sYE1drCM0ixjUd0aPNie2ScA4gBP7TzJIWY24 Nmq/qrwTCQ+bY53DSA/DFiKwrMznrZUYMI2uexJZgo2RLWZMXiJfpQt25Q+ppZUc gXGpQw9H8m+vQeZJqWeO2JpclXMSEb+PVQJBJ4pi2VYXEbLKEtS6monR4fDdHYHL EWZbXmrYMKA1PWijY7XQH4LukTzyk5G2CxL/V1TuEl5ffWoqpVSlpvUYhtxpuZms CHwqqHGWW+e4aIaBDp2D91NMSM1/5QIDAQABo4IC9jCCAvIwHwYDVR0jBBgwFoAU wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFFCO8hRE6LGknhUvdFI0dshC 6GJgMCcGA1UdEQQgMB6CDHRyYWRlLmlnLmNvbYIOKi50cmFkZS5pZy5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9y Mm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy LmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgB2 /4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYiEfNvxAAAEAwBHMEUC ID+OHKK6tj5xwhLM9uepyWP8hv0aiRZ2bJJxPnAv2VL5AiEAqDhYjwgLHJ+OiOIO ZEt1oD1HUGvhKKDKOhXzOBukR+8AdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ u7+rOdiEcwAAAYiEfNu8AAAEAwBIMEYCIQD319n9iPVraxnMjA9VHleYxAJZTKey gobzdGhgAyaAUAIhAP61YsgmyQPGhNKWDJIomTTzopT5yq/orc1WObRo4mY5AHYA 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGIhHzbiAAABAMARzBF AiBi6/cAzkgyIxAI07gC2tkzExKn6zFIdgTgdmSvnGQsmAIhAJlo87BYUi19WbcJ s5LhN4pj45MCxyROqXzhWUUROi6vMA0GCSqGSIb3DQEBCwUAA4IBAQBi3kxMql0r K3/PnMJsAru1Ru88xShl2pa3nalx5JcWluDkGUpJqJW1VAtJRJoGJ92YxOOx4zsz DvmHidn7VqXpAa1WYghORgx4J+OMgOtAlqoVUXUZuTWTAFS6FW22fnHiEp1qPKbh kBdLwAEA6Up/WQayJhOdG43pKKRo88m6ytgHWF2AG3UNXCjw8jCUupXUCs81CXXa 7r00PpROndL8zFI1baU8Pl/CNJZFYY37cTtmUqiK1A2mjdm3wO6RDjr24Nevgi0I VpvKuKyl0rdrpjdi2TAtbAmoK8QBlX08XCv+dQisc+wpigDu6yCIMa2I02PxTO/K DM/LGqihi0Ha -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh+ZnFAVEvyqIPXplfEM 5a/LDOAjoIPhKJwLM7WLFKFc2OVHyGdEjI6vfhBt9nHxrtmKxWaymQTgILp0tR8s YE1drCM0ixjUd0aPNie2ScA4gBP7TzJIWY24Nmq/qrwTCQ+bY53DSA/DFiKwrMzn rZUYMI2uexJZgo2RLWZMXiJfpQt25Q+ppZUcgXGpQw9H8m+vQeZJqWeO2JpclXMS Eb+PVQJBJ4pi2VYXEbLKEtS6monR4fDdHYHLEWZbXmrYMKA1PWijY7XQH4LukTzy k5G2CxL/V1TuEl5ffWoqpVSlpvUYhtxpuZmsCHwqqHGWW+e4aIaBDp2D91NMSM1/ 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17357273668787075296648664287228638928 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trade.ig.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24505813724596946213998578285686506080021082895321386372407643201714988661219730534609198037311070727275134311114307977411545880508153150517912593792791206557374554864732859914143654196803846986268046596757270614834266434453412270152485841401183074509607331337838810873354529633133585976284166773848798042422492827935120514301838275639253716357743737492720981353443179946858766858502864561373188313096758216503169547328829327435459037645453352908078026718033711580703928440165870006559147051073458476913635349200956501529527664705785488094120603649710524563846890736431238729700639037601538882626183978681891501735909 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 508ef21444e8b1a49e152f74523476c842e86260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.ig.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade.ig.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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