limerock.lightbend.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:3c:f8:d2:b8:2a:99:cd:74:2b:4e:4f:d9:b3:02:fb was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=limerock.lightbend.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:3c:f8:d2:b8:2a:99:cd:74:2b:4e:4f:d9:b3:02:fbSerial Number (int): 8291952518714161508487297378116895483
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a6:04:aa:5b:6f:a1:d6:e5:c0:0b:e8:47:43:01:21:0f:62:2e:76:b7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 73:70:a0:47:e1:08:a4:6e:8d:e5:5c:83:36:47:84:5f:b2:c1:92:35
Fingerprint (sha256): 02:48:eb:d3:a6:82:d7:99:b2:62:a0:cf:1f:42:75:84:54:b2:a9:a6:35:d3:f1:e7:13:39:61:71:90:9b:41:09
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate limerock.lightbend.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for limerock.lightbend.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
limerock.lightbend.com
*.limerock.lightbend.com
*.limerock.lightbend.com
Other certificates including the domain name lightbend.com
(limited to 100 certificates)
limerock.lightbend.com
slick.lightbend.com
ibm.lightbend.com
developer.lightbend.com
unb.lightbend.com
example.lightbend.com
lightshift.lightbend.com
os-secure.lightbend.com
ibm.lightbend.com
psopenshift.lightbend.com
downloads.lightbend.com
ci.lightbend.com
centralpark.lightbend.com
academy.lightbend.com
ibm.lightbend.com
sales.lightbend.com
slick.lightbend.com
shop.lightbend.com
purplewest.lightbend.com
repo.lightbend.com
repo.lightbend.com
purplewest.lightbend.com
ibm.lightbend.com
support.dexteroustechnology.com
*.pipeshapers.lightbend.com
gsa2.lightbend.com
ibm.lightbend.com
downloads.lightbend.com
limerock.lightbend.com
ibm.lightbend.com
zandvoort.lightbend.com
limerock.lightbend.com
gsa2.lightbend.com
downloads.lightbend.com
shop.lightbend.com
slick.lightbend.com
limerock.lightbend.com
discuss.lightbend.com
fiorano.lightbend.com
developer.lightbend.com
www.lightbend.com
info.lightbend.com
www.lightbend.com
support.lightbend.com
centralpark.lightbend.com
academy.lightbend.com
academy.lightbend.com
www.lightbend.com
discuss.lightbend.com
discuss.lightbend.com
ci.lightbend.com
gsa2.lightbend.com
support.lightbend.com
centralpark.lightbend.com
downloads.lightbend.com
limerock.lightbend.com
shop.lightbend.com
lightshift.lightbend.com
purplehat.lightbend.com
academy.lightbend.com
repo.lightbend.com
downloads.lightbend.com
www-content.lightbend.com
support.lightbend.com
sales.lightbend.com
ibm.lightbend.com
shop.lightbend.com
ibm.lightbend.com
lightshift.lightbend.com
slick.lightbend.com
pipeshapers.lightbend.com
discuss.lightbend.com
sales.lightbend.com
centralpark2.lightbend.com
slick.lightbend.com
limerock.lightbend.com
lightshift.lightbend.com
limerock.lightbend.com
shop.lightbend.com
shop.lightbend.com
info.lightbend.com
shop.lightbend.com
info.lightbend.com
ibm.lightbend.com
slick.lightbend.com
discuss.lightbend.com
info.lightbend.com
fiorano.lightbend.com
os-secure.lightbend.com
ibm.lightbend.com
fdp-phab.lightbend.com
academy.lightbend.com
discuss.lightbend.com
support.lightbend.com
lightshift.lightbend.com
shop.lightbend.com
purplehat.lightbend.com
sales.lightbend.com
support.enlightenedbusiness.com.au
repo.typesafe.com
slick.lightbend.com
ibm.lightbend.com
developer.lightbend.com
unb.lightbend.com
example.lightbend.com
lightshift.lightbend.com
os-secure.lightbend.com
ibm.lightbend.com
psopenshift.lightbend.com
downloads.lightbend.com
ci.lightbend.com
centralpark.lightbend.com
academy.lightbend.com
ibm.lightbend.com
sales.lightbend.com
slick.lightbend.com
shop.lightbend.com
purplewest.lightbend.com
repo.lightbend.com
repo.lightbend.com
purplewest.lightbend.com
ibm.lightbend.com
support.dexteroustechnology.com
*.pipeshapers.lightbend.com
gsa2.lightbend.com
ibm.lightbend.com
downloads.lightbend.com
limerock.lightbend.com
ibm.lightbend.com
zandvoort.lightbend.com
limerock.lightbend.com
gsa2.lightbend.com
downloads.lightbend.com
shop.lightbend.com
slick.lightbend.com
limerock.lightbend.com
discuss.lightbend.com
fiorano.lightbend.com
developer.lightbend.com
www.lightbend.com
info.lightbend.com
www.lightbend.com
support.lightbend.com
centralpark.lightbend.com
academy.lightbend.com
academy.lightbend.com
www.lightbend.com
discuss.lightbend.com
discuss.lightbend.com
ci.lightbend.com
gsa2.lightbend.com
support.lightbend.com
centralpark.lightbend.com
downloads.lightbend.com
limerock.lightbend.com
shop.lightbend.com
lightshift.lightbend.com
purplehat.lightbend.com
academy.lightbend.com
repo.lightbend.com
downloads.lightbend.com
www-content.lightbend.com
support.lightbend.com
sales.lightbend.com
ibm.lightbend.com
shop.lightbend.com
ibm.lightbend.com
lightshift.lightbend.com
slick.lightbend.com
pipeshapers.lightbend.com
discuss.lightbend.com
sales.lightbend.com
centralpark2.lightbend.com
slick.lightbend.com
limerock.lightbend.com
lightshift.lightbend.com
limerock.lightbend.com
shop.lightbend.com
shop.lightbend.com
info.lightbend.com
shop.lightbend.com
info.lightbend.com
ibm.lightbend.com
slick.lightbend.com
discuss.lightbend.com
info.lightbend.com
fiorano.lightbend.com
os-secure.lightbend.com
ibm.lightbend.com
fdp-phab.lightbend.com
academy.lightbend.com
discuss.lightbend.com
support.lightbend.com
lightshift.lightbend.com
shop.lightbend.com
purplehat.lightbend.com
sales.lightbend.com
support.enlightenedbusiness.com.au
repo.typesafe.com
Certificate
The complete raw certificate details for limerock.lightbend.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnDCCA4SgAwIBAgIQBjz40rgqmc10K05P2bMC+zANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMDUwMDAwMDBaFw0yMDA0MDUx MjAwMDBaMCExHzAdBgNVBAMTFmxpbWVyb2NrLmxpZ2h0YmVuZC5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSLr6nVogUSKkiKe5+KRiv1iyoIYzp QSUviB0hRPdnWcGR52fvNFxyVZrDWre5wUNWY1O7LcT7WhNL6oauw6Cop8y6nUES C3YCH7zGCnhOHFUTBVYQCTB/6oJKhIR2BSlRaf9XJpHAt6OU6bXYpKt9qTLYcZgG qm6KyQYGz70ejHWkV5qjBZumgAk4RwxbxFTinBjreQbJ0cQ2LEuMVi1zNMDjVFsT 4g40Mk+G68jbrZ/Rm4CS5+G0qPsTWavGM15k8H7Hd0aqTNP1vS7nfpOxUDa/NA9u 8VFE7PU/ZxBogsoJCPR5+QrXbXiDaN5CDEp7+FQ8HdlQt7TRRhzFCtMHAgMBAAGj ggGpMIIBpTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUpgSqW2+h1uXAC+hHQwEhD2IudrcwOwYDVR0RBDQwMoIWbGltZXJvY2subGln aHRiZW5kLmNvbYIYKi5saW1lcm9jay5saWdodGJlbmQuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw oC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3Js MCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20v c2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBABbvdx6gWIdIPD3TDezd7t0KEElYf4aVqzbQzacS227Y vJCm8ut8OO122wo9NSE6SXVZry6Pz3EL1kzGPZ2CwmllUfXQzmCmPZDmfOtzzgLn kORT6ez0h/dwlFSgzZOfEGSWICQp9lGPnW08najsYXD86j6D/Cl62y8t095FBins K7XRHeGFoBGOLgoamgJudZzE5KqqUo9j0wXbWWXRG/QjHBbLeoKvfkEvI2AT7ne8 Q0Licf5XC3BpPneM55Y30j2iz3IJMNVwap5tHFr8HU3OuzfjdsVMwvhrETpWzfYu c5dEJMCWq9j46ssPkxA2YSnjg360JUdUMfHyRmXC+zQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki6+p1aIFEipIinufikY r9YsqCGM6UElL4gdIUT3Z1nBkedn7zRcclWaw1q3ucFDVmNTuy3E+1oTS+qGrsOg qKfMup1BEgt2Ah+8xgp4ThxVEwVWEAkwf+qCSoSEdgUpUWn/VyaRwLejlOm12KSr faky2HGYBqpuiskGBs+9Hox1pFeaowWbpoAJOEcMW8RU4pwY63kGydHENixLjFYt czTA41RbE+IONDJPhuvI262f0ZuAkufhtKj7E1mrxjNeZPB+x3dGqkzT9b0u536T sVA2vzQPbvFRROz1P2cQaILKCQj0efkK1214g2jeQgxKe/hUPB3ZULe00UYcxQrT BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8291952518714161508487297378116895483 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'limerock.lightbend.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18453843215881259003457888620287335395063513738093660646423349487678981980627509148635845476845012757318098681230278589626408423249413941449133920359961642841637123626017028037164839862985454375428451045143206870068341145006097212102332789443002924513183543544163801662704549448741715013195899211481534316654341174234032056999082263370414740715061338730681812546143866852119167249680291269952631128524674564356763953404107483424377772322151603364302028867150977742059598036339947094586159342137326942334422745103480338543023995974282659436579409508391624466850180101667867144172129642700733336663260959624339389076231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a604aa5b6fa1d6e5c00be8474301210f622e76b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limerock.lightbend.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limerock.lightbend.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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