checkout.zalora.com.ph
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0e:ce:4d:90:ba:b7:ef:97:18:a0:06:bd:79:28:87:8a was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=checkout.zalora.com.ph
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:ce:4d:90:ba:b7:ef:97:18:a0:06:bd:79:28:87:8aSerial Number (int): 19680378306028456629399685057586169738
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 41:a9:b9:dc:bb:7e:72:8d:1e:a6:1c:28:1f:8a:e5:3d:ee:77:a1:44
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 3c:d3:21:cf:4a:fd:92:c9:4c:d6:c9:52:f3:21:5e:4a:69:ed:bb:67
Fingerprint (sha256): 02:5a:7e:8b:f5:ec:04:5b:8a:0c:3b:62:be:d7:70:72:e6:66:7a:3c:55:e6:8f:e8:4c:4f:bf:24:88:d7:8e:42
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate checkout.zalora.com.ph
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for checkout.zalora.com.ph
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
checkout.zalora.com.ph
Other certificates including the domain name zalora.com.ph
(limited to 100 certificates)
thread.zalora.com.ph
www.zalora.com.ph
api.zalora.com.ph
*.zalora.com
checkout.zalora.com.ph
checkout.zalora.com.ph
*.zalora.com.ph
zcoop.zalora.com.my
demo.textile.teamin.in
link.zalora.com.ph
support.zalora.com.ph
tisanz.com
support.zalora.com.ph
static-origin.zalora.com.ph
www.zalora.com
*.zalora.com
checkout.zalora.com.ph
support.zalora.com.ph
plumbagocreekfarm.com
support.zalora.com.ph
support.zalora.com.ph
checkout.zalora.com.ph
*.zalora.com
thread.zalora.com.ph
support.zalora.com.ph
asad.tk
support.zalora.com.ph
zalora.com.ph
api.zalora.com.ph
plumbagocreekfarm.com
support.zalora.com.ph
zcoop.zalora.com.my
api-checkout.zalora.sg
*.zalora.com
www.zalora.com.ph
www.zalora.com
*.zalora.com.ph
support.zalora.com.ph
ablink.em.zalora.co.id
www.zalora.com
zcoop.zalora.com.my
support.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
stockholmshem.demo.movello.se
sila.live
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
support.zalora.com.ph
support.zalora.com.ph
*.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
www.zalora.com
support.zalora.com.ph
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
support.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
www.zalora.com
www.zalora.com.ph
*.zalora.com
*.zalora.com
zalora.com.ph
thread.zalora.com.ph
*.zalora.com
support.zalora.com.ph
zcoop.zalora.com.my
thecollectivepool.org
zcoop.zalora.com.my
app-link.oncopower.org
api-checkout.zalora.sg
support.zalora.com.ph
checkout.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
tawitech.ph
demo.textile.teamin.in
www.zalora.com
*.zalora.com.ph
zcoop.zalora.com.my
support.zalora.com.ph
static-checkout-ph.zacdn.com
zalora.com.ph
support.zalora.com.ph
zcoop.zalora.com.my
www.zalora.com
oms.zalora.com.ph
thread.zalora.com.ph
ablink.em.zalora.co.id
stockholmshem.demo.movello.se
zcoop.zalora.com.my
thread.zalora.com.ph
www.zalora.com.ph
www.zalora.com.ph
api.zalora.com.ph
*.zalora.com
checkout.zalora.com.ph
checkout.zalora.com.ph
*.zalora.com.ph
zcoop.zalora.com.my
demo.textile.teamin.in
link.zalora.com.ph
support.zalora.com.ph
tisanz.com
support.zalora.com.ph
static-origin.zalora.com.ph
www.zalora.com
*.zalora.com
checkout.zalora.com.ph
support.zalora.com.ph
plumbagocreekfarm.com
support.zalora.com.ph
support.zalora.com.ph
checkout.zalora.com.ph
*.zalora.com
thread.zalora.com.ph
support.zalora.com.ph
asad.tk
support.zalora.com.ph
zalora.com.ph
api.zalora.com.ph
plumbagocreekfarm.com
support.zalora.com.ph
zcoop.zalora.com.my
api-checkout.zalora.sg
*.zalora.com
www.zalora.com.ph
www.zalora.com
*.zalora.com.ph
support.zalora.com.ph
ablink.em.zalora.co.id
www.zalora.com
zcoop.zalora.com.my
support.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
stockholmshem.demo.movello.se
sila.live
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
support.zalora.com.ph
support.zalora.com.ph
*.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
www.zalora.com
support.zalora.com.ph
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
support.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
www.zalora.com
www.zalora.com.ph
*.zalora.com
*.zalora.com
zalora.com.ph
thread.zalora.com.ph
*.zalora.com
support.zalora.com.ph
zcoop.zalora.com.my
thecollectivepool.org
zcoop.zalora.com.my
app-link.oncopower.org
api-checkout.zalora.sg
support.zalora.com.ph
checkout.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
support.zalora.com.ph
tawitech.ph
demo.textile.teamin.in
www.zalora.com
*.zalora.com.ph
zcoop.zalora.com.my
support.zalora.com.ph
static-checkout-ph.zacdn.com
zalora.com.ph
support.zalora.com.ph
zcoop.zalora.com.my
www.zalora.com
oms.zalora.com.ph
thread.zalora.com.ph
ablink.em.zalora.co.id
stockholmshem.demo.movello.se
zcoop.zalora.com.my
thread.zalora.com.ph
www.zalora.com.ph
Certificate
The complete raw certificate details for checkout.zalora.com.ph in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIQDs5NkLq375cYoAa9eSiHijANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIyMDAwMDAwMFoXDTI0MDMyMDIzNTk1OVowITEf MB0GA1UEAxMWY2hlY2tvdXQuemFsb3JhLmNvbS5waDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAJaqMeiwfEB17DmFr0z+tzC3sP7yGwAfKF9rlQAJ4Mj/ yc3A2jO+DYiTH5T35zocTzxOTHx6EIFoERkc9PXerBoervvanBK5dDHBuFHWrS1O NzLbrXCRpmYEB2WeLPep06uaUv+BHKTmI37q64IJfTWq0CdWDTk/GQdrsTTN51sj MhjEb6tuBva7lFDcy1htL8CBXBaCKCG0z+lIWMWucImDlhNjE0Q4Gl03vB8bn09y mSuLY8tAlUFax+kVLWjzHv0SoYVea/zAABe/99aNMM5lE8SNIzVeMl0QiRVb11Eb 2uTu0fPzy2dbvYbTJvRZnhbQdhOVQZpM7k1WbcfFBJsCAwEAAaOCAu4wggLqMB8G A1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBRBqbncu35y jR6mHCgfiuU97nehRDAhBgNVHREEGjAYghZjaGVja291dC56YWxvcmEuY29tLnBo MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5j b20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29t MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFn AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGbjjw4AAABAMA RzBFAiEApnOnS/P2Ia/uObtc0XtxgaAyg2p/quHkNcyqQoX87oACIAmm/UTb4jzX BRnSuIWuVzBjylB/svU4EJvb6LbZV3k0AHYAc9meiRtMlnigIH1HneayxhzQUV5x GSqMa4AQesF3crUAAAGGbjjxCQAABAMARzBFAiALoL2HASusvNaLFN5+laU4muMa oV/rNh9zu7E7c1r9KQIhALmb46mxP3WITp9HLdOhfkx6/+txkxaAlSsiul04aYrh AHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGGbjjwzAAABAMA RjBEAiAoQATM+NWuSYtr0qE11Iv9nw3l55flRM2eCYFPEjkrswIgKxUbZ404842G Fc5FQaIi8dUPE+8wAtAkO3PeApm/JCkwDQYJKoZIhvcNAQELBQADggEBAHYj6Rfj CG6DnLQYJcSxAwMoo+FFyYnlmvr9AQKlc2EefN7sy6HVSFmyHVcW8CLHBd1z5uwx a8msCkuLcCErgxnw+QtDmKRi4NqRqR0IYDDtxRPtBSdxmI2xnUeBLBN8eRW225DB QH4j+jClwLoPee146xuOiW4KYdAPmHmsiXxxl79GW3R+Vmx4prrXy6ZD3cVe8mn+ IXYBVObb4eSuBOHOn5ne/00x8qW26Kz14jtewKBrd31ErYRX8vsGcWX0nK40SXgV Hind+b8dn51DN4FwamYVaLkuVs9Mcz34+y5fe+1Jg22uMNvaG6aHv83s8ryfyeda 8F7YHA+7OkOKNiQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqox6LB8QHXsOYWvTP63 MLew/vIbAB8oX2uVAAngyP/JzcDaM74NiJMflPfnOhxPPE5MfHoQgWgRGRz09d6s Gh6u+9qcErl0McG4UdatLU43MtutcJGmZgQHZZ4s96nTq5pS/4EcpOYjfurrggl9 NarQJ1YNOT8ZB2uxNM3nWyMyGMRvq24G9ruUUNzLWG0vwIFcFoIoIbTP6UhYxa5w iYOWE2MTRDgaXTe8HxufT3KZK4tjy0CVQVrH6RUtaPMe/RKhhV5r/MAAF7/31o0w zmUTxI0jNV4yXRCJFVvXURva5O7R8/PLZ1u9htMm9FmeFtB2E5VBmkzuTVZtx8UE mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19680378306028456629399685057586169738 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkout.zalora.com.ph' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19019672006085610477771523365759350702088596861705558249394642942968011351344283604379413387631318157779352780762926179104043484533141345243828189597092163528198736880271115547153340294906130680031344437288972488689781244065387905737080302949395136674960925022867749354855907766358214597777226183505521591910466602094634342663488280584188600582496301885664076533522176983713814163906424691106336381159558619554249788358642736281636720828973702954508091951309495728458079540671997925452082931683059269406818087552676460090367182173202236654734873026833520540708258563782715156837386117468296406340700555260707022898331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 41a9b9dcbb7e728d1ea61c281f8ae53dee77a144 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.zalora.com.ph' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001866e38f0e00000040300473045022100a673a74bf3f621afee39bb5cd17b7181a032836a7faae1e435ccaa4285fcee80022009a6fd44dbe23cd70519d2b885ae573063ca507fb2f538109bdbe8b6d957793400760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001866e38f109000004030047304502200ba0bd87012bacbcd68b14de7e95a5389ae31aa15feb361f73bbb13b735afd29022100b99be3a9b13f75884e9f472dd3a17e4c7affeb71931680952b22ba5d38698ae100750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001866e38f0cc00000403004630440220284004ccf8d5ae498b6bd2a135d48bfd9f0de5e797e544cd9e09814f12392bb302202b151b678d38f38d8615ce4541a222f1d50f13ef3002d0243b73de0299bf2429 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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