bucknellcareerconnect.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0c:1e:1e:4e:ff:33:b0:a3:30:92:53:d6:89:9d:bf:92 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=bucknellcareerconnect.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:1e:1e:4e:ff:33:b0:a3:30:92:53:d6:89:9d:bf:92Serial Number (int): 16107119586240987834496210053468372882
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b5:a5:2e:f4:ac:50:3e:82:f4:1c:d6:60:95:81:62:d9:7b:74:25:65
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 6a:90:be:e5:1d:1b:9b:16:23:2c:86:08:a4:c1:5a:f9:56:c3:83:fd
Fingerprint (sha256): 02:ee:5b:d9:87:b9:95:d9:a9:97:a3:d3:81:4f:cf:58:f4:5d:52:52:e2:96:40:21:a5:38:b5:2b:21:96:ba:64
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate bucknellcareerconnect.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bucknellcareerconnect.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bucknellcareerconnect.com
www.bucknellcareerconnect.com
www.bucknellcareerconnect.com
Other certificates including the domain name bucknellcareerconnect.com
(limited to 100 certificates)
graduway.com
bucknellcareerconnect.com
baalumninetwork.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
bobcatconnect.org
ipadeconnect.com
beachwoodconnect.com
bucknellcareerconnect.com
beachwoodconnect.com
baalumninetwork.com
ipadeconnect.com
graduway.com
graduway.com
bestbuddiesconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
boscoalumni.org
graduway.com
beachwoodconnect.com
m.bucknellcareerconnect.com
bergencatholicconnect.com
ipadeconnect.com
m.bucknellcareerconnect.com
beachwoodconnect.com
ipadeconnect.com
bbnsconnect.org
bbnsconnect.org
ipadeconnect.com
bobcatconnect.org
graduway.com
ipadeconnect.com
bobcatconnect.org
graduway.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
graduway.com
graduway.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
bucknellconnect.com
bobcatconnect.org
graduway.com
graduway.com
ipadeconnect.com
bucknellcareerconnect.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
badgersinfinance.net
graduway.com
ipadeconnect.com
graduway.com
baalumninetwork.com
graduway.com
bobcatconnect.org
ipadeconnect.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
backlot.afi.com
bobcatconnect.org
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
boyslatinconnect.com
bobcatconnect.org
ipadeconnect.com
bucknellcareerconnect.com
graduway.com
ipadeconnect.com
bucknellconnect.com
graduway.com
graduway.com
baalumninetwork.com
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
boscoalumni.org
graduway.com
graduway.com
bucknellcareerconnect.com
baalumninetwork.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
bobcatconnect.org
ipadeconnect.com
beachwoodconnect.com
bucknellcareerconnect.com
beachwoodconnect.com
baalumninetwork.com
ipadeconnect.com
graduway.com
graduway.com
bestbuddiesconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
boscoalumni.org
graduway.com
beachwoodconnect.com
m.bucknellcareerconnect.com
bergencatholicconnect.com
ipadeconnect.com
m.bucknellcareerconnect.com
beachwoodconnect.com
ipadeconnect.com
bbnsconnect.org
bbnsconnect.org
ipadeconnect.com
bobcatconnect.org
graduway.com
ipadeconnect.com
bobcatconnect.org
graduway.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
graduway.com
graduway.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
bucknellconnect.com
bobcatconnect.org
graduway.com
graduway.com
ipadeconnect.com
bucknellcareerconnect.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
badgersinfinance.net
graduway.com
ipadeconnect.com
graduway.com
baalumninetwork.com
graduway.com
bobcatconnect.org
ipadeconnect.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
backlot.afi.com
bobcatconnect.org
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
boyslatinconnect.com
bobcatconnect.org
ipadeconnect.com
bucknellcareerconnect.com
graduway.com
ipadeconnect.com
bucknellconnect.com
graduway.com
graduway.com
baalumninetwork.com
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
boscoalumni.org
graduway.com
graduway.com
Certificate
The complete raw certificate details for bucknellcareerconnect.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIQDB4eTv8zsKMwklPWiZ2/kjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDQyODAwMDAwMFoXDTI1MDUyODIzNTk1OVowJDEi MCAGA1UEAxMZYnVja25lbGxjYXJlZXJjb25uZWN0LmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKL9bsKnzg8bjweIFZ2Vbp+PJcij0liDcandPC53 Nc1xtZW9hjWksNOQwDB3uwpn2Zz2iou/G8TkVGX63rl1otgMNnO/dvIk5mJg8FyT XkBrAFNWgbch1fxdk3JuaP1eDVFCAH0lchQphk7/xzUsb8eKLKedwlHJpCcGclhL D7IqAW/DDGxlIWUAJJnok6cz2M2csYkXBqGfrOLcgT9UiYWog4kosJd2EmO+qyl2 CC4gntz7PApkrVHCrc38pn49gz85AUqe6iEGsN41QF04DVnbwUKcpP25ufPuo3Zn BwkOZxmONNeRwHy0Rlxjf28kIsmd3odc8tVfoHeZr62wgGUCAwEAAaOCAxIwggMO MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBS1pS70 rFA+gvQc1mCVgWLZe3QlZTBDBgNVHREEPDA6ghlidWNrbmVsbGNhcmVlcmNvbm5l Y3QuY29tgh13d3cuYnVja25lbGxjYXJlZXJjb25uZWN0LmNvbTATBgNVHSAEDDAK MAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1h em9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH MAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw AoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwG A1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AE51oydcmhDD OFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjyM4Q6sAAAQDAEcwRQIgSkiqjlK0 DP9Ley7hqpDNoZziydcndquh18UP/7rls4oCIQDpXBTuhBNbI+fZvZMOhPicvp6T 7orQ+r9JQNa4woCKwAB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4 AAABjyM4Q6sAAAQDAEcwRQIgOpY/Zx5+rS0SA5st9VC7U8P/xIkobeZRoleYIEzT 6NsCIQDdQy1sM70dYY8LPQUmetxhEoeQk2stXiw+tZ3sR52m0QB3AObSMWNAd4zB EEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjyM4Q74AAAQDAEgwRgIhAIXwBGUt O7w5h+LRGoklKysYdgmZ2pIm0wpoYbKL7E9dAiEA0F26RmwpHcqU69LNmWelSyWl DwGtcfNVbdTSDsRHcKkwDQYJKoZIhvcNAQELBQADggEBAG4k4hH4sdeoBkxLGAdc TK+pLWHySajoH9muZLMzGGINK9Itg5+SFnNNMC3XzQtNeZ6JVGaNXKqN0rMb+20r qnwM6a3U3Rr/rxgA3LhUlnyTtQuY0vC4lbTNsdzAGj3iaWxLYhIqZhQ95AswNpui VV9SwGgYfkV1cj5DhG3YCwWbzI9xmU6aNWNcmO/FPa9Q+w9gG9QGM5AnGdfP4+yb kTpXuarbpRP+z+RHHu5Fe7itLTL71msgfckBgYOT60gywCMfP+XqslG4erKfsh7l nw7FuSuXtxPgIURMrqHDqQCgtUS4yck1kRI1e6IRxDaOnfBhBgkPyYWrCV2Wcvjt q5E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1uwqfODxuPB4gVnZVu n48lyKPSWINxqd08Lnc1zXG1lb2GNaSw05DAMHe7CmfZnPaKi78bxORUZfreuXWi 2Aw2c7928iTmYmDwXJNeQGsAU1aBtyHV/F2Tcm5o/V4NUUIAfSVyFCmGTv/HNSxv x4osp53CUcmkJwZyWEsPsioBb8MMbGUhZQAkmeiTpzPYzZyxiRcGoZ+s4tyBP1SJ haiDiSiwl3YSY76rKXYILiCe3Ps8CmStUcKtzfymfj2DPzkBSp7qIQaw3jVAXTgN WdvBQpyk/bm58+6jdmcHCQ5nGY4015HAfLRGXGN/byQiyZ3eh1zy1V+gd5mvrbCA ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16107119586240987834496210053468372882 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bucknellcareerconnect.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20575577705798289319036186710444372364933164502797157820931802023647118752383597345200136069312537667983464147444783110540875329897839770861269469285092570187306561404510749230864986951316677014608945798231480766361055665234395822037623058637678507501854316734221303960248629032512359022785527754596937591228411265471824433016722495842554465125765777927937199350899257073908073230934814435164886831809233557067337938732303252117399959336608009385767029687361327151288479648256545145430968258567450776895562255055940622690916709475636172438324516553747548576819154683277913803298124645600595769193471332221432737333349 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b5a52ef4ac503e82f41cd660958162d97b742565 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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