*.ingress.ops.amgmktums1.aws.nasdaq.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 06:0a:3c:a5:67:05:de:5e:fd:ba:1e:05:01:7e:39:32 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ingress.ops.amgmktums1.aws.nasdaq.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:0a:3c:a5:67:05:de:5e:fd:ba:1e:05:01:7e:39:32Serial Number (int): 8028520992401928225882000953377175858
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: b2:76:4e:69:98:41:55:2b:1a:df:6a:ee:23:90:54:44:d0:72:33:81
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 1b:f6:0e:b8:9f:af:9f:c8:85:5a:b5:8e:33:35:46:26:91:aa:22:2d
Fingerprint (sha256): 03:72:86:69:c4:a0:c2:cc:48:97:8a:44:77:2d:67:b7:b3:c0:c2:65:83:31:68:dc:db:2a:22:07:1c:b2:a9:16
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.ingress.ops.amgmktums1.aws.nasdaq.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ingress.ops.amgmktums1.aws.nasdaq.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ingress.ops.amgmktums1.aws.nasdaq.com
ingress.ops.amgmktums1.aws.nasdaq.com
ingress.ops.amgmktums1.aws.nasdaq.com
Other certificates including the domain name nasdaq.com
(limited to 100 certificates)
midev.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
platform-status.buckzy.net
access.secureqa.nasdaq.com
globenewswire.com
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
teleport.demo.ume.nff.aws.exchsys.nasdaq.com
incapsula.com
incapsula.com
incapsula.com
listingcenter.nasdaq.com
incapsula.com
irintelligence.nasdaqomx.com
imperva.com
incapsula.com
imperva.com
teleport.eks.uat.ums-atris.aws.nasdaq.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl.nasdaq.com
nfn.analytics.nasdaq.com
imperva.com
ssl003.insnw.net
www.nasdaq.com
test.dev.mdic.aws.nasdaq.com
qc.globenewswire.com
newsclient.news.eu.nasdaq.com
teleport.iri.uat.irinsight.aws.nasdaq.com
*.rpxnow.com
imperva.com
platform-status.buckzy.net
incapsula.com
incapsula.com
incapsula.com
imperva.com
gjma.nasdaq.com
docs.data.nasdaq.com
imperva.com
incapsula.com
imperva.com
sp.nasdaq.com
incapsula.com
*.ingress.ops.amgmktums1.aws.nasdaq.com
business.nasdaq.com
estonia-evoting.nasdaq.com
incapsula.com
mvrcheck.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
apidownload.dev.mpp2.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
imperva.com
ssl003.insnw.net
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
us18usfpoccmq02.tss.nasdaq.com
leapfrog-ssl-38.gcs-web.com
boardvantage.nasdaq.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
authorization.mojoportal.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
nasdaq.com
teleport.eks.pro.ums-cix.aws.nasdaq.com
mvrcheck.io
www.nasdaq.com
teleport.qa.inet.aws.exchsys.nasdaq.com
platform-status.buckzy.net
access1.eu.secureweb.nasdaq.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
boardvantage.nasdaq.com
saml.portal.na.nasdaq.com
ndeuat.nasdaq.com
incapsula.com
platform-status.buckzy.net
incapsula.com
*.poc.nffume.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
platform-status.buckzy.net
access.secureqa.nasdaq.com
globenewswire.com
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
teleport.demo.ume.nff.aws.exchsys.nasdaq.com
incapsula.com
incapsula.com
incapsula.com
listingcenter.nasdaq.com
incapsula.com
irintelligence.nasdaqomx.com
imperva.com
incapsula.com
imperva.com
teleport.eks.uat.ums-atris.aws.nasdaq.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl.nasdaq.com
nfn.analytics.nasdaq.com
imperva.com
ssl003.insnw.net
www.nasdaq.com
test.dev.mdic.aws.nasdaq.com
qc.globenewswire.com
newsclient.news.eu.nasdaq.com
teleport.iri.uat.irinsight.aws.nasdaq.com
*.rpxnow.com
imperva.com
platform-status.buckzy.net
incapsula.com
incapsula.com
incapsula.com
imperva.com
gjma.nasdaq.com
docs.data.nasdaq.com
imperva.com
incapsula.com
imperva.com
sp.nasdaq.com
incapsula.com
*.ingress.ops.amgmktums1.aws.nasdaq.com
business.nasdaq.com
estonia-evoting.nasdaq.com
incapsula.com
mvrcheck.io
incapsula.com
incapsula.com
incapsula.com
incapsula.com
apidownload.dev.mpp2.aws.nasdaq.com
leapfrog-ssl.nasdaq.com
incapsula.com
imperva.com
ssl003.insnw.net
ssl003.insnw.net
incapsula.com
incapsula.com
incapsula.com
leapfrog-ssl.nasdaq.com
incapsula.com
incapsula.com
us18usfpoccmq02.tss.nasdaq.com
leapfrog-ssl-38.gcs-web.com
boardvantage.nasdaq.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
authorization.mojoportal.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
nasdaq.com
teleport.eks.pro.ums-cix.aws.nasdaq.com
mvrcheck.io
www.nasdaq.com
teleport.qa.inet.aws.exchsys.nasdaq.com
platform-status.buckzy.net
access1.eu.secureweb.nasdaq.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
boardvantage.nasdaq.com
saml.portal.na.nasdaq.com
ndeuat.nasdaq.com
incapsula.com
platform-status.buckzy.net
incapsula.com
*.poc.nffume.aws.nasdaq.com
Certificate
The complete raw certificate details for *.ingress.ops.amgmktums1.aws.nasdaq.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtDCCA5ygAwIBAgIQBgo8pWcF3l79uh4FAX45MjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIyMTIwOTAwMDAwMFoXDTI0MDEwNzIzNTk1OVowMjEw MC4GA1UEAwwnKi5pbmdyZXNzLm9wcy5hbWdta3R1bXMxLmF3cy5uYXNkYXEuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivnbJKdXtDBRhLGL4JP8 atz4G49R2xUBzxeRYJ2fAzQH0Hmm9xBGwdlCIwb5h4C/8LD8cw6bRMqm8n+WKpO2 9vDTXilzfKmMFQEjFb26hGppYYjVz6vtloURk2+nAaHlVWtcyQpsmRnzpyt2PM59 OkUjLgcF4K41zvtujIF6OQV0LlrEm6D96rbdgeiUqOUbbhVzem8kHOpdcPgj+jfI oKleYBzyyRNr33bAesi8H7mCAMa/qwogw29lVxqhgFdE4FCTUaLi73IX2zTCQr0q /czClgIBWXx9eBCrap2Zb98UzfLzVhP7OCH5WPuWZ7l7KI2GCYQr87AxXr2nPw2h awIDAQABo4IBujCCAbYwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIw HQYDVR0OBBYEFLJ2TmmYQVUrGt9q7iOQVETQcjOBMFkGA1UdEQRSMFCCJyouaW5n cmVzcy5vcHMuYW1nbWt0dW1zMS5hd3MubmFzZGFxLmNvbYIlaW5ncmVzcy5vcHMu YW1nbWt0dW1zMS5hd3MubmFzZGFxLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAK MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAF8mz+0fg6SL 7RKokXJZ+fqEG4yJ6FCp98/s0voH3NFIkArD2fCf8SPdrC2h+2mL2gTk6z7rOOhv Hqrv+w4MoCbhSJr18sxi/F6XDrgO8qIuNM6DjjttswaJj8Q16uVldOTVM8J9zMKQ vUMz3zjBD6F/kR1R9XaMXnsj19esC5dUAURRGKhv9wjqboW1LX7+QQCbWn6miKA7 4rYYa/OrRDCgO4tzaurwUCktP+v5s+JlCsvUgnAfkMNsQrHd+wt153NOorXq4rl5 P/N5Z8vYiL1i8+n9TScs3jKHTR9HurYSG89VQSKZOAVOuEaQg0dl9Cns8KjlcyYV jgRmXpL7RIM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivnbJKdXtDBRhLGL4JP8 atz4G49R2xUBzxeRYJ2fAzQH0Hmm9xBGwdlCIwb5h4C/8LD8cw6bRMqm8n+WKpO2 9vDTXilzfKmMFQEjFb26hGppYYjVz6vtloURk2+nAaHlVWtcyQpsmRnzpyt2PM59 OkUjLgcF4K41zvtujIF6OQV0LlrEm6D96rbdgeiUqOUbbhVzem8kHOpdcPgj+jfI oKleYBzyyRNr33bAesi8H7mCAMa/qwogw29lVxqhgFdE4FCTUaLi73IX2zTCQr0q /czClgIBWXx9eBCrap2Zb98UzfLzVhP7OCH5WPuWZ7l7KI2GCYQr87AxXr2nPw2h awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8028520992401928225882000953377175858 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ingress.ops.amgmktums1.aws.nasdaq.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17544094684790397946716380370389968930017791739106067139673462378426446722081745663781376329974145663644999409791209464625657542198320137150068803826931581203141765634545611809544365731597040971325922599274936266974643342615866016750682172072832178747062366242041991532803107361503457303300970154275898294331279910668876937074822335396234309424341762507374376449168853773386238854176461173716333233388058524304444256543920866945499453834925060434493169910075609330608723616340566971582401555802492576465419856433496982078430342300475140518243552047271770342145591255462901733653678691276122733561395832617272850882923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2764e699841552b1adf6aee23905444d0723381 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingress.ops.amgmktums1.aws.nasdaq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingress.ops.amgmktums1.aws.nasdaq.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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