*.lts.tago.io
Issued by Amazon
About this certificate
This digital certificate with serial number 06:f0:ea:ae:34:b6:12:1f:00:d4:11:c0:1f:86:e7:12 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.lts.tago.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:f0:ea:ae:34:b6:12:1f:00:d4:11:c0:1f:86:e7:12Serial Number (int): 9226279106618716425529362648161249042
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 4a:ad:69:a2:71:10:8e:1b:d2:ac:bd:6a:b5:62:99:51:ae:88:ee:da
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 8a:2e:5b:04:70:ac:7f:4f:fa:bb:36:24:71:76:78:8b:46:c4:db:13
Fingerprint (sha256): 03:e1:39:4e:88:1e:01:2e:c9:24:90:20:7c:47:b0:f5:e3:fe:ad:e7:44:1d:24:ab:31:99:63:2e:31:f2:d9:b8
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.lts.tago.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.lts.tago.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lts.tago.io
Other certificates including the domain name tago.io
(limited to 100 certificates)
*.elb.internal.tago.io
events.alnafitha.com
*.alpha.tago.io
events.alnafitha.com
cddos.status.radwarecloud.com
*.lts.tago.io
events.qtemfg.com
*.staging.tago.io
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
*.alpha.tago.io
*.lts.tago.io
*.beta.tago.io
events.tago.io
eventos.roancom.es
support.ehcanadian.ca
*.beta.tago.io
events.alnafitha.com
*.middleware.tago.io
events.alnafitha.com
events.getindur.com
*.beta.tago.io
cddos.status.radwarecloud.com
events.oxygen-forensic.com
events.alnafitha.com
events.alnafitha.com
cddos.status.radwarecloud.com
tago.io
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
events.qtemfg.com
events.qtemfg.com
events.alnafitha.com
py.sdk.tago.io
help.swiftcount.com
*.integration.tago.io
api.tago.io
events.dsmglass.co.tz
events.dsmglass.co.tz
events.alnafitha.com
events.alnafitha.com
events.qtemfg.com
events.alnafitha.com
cddos.status.radwarecloud.com
events.dsmglass.co.tz
*.beta.tago.io
events.dsmglass.co.tz
*.elevio.help
*.elevio.help
community.tago.io
cddos.status.radwarecloud.com
events.alnafitha.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
tago.io
cddos.status.radwarecloud.com
events.alnafitha.com
events.getindur.com
tago.io
*.elb.internal.tago.io
events.dsmglass.co.tz
community.tago.io
support.deploypartners.com
*.beta.tago.io
events.alnafitha.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
*.alpha.tago.io
cddos.status.radwarecloud.com
*.develop.tago.io
www.africanmasterclass.com
help.swiftcount.com
events.dsmglass.co.tz
events.qtemfg.com
events.qtemfg.com
events.dsmglass.co.tz
events.alnafitha.com
events.alnafitha.com
api.ai.tago.io
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
tago.io
events.qtemfg.com
*.beta.tago.io
*.run.alpha.tago.io
support.getforsite.com
*.mobile.tago.io
*.internal.tago.io
eventos.roancom.es
events.dsmglass.co.tz
tago.io
cddos.status.radwarecloud.com
events.dsmglass.co.tz
cddos.status.radwarecloud.com
py.sdk.tago.io
events.qtemfg.com
events.alnafitha.com
*.alpha.tago.io
events.alnafitha.com
cddos.status.radwarecloud.com
*.lts.tago.io
events.qtemfg.com
*.staging.tago.io
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
*.alpha.tago.io
*.lts.tago.io
*.beta.tago.io
events.tago.io
eventos.roancom.es
support.ehcanadian.ca
*.beta.tago.io
events.alnafitha.com
*.middleware.tago.io
events.alnafitha.com
events.getindur.com
*.beta.tago.io
cddos.status.radwarecloud.com
events.oxygen-forensic.com
events.alnafitha.com
events.alnafitha.com
cddos.status.radwarecloud.com
tago.io
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
events.qtemfg.com
events.qtemfg.com
events.alnafitha.com
py.sdk.tago.io
help.swiftcount.com
*.integration.tago.io
api.tago.io
events.dsmglass.co.tz
events.dsmglass.co.tz
events.alnafitha.com
events.alnafitha.com
events.qtemfg.com
events.alnafitha.com
cddos.status.radwarecloud.com
events.dsmglass.co.tz
*.beta.tago.io
events.dsmglass.co.tz
*.elevio.help
*.elevio.help
community.tago.io
cddos.status.radwarecloud.com
events.alnafitha.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
tago.io
cddos.status.radwarecloud.com
events.alnafitha.com
events.getindur.com
tago.io
*.elb.internal.tago.io
events.dsmglass.co.tz
community.tago.io
support.deploypartners.com
*.beta.tago.io
events.alnafitha.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
*.alpha.tago.io
cddos.status.radwarecloud.com
*.develop.tago.io
www.africanmasterclass.com
help.swiftcount.com
events.dsmglass.co.tz
events.qtemfg.com
events.qtemfg.com
events.dsmglass.co.tz
events.alnafitha.com
events.alnafitha.com
api.ai.tago.io
cddos.status.radwarecloud.com
cddos.status.radwarecloud.com
tago.io
events.qtemfg.com
*.beta.tago.io
*.run.alpha.tago.io
support.getforsite.com
*.mobile.tago.io
*.internal.tago.io
eventos.roancom.es
events.dsmglass.co.tz
tago.io
cddos.status.radwarecloud.com
events.dsmglass.co.tz
cddos.status.radwarecloud.com
py.sdk.tago.io
events.qtemfg.com
Certificate
The complete raw certificate details for *.lts.tago.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcDCCA1igAwIBAgIQBvDqrjS2Eh8A1BHAH4bnEjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMDUwMDAwMDBaFw0yMTA0MDUx MjAwMDBaMBgxFjAUBgNVBAMMDSoubHRzLnRhZ28uaW8wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCvPKmsgcyLLdiM0cUQ3+5wO3Y+LDpo204QXTp4FifH GXg6iBCLaiqU1JAH/hshXPoyyw/qfMl03TzN0XBBSLdu5x38SgoWeCPLlXZutDiA xhlnJls2MDuRZO86TbXnrTAABlkSindsPC5hdvYmXf/RCz31D7VfJ5r5AxIKUScM gGt7ZkcNuVWr789tgo+yrvwuXDRJyawNjnXUkCI1Rh4/iSGQ6YVKSRNyPBFlOfq1 yq5wlgnqbP3FlRUIJkwsfqWAEq3Ks6o6YbCbrBNZWe69XPt4PlrBY4MG55rtocTI I8vm4Dcyezqe3bh1ZZndiL2kKJQ3X9HZksOCv3p3YDmVAgMBAAGjggGGMIIBgjAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUSq1ponEQ jhvSrL1qtWKZUa6I7towGAYDVR0RBBEwD4INKi5sdHMudGFnby5pbzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQBMM4Rn8+tLQEE6vyoJvPzgD1qBi7gzWm6PQfnJ 6QWWW2Moxgg9Ac0BXvN82wKKOfZfNYTxecDKpnTpJa0Hz2xmto2o6evwWpSwxLwk C7CrmeJG3n6kbI+xE+jjZjhIjQjCEePyzreLj1aymDpgbDxgCb870S95epFBXBwl Io25WDtuCYrJSNkhu4L6H83P5DtCYiCReH2LOupBAy2WF0LP9y02rvFAj4WiS0nW eHxEKj/J4BF3DmzfwwOYKSj3qivBj8OzrHtzMEDaP9pBTkanFSAgYxF1s8ACjUGF Ap1vbXxgVu1XCLLPSybwGUsKo/0pQSRBq16HlJsg7Tb21WuV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzyprIHMiy3YjNHFEN/u cDt2Piw6aNtOEF06eBYnxxl4OogQi2oqlNSQB/4bIVz6MssP6nzJdN08zdFwQUi3 bucd/EoKFngjy5V2brQ4gMYZZyZbNjA7kWTvOk21560wAAZZEop3bDwuYXb2Jl3/ 0Qs99Q+1Xyea+QMSClEnDIBre2ZHDblVq+/PbYKPsq78Llw0ScmsDY511JAiNUYe P4khkOmFSkkTcjwRZTn6tcqucJYJ6mz9xZUVCCZMLH6lgBKtyrOqOmGwm6wTWVnu vVz7eD5awWODBuea7aHEyCPL5uA3Mns6nt24dWWZ3Yi9pCiUN1/R2ZLDgr96d2A5 lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9226279106618716425529362648161249042 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lts.tago.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22121617304976451106811064755806606795193301044342346631758447011373002156924542001324523796099118847803634694068791435274359135053403996242277962419636232925091982756513902198427531159098717304847015523325963315556537858648541576915060204001610820402048995016868532012389915666209181436753444620704816772856014399847814258337599522058192352099617076857474965337963099100487407212380155549488233597114630188297587096687223907613264021506195060410192015117700061722767377704934785451942990207698508813917155346261162873415188520455672791533479695416676122582605239947566009484486330056735211517650240328130756186487189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4aad69a271108e1bd2acbd6ab5629951ae88eeda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lts.tago.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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