*.opx.janrain.ws

- Akamai Technologies, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:73:a2:a5:3b:2a:0a:d9:2f:1d:24:98:a5:46:e1:41 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Akamai Technologies, Inc.

Organization: Akamai Technologies, Inc.
State / Province: Oregon
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:73:a2:a5:3b:2a:0a:d9:2f:1d:24:98:a5:46:e1:41
Serial Number (int): 16551148929463543770237450294342902081
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 17:55:e5:59:b8:9d:84:28:5f:ac:69:8b:9a:71:cc:02:54:72:d5:62
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): c9:08:1c:eb:ff:12:b2:a8:ce:84:be:6d:0d:a9:98:3a:3e:c6:43:83
Fingerprint (sha256): 04:93:b4:3a:a8:11:d4:9b:bc:68:37:4c:7b:14:08:d2:ca:b4:77:16:b8:90:9a:f0:6e:e4:0f:25:10:e8:22:76

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.opx.janrain.ws

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opx.janrain.ws

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.opx.janrain.ws
*.eval.janrainfederate.com
*.janrainfederate.com
opx.janrain.ws
janrainfederate.com
openid-identity-net.production.janrainfederate.com
openid-api-stjude-org.uc11.janrainfederate.com
pfizer.uc11.janrainfederate.com
telstra.uc11.janrainfederate.com
eval.janrainfederate.com

Other certificates including the domain name janrain.ws

(limited to 100 certificates)
truelocal.client.janrain.com
visiple.client.janrain.com
findmeoutside.client.janrain.com
sanoma.client.janrain.com
ccna.client.janrain.com
542digital.client.janrain.com
enthusiastnetwork.client.janrain.com
*.opx.janrain.ws
*.opx.janrain.ws
mediaqmi.client.janrain.com
adoptapet.client.janrain.com
scholastic.client.janrain.com
oreilly.janrain.com
newton-software.client.janrain.com
*.opx.janrain.ws
mris.client.janrain.com
hillsvet.client.janrain.com
cnhi.client.janrain.com
slate.client.janrain.com
surfstitch.client.janrain.com
accounts.oreilly.com
usta.cleint.janrain.com
strategyand.client.janrain.com
aia.client.janrain.com
Bosch.client.janrain.com
guitarcenter.client.janrain.com
ccna.client.janrain.com
Bosch.client.janrain.com
nestleusa.client.janrain.com
scholastic.client.janrain.com
salesforce.client.janrain.com
mediaqmi.client.janrain.com
adoptapet.client.janrain.com
theatlantic.client.janrain.com
login.france24.com
docusign.client.janrain.com
eatclean.client.janrain.com
visiple.client.janrain.com
surfstitch.client.janrain.com
auth.edocr.com
mris.client.janrain.com
consumerist.client.janrain.com
Bosch.client.janrain.com
adoptapet.client.janrain.com
mediaqmi.client.janrain.com
oreilly.janrain.com
flight-centre.client.janrain.com
wawanesa.client.janrain.com
biscience.client.janrain.com
sanoma.client.janrain.com
enthusiastnetwork.client.janrain.com
nestleusa.client.janrain.com
*.opx.janrain.ws
mris.client.janrain.com
ccna.client.janrain.com
oncourselearning.client.janrain.com
iselect.client.janrain.com
adoptapet.client.janrain.com
*.opx.janrain.ws
srf.client.janrain.com
salesforce.client.janrain.com
newton-software.client.janrain.com
salesforce.client.janrain.com
ksfmedia.client.janrain.com
wingtai.client.janrain.com
melbournestorm.client.janrain.com
adoptapet.client.janrain.com
accounts.oreilly.com
atkearney.client.janrain.com
hillsvet.client.janrain.com
srf.client.janrain.com
salesforce.client.janrain.com
*.janrainfederate.com
aia.client.janrain.com
consumerist.client.janrain.com
nvidia.client.janrain.com
truelocal.client.janrain.com
cavs.client.janrain.com
mtg.client.janrain.com
*.opx.janrain.ws
*.opx.janrain.ws
usatoday.client.janrain.com
*.opx.janrain.ws
docusign.client.janrain.com
mediaqmi.client.janrain.com
findmeoutside.client.janrain.com
scholastic.client.janrain.com
cavs.client.janrain.com
Bosch.client.janrain.com
docusign.client.janrain.com
*.opx.janrain.ws
atkearney.client.janrain.com
koss.client.janrain.com
auth.edocr.com
salesforce.client.janrain.com
ccna.client.janrain.com
rtbf.client.janrain.com
ksfmedia.client.janrain.com
authenticate.globe.com.ph
authenticate.globe.com.ph

Certificate

The complete raw certificate details for *.opx.janrain.ws in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/H2fPDwqrE++/K81xqi
qrIcGMz39iqkkM2t0z0sNBoPuiDIqoVgS2gPv7T4MD40q6eEbSOs0HJouP1xnX9w
vmtkKfrAn5P9h26NNNOXyLlKEprDotkL68Il9S+jHAnOjAZsuIi74h8aIpPDtgiU
Ly2OsXNWEFkoUyIrkzxz6216e1q3d5bR9WD3Y3WL8tiacwe64CsltyN6qBRB0OFp
jCPqCYvqqIxA+ZCKhQSTg8n9hyT/8KTf23GJUxQXU4TvhNdRhCOzTopn2DigX6NG
jggqMfM65y7v5JcODb5BvidSa5HbU0KcwTGrRRJnmCtYXm8Qn8oJfHRtOlU+WNIG
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16551148929463543770237450294342902081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opx.janrain.ws'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25745692233442479691648821896789918069615451360344515311066879946159359586040374053589452755645792253850726621553909895490962074709794748143279756078042218415608009515783096774292784301821931795916712915049995005806484200200888670659931034314923158655930167644618019078254570119498796269861323921096219878209517292946351854125172296691835444073953229175929201739534741651452866312309459375023314364950686481500152252013228394207223708998227128967825336788786052433982293059773863242204086898810514555331495583560652779635393764538724016436260490592782734607387793491379080030046389787258371506745264250430325628470991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1755e559b89d84285fac698b9a71cc025472d562
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eval.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-identity-net.production.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-api-stjude-org.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstra.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eval.janrainfederate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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