*.ixor.be
Issued by Amazon
About this certificate
This digital certificate with serial number 02:a5:3f:af:f4:2d:75:0d:2f:b4:b7:47:c7:26:e7:30 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ixor.be
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:a5:3f:af:f4:2d:75:0d:2f:b4:b7:47:c7:26:e7:30Serial Number (int): 3516476705530845174425531284829169456
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 08:32:1f:ac:f6:14:5e:12:f6:a9:1f:6d:b4:5a:0e:cf:27:47:ac:dd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e8:09:45:ea:2d:7d:a7:68:25:77:60:1d:e3:bb:ee:1a:a2:c2:15:5a
Fingerprint (sha256): 05:6b:25:23:27:bf:11:e7:4a:49:27:96:57:f9:f1:60:88:40:16:86:b6:dc:e8:fb:90:80:b3:a2:9a:78:96:f3
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.ixor.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ixor.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ixor.be
mobileconfig.doccle.be
mobileconfig.doccle.be
Other certificates including the domain name ixor.be
(limited to 100 certificates)
*.ixor.be
doccledev.ixor.be
doccledev.ixor.be
dct-bastion-prod.ixor.be
*.ixor.be
ixor.be
ixordocs.be
*.beterverbonden.be
*.beterverbonden.be
ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
repo.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
docclestg.ixor.be
*.ixor.be
ixor.be
ci.ixor.be
ci.ixor.be
acerta-calendar-test.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
ci.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
ci.ixor.be
*.ixor.be
*.ixor.be
login.vanbredavendor.com
*.ixor.be
*.ixor.be
docclestg.ixor.be
*.beterverbonden.be
*.ixor.be
ixordocs.be
docclestg.ixor.be
*.ixor.be
ixor.be
cfgsrv2-dev.ixor.be
acerta-calendar-test.ixor.be
docclestg.ixor.be
ci2.ixor.be
login.vanbredavendor.com
*.ixor.be
cmk.ixor.be
*.ixor.be
repo.ixor.be
*.beterverbonden.be
*.ixor.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
doccledev.ixor.be
nettozelfstandige.acerta.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
ixor.be
ci.ixor.be
repo.ixor.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
repo.ixor.be
doccledev.ixor.be
*.ixor.be
*.ixor.be
ci2.ixor.be
cfgsrv2-dev.ixor.be
ixor.be
server48.ixor.be
*.acerta.be
doccledev.ixor.be
ixor.be
ixor.be
*.beterverbonden.be
doccledev.ixor.be
delijn-rtmon-test.ixor.be
ixor.be
server48.ixor.be
*.ixor.be
*.beterverbonden.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
doccledev.ixor.be
theglue-vasco.ixor.be
doccledev.ixor.be
doccledev.ixor.be
doccledev.ixor.be
dct-bastion-prod.ixor.be
*.ixor.be
ixor.be
ixordocs.be
*.beterverbonden.be
*.beterverbonden.be
ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
repo.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
docclestg.ixor.be
*.ixor.be
ixor.be
ci.ixor.be
ci.ixor.be
acerta-calendar-test.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
*.ixor.be
ci.ixor.be
docclestg.ixor.be
*.ixor.be
*.ixor.be
ci.ixor.be
*.ixor.be
*.ixor.be
login.vanbredavendor.com
*.ixor.be
*.ixor.be
docclestg.ixor.be
*.beterverbonden.be
*.ixor.be
ixordocs.be
docclestg.ixor.be
*.ixor.be
ixor.be
cfgsrv2-dev.ixor.be
acerta-calendar-test.ixor.be
docclestg.ixor.be
ci2.ixor.be
login.vanbredavendor.com
*.ixor.be
cmk.ixor.be
*.ixor.be
repo.ixor.be
*.beterverbonden.be
*.ixor.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
doccledev.ixor.be
nettozelfstandige.acerta.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
ixor.be
ci.ixor.be
repo.ixor.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
repo.ixor.be
doccledev.ixor.be
*.ixor.be
*.ixor.be
ci2.ixor.be
cfgsrv2-dev.ixor.be
ixor.be
server48.ixor.be
*.acerta.be
doccledev.ixor.be
ixor.be
ixor.be
*.beterverbonden.be
doccledev.ixor.be
delijn-rtmon-test.ixor.be
ixor.be
server48.ixor.be
*.ixor.be
*.beterverbonden.be
*.beterverbonden.be
*.ixor.be
*.ixor.be
doccledev.ixor.be
theglue-vasco.ixor.be
doccledev.ixor.be
Certificate
The complete raw certificate details for *.ixor.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIQAqU/r/QtdQ0vtLdHxybnMDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMTMwMDAwMDBaFw0yMzAxMTEy MzU5NTlaMBQxEjAQBgNVBAMMCSouaXhvci5iZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKUTnBoZedEBfNuFv8W3J9qNMIfKhMNzKoi+ufWcA3N4aElI R/J9hqdzFNqUFR53flX62jw4qHnDkDL3zoF1XYoysEk8j2Xi3IJvSxOSaOlKCAnR PkTOj+UUY1RjeZ6+tFnoOABh8RMDz5RXEazM/RPBsByx1u5ax84NeCAii32Kwe7m tyH8dYY/isKKGrqIii09ZJ4OaJqNdUEHIUQe7OfeBobD+nAO4AeLKPvTlCkgVyDu pP35zQDQDADgriOoz/zVINU/LFTdmybbEFvEAGRsBkbUkTVU0sYZ/ObzFvcOm0ht QDXWnsw9HgEuwIfCwvxTa+gl7Wxf5JpVPlKJp48CAwEAAaOCAvwwggL4MB8GA1Ud IwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQIMh+s9hReEvap H220Wg7PJ0es3TAsBgNVHREEJTAjggkqLml4b3IuYmWCFm1vYmlsZWNvbmZpZy5k b2NjbGUuYmUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1Bggr BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpv bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQC BIIBbgSCAWoBaAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAAB fbEuL5kAAAQDAEcwRQIhAJJmXOVzAYK82n8itXHHhomMRzWDNLE4qJ1/nO2e/Vl7 AiBOZjHiiZ8sUzHf39g6XhqutNDtzm6gdBOxMx6ubs1AlgB2ADXPGRu/sWxXvw+t TG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABfbEuL6UAAAQDAEcwRQIgaUzHp4xtuJ0s /IPRW7MvydgeUohFY2g7eVCChNv1K/wCIQCIjQz7JeDj3PDFlSvHmFuMbdT/jLc/ 6bY18veGSqOi7gB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAAB fbEuL8UAAAQDAEcwRQIgWTzjtCFqJegIOJyoO3TqVUoP+PvgowFpATFSGKuhuzIC IQC63KVHWHp608deKM3Skd9A8Zt1frAiGZ+5v6RN4E8TLTANBgkqhkiG9w0BAQsF AAOCAQEAIUalkYN3DKSkvjNiAw5IxZ5l+cNvMYD1lMz31n7y/NVo4dM4WNwvlVH6 W1yf1TNseRKkcQcCJ83lH03q8QSOXGBi50HfweJwEHgPXpsbliKl8fQtowpYrpum yv5Ti+AausHf0lBjbOF5luueHLBQs2WloeH7iL52UfovI03eMXzvp54yT+6eaISp Ftw4IrLK3C/bgFD6MQeSwOQ0hanGjlf1TxO/7/uPVnVyjvMQuOmy+JX7r18Nwyul jS6MzaWQRrD/Qiy6slhH9gUP5yUJu0AOSvORLC4ZStdsDC0kxWk8eYidJvSTr42Y WufxRyyv0R5q0Pp95MCpVJDWTTjsxg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApROcGhl50QF824W/xbcn 2o0wh8qEw3MqiL659ZwDc3hoSUhH8n2Gp3MU2pQVHnd+VfraPDioecOQMvfOgXVd ijKwSTyPZeLcgm9LE5Jo6UoICdE+RM6P5RRjVGN5nr60Weg4AGHxEwPPlFcRrMz9 E8GwHLHW7lrHzg14ICKLfYrB7ua3Ifx1hj+KwooauoiKLT1kng5omo11QQchRB7s 594GhsP6cA7gB4so+9OUKSBXIO6k/fnNANAMAOCuI6jP/NUg1T8sVN2bJtsQW8QA ZGwGRtSRNVTSxhn85vMW9w6bSG1ANdaezD0eAS7Ah8LC/FNr6CXtbF/kmlU+Uomn jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3516476705530845174425531284829169456 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ixor.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20838990258991349742065143437342193454713278574586020317268344415266661442718784123007354938999902559630473152948294424576407866860825488203100588579623523205536754529571255762332469562351116075761170422695493938119993169149150669321900617877300697739620797002548283356463834533046437593180448500178786448246400431600891233489658164317628807607415714190883655610377736156461957525299746923034569553823419372510201371442468348347313231673433817896341356403817681550105003975356301425676967324602601058195193956342014088717037139302737853071356452138218721969174735424077134592090053568108854835303950775391850236323727 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 08321facf6145e12f6a91f6db45a0ecf2747acdd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ixor.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileconfig.doccle.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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