aceiebahaq.cloudimg.io
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:ae:fc:ef:5d:0d:a4:c5:0d:b7:df:f6:62:db:cd:38 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=aceiebahaq.cloudimg.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:ae:fc:ef:5d:0d:a4:c5:0d:b7:df:f6:62:db:cd:38Serial Number (int): 6225501768074284681243413772551048504
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: cf:7c:15:ee:53:d9:37:5e:5e:ef:55:b7:57:6f:0a:b5:7e:67:96:13
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): bc:bf:1f:e0:73:6c:96:c4:fd:f7:ed:9f:c2:be:42:b2:87:1d:1b:27
Fingerprint (sha256): 07:36:83:d1:1c:f8:f1:fc:3e:ea:13:c6:91:23:f2:4c:a5:27:27:0d:94:e4:c1:7b:6c:53:20:82:f1:3d:19:73
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate aceiebahaq.cloudimg.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aceiebahaq.cloudimg.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aceiebahaq.cloudimg.io
cloud.emile-weber.lu
cloud.emile-weber.lu
Other certificates including the domain name cloudimg.io
(limited to 100 certificates)
medias.florajet.com
img.static-swaven.com
support3.cdnetworks.net
img.automotivecdn.nl
cdn.pageone.dk
*.cloudimg.io
support3.cdnetworks.net
support3.cdnetworks.net
images.davidzwirnerbooks.com
bilder.lifta.de
img.pokde.net
aceiebahaq.cloudimg.io
support3.cdnetworks.net
bilder.lifta.de
support3.cdnetworks.net
img.seisenlinea.com
support3.cdnetworks.net
assets.ricaud.com
support5.cdnetworks.net
support3.cdnetworks.net
img.gocarsolutions.be
img.calisthenics.ie
*.webstores.cloud
e2e6bae.cloudimg.io
images.paranoidhosting.com
support5.cdnetworks.net
media2.made-in-meubles.com
support9.cdnetworks.net
support3.cdnetworks.net
atfxnxkpbq.cloudimg.io
media.sellerapp.com
images.superlever.com
*.cloudimg.io
*.cloudimg.io
images.acceleratedsite.com
*.webstores.cloud
cdn.tristanstyle.com
support3.cdnetworks.net
e2e6bae.cloudimg.io
support5.cdnetworks.net
responsive.leafreport.com
support3.cdnetworks.net
*.cloudimg.io
assets.ricaud.com
images.sf.craft.supply
*.kelkoo.com
support3.cdnetworks.net
*.ebook.de
support5.cdnetworks.net
publisher2.xualacloud.com
support3.cdnetworks.net
image.scaleflex.com
support3.cdnetworks.net
images.ticketsnet.es
*.kelkoo.com
support12.cdnetworks.net
*.cloudimg.io
support5.cdnetworks.net
support5.cdnetworks.net
image.scaleflex.com
image.mysteryelectronics.com
cdn.taggbox.com
i.intomore.com
*.cloudimg.io
img.gocarsolutions.be
support3.cdnetworks.net
medias.florajet.com
avcekfzvzq.cloudimg.io
img.amplitudes.com
support5.cdnetworks.net
support5.cdnetworks.net
asgvthscsr.cloudimg.io
support3.cdnetworks.net
cdn.nelinkia.com
support9.cdnetworks.net
cdn-c.pagemind.com
cdn.limitslayer.com
images.blur.io
support5.cdnetworks.net
images.mobachampion.com
responsive.fxempire.com
images.tigerchick.com
auvmmmtcmq.cloudimg.io
support3.cdnetworks.net
cwexfosvoa.cloudimg.io
support3.cdnetworks.net
bilder.lifta.de
imagesstaging.icreon.com
*.cloudimg.io
snap-img.yuka.io
support12.cdnetworks.net
atfxnxkpbq.cloudimg.io
support3.cdnetworks.net
media.jeujouet.com
cdn.sfi.fr
support3.cdnetworks.net
support3.cdnetworks.net
content.pickpack.de
bottegaveneta.cloudimg.io
static.eugenspivak.com
img.static-swaven.com
support3.cdnetworks.net
img.automotivecdn.nl
cdn.pageone.dk
*.cloudimg.io
support3.cdnetworks.net
support3.cdnetworks.net
images.davidzwirnerbooks.com
bilder.lifta.de
img.pokde.net
aceiebahaq.cloudimg.io
support3.cdnetworks.net
bilder.lifta.de
support3.cdnetworks.net
img.seisenlinea.com
support3.cdnetworks.net
assets.ricaud.com
support5.cdnetworks.net
support3.cdnetworks.net
img.gocarsolutions.be
img.calisthenics.ie
*.webstores.cloud
e2e6bae.cloudimg.io
images.paranoidhosting.com
support5.cdnetworks.net
media2.made-in-meubles.com
support9.cdnetworks.net
support3.cdnetworks.net
atfxnxkpbq.cloudimg.io
media.sellerapp.com
images.superlever.com
*.cloudimg.io
*.cloudimg.io
images.acceleratedsite.com
*.webstores.cloud
cdn.tristanstyle.com
support3.cdnetworks.net
e2e6bae.cloudimg.io
support5.cdnetworks.net
responsive.leafreport.com
support3.cdnetworks.net
*.cloudimg.io
assets.ricaud.com
images.sf.craft.supply
*.kelkoo.com
support3.cdnetworks.net
*.ebook.de
support5.cdnetworks.net
publisher2.xualacloud.com
support3.cdnetworks.net
image.scaleflex.com
support3.cdnetworks.net
images.ticketsnet.es
*.kelkoo.com
support12.cdnetworks.net
*.cloudimg.io
support5.cdnetworks.net
support5.cdnetworks.net
image.scaleflex.com
image.mysteryelectronics.com
cdn.taggbox.com
i.intomore.com
*.cloudimg.io
img.gocarsolutions.be
support3.cdnetworks.net
medias.florajet.com
avcekfzvzq.cloudimg.io
img.amplitudes.com
support5.cdnetworks.net
support5.cdnetworks.net
asgvthscsr.cloudimg.io
support3.cdnetworks.net
cdn.nelinkia.com
support9.cdnetworks.net
cdn-c.pagemind.com
cdn.limitslayer.com
images.blur.io
support5.cdnetworks.net
images.mobachampion.com
responsive.fxempire.com
images.tigerchick.com
auvmmmtcmq.cloudimg.io
support3.cdnetworks.net
cwexfosvoa.cloudimg.io
support3.cdnetworks.net
bilder.lifta.de
imagesstaging.icreon.com
*.cloudimg.io
snap-img.yuka.io
support12.cdnetworks.net
atfxnxkpbq.cloudimg.io
support3.cdnetworks.net
media.jeujouet.com
cdn.sfi.fr
support3.cdnetworks.net
support3.cdnetworks.net
content.pickpack.de
bottegaveneta.cloudimg.io
static.eugenspivak.com
Certificate
The complete raw certificate details for aceiebahaq.cloudimg.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgTCCA2mgAwIBAgIQBK78710NpMUNt9/2YtvNODANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIyMDAwMDAwMFoXDTI1MDExODIzNTk1OVowITEf MB0GA1UEAxMWYWNlaWViYWhhcS5jbG91ZGltZy5pbzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBANd3+vCRywZO4MLgs1PD3jErnlWCEE1kB7r9vCFQvT95 9koq5CoSZ5aCSs7dDXOk4KFSLM1ps76huo7E/2uVdGT1sM/nCigZOXd3QwSAzwqu 3qwLJUS8hOzmUAskdgipcUYAufhCK8EwKk52j7kXGDu0sdXNhasWd2fxlSxNOaU6 EmV1kwZnvmGbL9C7z7w3QvU3w1btRcFrcDqhTGOS51+0E6NJ5cC9eyEfQQ3ryYed FIUl10pcuHjftcWLFXFS/2Epfl+fywUlWAR+9k8ztZceLtmTHsWOj/DmPM8U6BTt 62upDx1NmIhOnjV8h8OwcFUHoq9AIr41y75L2EkkMgcCAwEAAaOCAZgwggGUMB8G A1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBTPfBXuU9k3 Xl7vVbdXbwq1fmeWEzA3BgNVHREEMDAughZhY2VpZWJhaGFxLmNsb3VkaW1nLmlv ghRjbG91ZC5lbWlsZS13ZWJlci5sdTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1Ud HwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy bTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw LnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAChrX013oIm937hw mwX9z8q7QBz9gQDEyYnhtG6I9bb6ecNvyEkYRHRmQZaTb1w6FM2yG6glGJnN1TFr etNnxJv72MyxEH1fAPYOVUTf5gK420laUZL3ZYe1Hj37COCthgB6fsGgZ5YWNnld 6MMy7udxyOoIDpTIyIqxvHFb/1WYladyFM82hpcXR8a9IR8tL0J+wElljBmPUzEm AO495YOTqf9B5L+/uzj39LBqrbnln42tyICLpaK+LG7jw8YBn+ALe4ZxX3r16Kus Bh9ml6YsAEvPD8v0i2ekzsLl6p54oK8Ev79K4SE/Zh7K1fR+xCHskeeNgONrGp/S qotNEwU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13f68JHLBk7gwuCzU8Pe MSueVYIQTWQHuv28IVC9P3n2SirkKhJnloJKzt0Nc6TgoVIszWmzvqG6jsT/a5V0 ZPWwz+cKKBk5d3dDBIDPCq7erAslRLyE7OZQCyR2CKlxRgC5+EIrwTAqTnaPuRcY O7Sx1c2FqxZ3Z/GVLE05pToSZXWTBme+YZsv0LvPvDdC9TfDVu1FwWtwOqFMY5Ln X7QTo0nlwL17IR9BDevJh50UhSXXSly4eN+1xYsVcVL/YSl+X5/LBSVYBH72TzO1 lx4u2ZMexY6P8OY8zxToFO3ra6kPHU2YiE6eNXyHw7BwVQeir0AivjXLvkvYSSQy BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6225501768074284681243413772551048504 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aceiebahaq.cloudimg.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27200400025832050174025115684014530821601749056522126574102742720316263721881311326264842284760242633974427402448112247822378604562836302793501631532130845686249971698822108843752316049881460052156638125778062509704820683364728285037281048019082884494903040316295896818065299338238745252719745238513234673133168107558763719144685789728941464597442493091845557804167054970130891600058145278392396869012405727626030673562458983258627387984159885692470716101161104216389445009269432046238793840068286714392125411079980917281432530782141571848330603840556119021304707258748878123285303522111640736033669323422451368210951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf7c15ee53d9375e5eef55b7576f0ab57e679613 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceiebahaq.cloudimg.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.emile-weber.lu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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