staging.groove.co
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:6e:d7:7b:a6:36:03:48:e8:29:81:2b:d7:df:ed:2f was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.groove.co
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:6e:d7:7b:a6:36:03:48:e8:29:81:2b:d7:df:ed:2fSerial Number (int): 12538575131071657395523828419590614319
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e3:a6:72:00:0c:e3:0e:c1:73:6f:4e:7f:e3:2e:f4:49:b3:22:5e:89
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 00:90:ff:8b:a7:19:31:31:0b:d5:13:a7:da:d5:13:02:ee:7b:9b:45
Fingerprint (sha256): 08:33:2f:17:9a:f1:0a:e4:ad:23:f6:38:c4:cf:43:fe:6c:db:b5:68:85:16:aa:7f:45:46:8e:20:8d:29:72:3f
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate staging.groove.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.groove.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.groove.co
Other certificates including the domain name groove.co
(limited to 100 certificates)
engine-staging.groove.co
engine-pr-16961.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
3ds-status.outseer.com
3ds-status.outseer.com
staging.groove.co
groove.ehlinks.com
3ds-status.outseer.com
groove.co
www.blog.groove.co
groove.simondata.com
overview.groove.co
groove.co
3ds-status.outseer.com
blog.groove.co
engine-staging.groove.co
www.help.groove.co
developer.groove.co
branded.groove.co
3ds-status.outseer.com
engine-pr-16956.groove.co
www.blog.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
app.dev.groove.clari.com
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
groove.robinpowered.com
groove.co
3ds-status.outseer.com
3ds-status.outseer.com
app.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
groove.swivl.com
groove.lyric.com
3ds-status.outseer.com
groove.kiva.org
groove.ehlinks.com
eu1-status.mulesoft.com
groove.co
staging.engine.groove.co
groove.jebbit.com
overview.groove.co
blog.groove.co
go.groove.co
engine-pr-16950.groove.co
groove.jebbit.com
3ds-status.outseer.com
3ds-status.outseer.com
www.blog.groove.co
groove.adpearance.com
3ds-status.outseer.com
www.help.groove.co
blog.groove.co
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
www.blog.groove.co
engine.groove.co
groove.cloudleaf.io
branded.groove.co
blog.groove.co
groove.co
3ds-status.outseer.com
www.blog.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
engine-staging.groove.co
3ds-status.outseer.com
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
3ds-status.outseer.com
groove.kiva.org
3ds-status.outseer.com
groove.trustarc.com
groove.co
engine-pr-16954.groove.co
engine.groove.co
overview.groove.co
3ds-status.outseer.com
blog.groove.co
branded.grooveapp.com
staging.groove.co
groove.g2.com
groove.uber.com
3ds-status.outseer.com
3ds-status.outseer.com
www.blog.groove.co
overview.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
3ds-status.outseer.com
www.blog.groove.co
www.blog.groove.co
3ds-status.outseer.com
staging.engine.groove.co
blog.groove.co
www.blog.groove.co
3ds-status.outseer.com
groove.crossover.com
3ds-status.outseer.com
go.groove.co
engine-pr-16961.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
3ds-status.outseer.com
3ds-status.outseer.com
staging.groove.co
groove.ehlinks.com
3ds-status.outseer.com
groove.co
www.blog.groove.co
groove.simondata.com
overview.groove.co
groove.co
3ds-status.outseer.com
blog.groove.co
engine-staging.groove.co
www.help.groove.co
developer.groove.co
branded.groove.co
3ds-status.outseer.com
engine-pr-16956.groove.co
www.blog.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
app.dev.groove.clari.com
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
groove.robinpowered.com
groove.co
3ds-status.outseer.com
3ds-status.outseer.com
app.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
groove.swivl.com
groove.lyric.com
3ds-status.outseer.com
groove.kiva.org
groove.ehlinks.com
eu1-status.mulesoft.com
groove.co
staging.engine.groove.co
groove.jebbit.com
overview.groove.co
blog.groove.co
go.groove.co
engine-pr-16950.groove.co
groove.jebbit.com
3ds-status.outseer.com
3ds-status.outseer.com
www.blog.groove.co
groove.adpearance.com
3ds-status.outseer.com
www.help.groove.co
blog.groove.co
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
www.blog.groove.co
engine.groove.co
groove.cloudleaf.io
branded.groove.co
blog.groove.co
groove.co
3ds-status.outseer.com
www.blog.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
engine-staging.groove.co
3ds-status.outseer.com
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
3ds-status.outseer.com
groove.kiva.org
3ds-status.outseer.com
groove.trustarc.com
groove.co
engine-pr-16954.groove.co
engine.groove.co
overview.groove.co
3ds-status.outseer.com
blog.groove.co
branded.grooveapp.com
staging.groove.co
groove.g2.com
groove.uber.com
3ds-status.outseer.com
3ds-status.outseer.com
www.blog.groove.co
overview.groove.co
3ds-status.outseer.com
3ds-status.outseer.com
3ds-status.outseer.com
www.blog.groove.co
www.blog.groove.co
3ds-status.outseer.com
staging.engine.groove.co
blog.groove.co
www.blog.groove.co
3ds-status.outseer.com
groove.crossover.com
3ds-status.outseer.com
go.groove.co
Certificate
The complete raw certificate details for staging.groove.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIQCW7Xe6Y2A0joKYEr19/tLzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIyODAwMDAwMFoXDTIzMDcwNDIzNTk1OVowHDEa MBgGA1UEAxMRc3RhZ2luZy5ncm9vdmUuY28wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrYffdVWBSsq52b7CswhMH2ppJKi8EzHmqZjG4MiIPZd7f62N+ jLZ/nfDUrK0IZQdrajFtgEKT/Rx32Dh9KIilEAsegWpuqjDL6uHU8auMDSH1VCSs UcDR5/+8GgxumQvscX1vzB0CC3omCl7zn2oC+bAoeUjih6c4oMkTMut9G121wthb 1mYeYE6AosFohIvlS/rQL329sPkDuvl+9ttdNvm5dwYquK9j2giwFWXbFY2H+PSX kf7pVW7UPLA+5qP+eMkQA1gMx6dNRjqD58cGMaQgZcYGFqeNC3NqatwxNBda449n NJq/odeXEsVhmZa/24xhLtgQhnTH/8DHtikJAgMBAAGjggLpMIIC5TAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU46ZyAAzjDsFzb05/ 4y70SbMiXokwHAYDVR0RBBUwE4IRc3RhZ2luZy5ncm9vdmUuY28wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAM BgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDoPtDaPvUG NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYaaD70uAAAEAwBGMEQCIC2EqURU BM59lO2PRtZ2JvTbejHGBcwBzYVNEoJk1lp8AiB21v7T9HTEzrLSkw1nd5+aJoQz RkUMzMyDjd6H+cvHaQB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWa AAABhpoPvYoAAAQDAEcwRQIhAL1oo+EZFYc6kcAaCEFuZRDGJ9iq3JiP31+PvcIf 0svmAiBhTW3xK2wrvIX4VJcCT68/4UqJ/kWYf08NxvVxZxhwFgB2ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhpoPvTMAAAQDAEcwRQIhANd0Ymid sxarvp8OVJXtKsS/qKDueG/tXsAulT0yifRPAiAIaRxsqPjlVpAlRhDuedAvMWHm aoYyzItsOk/ffLBT9jANBgkqhkiG9w0BAQsFAAOCAQEAYQLWHhDQTWBoKP0L5ZHE 3cCAXxIOAXeDAmMI/QnukDB1m4Swo5SJSgJyROk6Ccd8bW66h4VTrx5BUux2RCQe mUO0o7QyKW8ltpyUjhpfpyOQhwB0b2LZPLIm1MXdtJ1tuThRL2n5Rw7olGEw2GK1 yXItgWXyVG4XoleAkMV4/VnzFktU/21POJW/FGz7C3UmGITcqkp7gPhvTnYu1MaL M6CVuN3D0WVaPpk9Ex/oJS7smeKdtz+bPU1j5SwpfY6J6dyyuoF2gDA3N7kP4GB8 dkFmQ15UyQiwUaidjl8NxWOFBwy5A4p+VSUxRQPQw4gaOEIWUu9sGcyLNgITbbwe pQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2H33VVgUrKudm+wrMIT B9qaSSovBMx5qmYxuDIiD2Xe3+tjfoy2f53w1KytCGUHa2oxbYBCk/0cd9g4fSiI pRALHoFqbqowy+rh1PGrjA0h9VQkrFHA0ef/vBoMbpkL7HF9b8wdAgt6Jgpe859q AvmwKHlI4oenOKDJEzLrfRtdtcLYW9ZmHmBOgKLBaISL5Uv60C99vbD5A7r5fvbb XTb5uXcGKrivY9oIsBVl2xWNh/j0l5H+6VVu1DywPuaj/njJEANYDMenTUY6g+fH BjGkIGXGBhanjQtzamrcMTQXWuOPZzSav6HXlxLFYZmWv9uMYS7YEIZ0x//Ax7Yp CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12538575131071657395523828419590614319 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.groove.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21635060079522272224617556357132848713614110807961773264149390965248815967367749545280798256496534129982222858868540270503761990507607624859051243206830789998689549875725455083779296336806161173793268306821670631669815986374009188129150594325164084029369034610753073933541488075587348475588563790121343143183653075856204383428144405072916539167663062762852167941519431377518791956519101574148421293947282554297294158009262107291832336312948063544282018680936707679180946412184104737166511748708166728424455378103129987204579916168199318471926877435599376452236195050435436602186925924994266944588942346508015341283593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3a672000ce30ec1736f4e7fe32ef449b3225e89 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.groove.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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