sg10.bookingmotor.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 07:99:e6:e6:12:9e:7d:92:84:b2:36:aa:4a:5a:56:15 was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sg10.bookingmotor.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:99:e6:e6:12:9e:7d:92:84:b2:36:aa:4a:5a:56:15Serial Number (int): 10103700572298791357367050921014089237
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 8d:31:94:27:50:e5:19:a7:6c:ca:57:e6:b8:8c:2f:dd:f9:38:fc:b0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 12:3a:89:ec:cc:c8:6f:cc:95:6c:9d:67:70:39:9b:65:ce:52:b4:89
Fingerprint (sha256): 08:62:0b:6b:9e:06:5d:9b:03:e9:77:cb:64:85:cb:4b:7f:f8:16:75:6f:ff:04:ba:0b:96:99:1e:31:e0:7b:8d
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate sg10.bookingmotor.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sg10.bookingmotor.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sg10.bookingmotor.com
*.sierramadre.travel
*.transmundohn.com
*.discoverymas.com
*.vialojaragencias.com
*.lineafacil.com
*.travelgea.com.pe
*.salmor.com.ec
*.alasmundiales.com
*.perumulticolor.com
*.sierramadre.travel
*.transmundohn.com
*.discoverymas.com
*.vialojaragencias.com
*.lineafacil.com
*.travelgea.com.pe
*.salmor.com.ec
*.alasmundiales.com
*.perumulticolor.com
Other certificates including the domain name bookingmotor.com
(limited to 100 certificates)
academy.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com
Certificate
The complete raw certificate details for sg10.bookingmotor.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIQB5nm5hKefZKEsjaqSlpWFTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyNjAwMDAwMFoXDTI0MDYyMzIzNTk1OVowIDEe MBwGA1UEAxMVc2cxMC5ib29raW5nbW90b3IuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAmpY8CxWCq3pDjT8fTQNApnTG2CdDBhfCCpKgVFMTmPdK VTZqmTzrKbvu4DusbqDNeNw/Jfm2Xh5JcgpDGyqt1lNTm0hQPNXdCVyvy9Z65LXa Qz2C7M6EM4NrnC00+fCQI+4fxi4opdg5hxd7lHU3gbQ2wU6vzgTlWD+f1H7XZnzW FlS7dHPPR1uMR7hMBr2duO5LDBxg8EiGGnj6D0z29pZpVj0QTiHq4+Wb7iG/gzGH URWwJl5ikl5q/SJw/jqAU5tBgQbvdKJlSN5Ga0BxFYhKVzUkgGjIHSrmfqTGu30l n8mjo6uRngNwJRq4d54IqGPnABxfvn/LqLM2JO5BsQIDAQABo4ICPDCCAjgwHwYD VR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFI0xlCdQ5Rmn bMpX5riML935OPywMIHaBgNVHREEgdIwgc+CFXNnMTAuYm9va2luZ21vdG9yLmNv bYIUKi5zaWVycmFtYWRyZS50cmF2ZWyCEioudHJhbnNtdW5kb2huLmNvbYISKi5k aXNjb3ZlcnltYXMuY29tghYqLnZpYWxvamFyYWdlbmNpYXMuY29tghAqLmxpbmVh ZmFjaWwuY29tghIqLnRyYXZlbGdlYS5jb20ucGWCDyouc2FsbW9yLmNvbS5lY4IT Ki5hbGFzbXVuZGlhbGVzLmNvbYIUKi5wZXJ1bXVsdGljb2xvci5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0w MS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG AQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYB BQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNl cjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdIhiqkLbIpUlXh/eDpilBJwjDOM6pM0meYvfSWP8StYgEtOhRmjyD lQ7dgZSQHsi4VFr2gUA5eKYhRdChO6JOeN8fpPVi3wnlv49KZ5jiGAlAkmfAZaSM B451rhhYLWis5QSuPNckTGOJYlCn6e7fnXNil8jUrJ1zUTJMzWO1jO9ghSbdwpfJ 607wi2znXFv5P8nDkCwvY8wSJ3mHTXf8pk++pWHF5NGqrR3DWBMWn5/fXGOEWtef KZfibvjYIeK0Z6e+WvcWTw4ZJ70TuTfl1/imXRuJrCEHyJrkuSncrRZ+qApyMt7i wl7yRPPlKuQgx0E4QvTm2jcOG+eC7wKc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpY8CxWCq3pDjT8fTQNA pnTG2CdDBhfCCpKgVFMTmPdKVTZqmTzrKbvu4DusbqDNeNw/Jfm2Xh5JcgpDGyqt 1lNTm0hQPNXdCVyvy9Z65LXaQz2C7M6EM4NrnC00+fCQI+4fxi4opdg5hxd7lHU3 gbQ2wU6vzgTlWD+f1H7XZnzWFlS7dHPPR1uMR7hMBr2duO5LDBxg8EiGGnj6D0z2 9pZpVj0QTiHq4+Wb7iG/gzGHURWwJl5ikl5q/SJw/jqAU5tBgQbvdKJlSN5Ga0Bx FYhKVzUkgGjIHSrmfqTGu30ln8mjo6uRngNwJRq4d54IqGPnABxfvn/LqLM2JO5B sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10103700572298791357367050921014089237 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sg10.bookingmotor.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19514782379609623118004594502922977817204307696294284656577461671552889923176749532399612406158621771336962244481187870549579183823318475387306504120942165546654277485552709907397935012153993665528138039285953337794480613442367443833320063583873103943157716920668958551317241374682132037775374576519718006032705244772370156198638805371802859496387574485987068377405036176425121480253949546864686572143870833277837172475834619909784505050637281282522855032849917701680864218505641464196871766259487731012156969010898702628591949211705351843639507489496430256915657553661668895169242167105232842263483974799493795037617 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d31942750e519a76cca57e6b88c2fddf938fcb0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg10.bookingmotor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierramadre.travel' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transmundohn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoverymas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vialojaragencias.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineafacil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelgea.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salmor.com.ec' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alasmundiales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perumulticolor.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001d2218aa90b6c8a5495787f783a629412708c338cea933499e62f7d258ff12b58804b4e8519a3c83950edd8194901ec8b8545af681403978a62145d0a13ba24e78df1fa4f562df09e5bf8f4a6798e21809409267c065a48c078e75ae18582d68ace504ae3cd7244c63896250a7e9eedf9d736297c8d4ac9d7351324ccd63b58cef608526ddc297c9eb4ef08b6ce75c5bf93fc9c3902c2f63cc122779874d77fca64fbea561c5e4d1aaad1dc35813169f9fdf5c63845ad79f2997e26ef8d821e2b467a7be5af7164f0e1927bd13b937e5d7f8a65d1b89ac2107c89ae4b929dcad167ea80a7232dee2c25ef244f3e52ae420c7413842f4e6da370e1be782ef029c