stage.blackbook.tilabs.tech
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:46:fd:14:ae:01:2a:2a:44:0f:7a:f2:f5:34:ac:6e was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stage.blackbook.tilabs.tech
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:46:fd:14:ae:01:2a:2a:44:0f:7a:f2:f5:34:ac:6eSerial Number (int): 14990101821776286447636484842914622574
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 64:9b:22:33:68:fa:df:69:f7:9e:bc:ae:5c:f5:a5:c9:be:64:d7:cf
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ba:5f:f1:73:01:d4:bc:dc:98:ef:07:70:71:0e:bb:55:a4:ea:6c:a5
Fingerprint (sha256): 09:c8:65:fe:65:86:7d:56:e6:27:7a:03:ab:a8:23:86:18:34:67:55:f5:fd:9d:2b:cb:1d:20:ea:54:51:25:11
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate stage.blackbook.tilabs.tech
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stage.blackbook.tilabs.tech
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stage.blackbook.tilabs.tech
*.stage.blackbook.tilabs.tech
*.stage.blackbook.tilabs.tech
Other certificates including the domain name tilabs.tech
(limited to 100 certificates)
*.dev.tilabs.tech
auth.tilabs.tech
*.dev.tilabs.tech
stage.blackbook.tilabs.tech
stage.blackbook.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rvrentals.tilabs.tech
security.tilabs.tech
rentals.tilabs.tech
blackbook.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rentals.tilabs.tech
blackbook.tilabs.tech
*.tilabs.tech
*.tilabs.tech
*.rentals.tilabs.tech
*.dev.tilabs.tech
rvrentals.tilabs.tech
stage.blackbook.tilabs.tech
*.dev.tilabs.tech
*.dev.tilabs.tech
eu.dev.tilabs.tech
*.tilabs.tech
blackbook.tilabs.tech
blackbook.tilabs.tech
jupyter-dev.tilabs.tech
jupyter-dev.tilabs.tech
eu.dev.tilabs.tech
*.blackbook.tilabs.tech
*.rentals.tilabs.tech
*.dev.tilabs.tech
*.rentals.tilabs.tech
security.tilabs.tech
*.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rentals.tilabs.tech
*.rentals.tilabs.tech
security.tilabs.tech
eu.dev.tilabs.tech
*.blackbook.tilabs.tech
*.blackbook.tilabs.tech
*.tilabs.tech
rstudio-dev.tilabs.tech
*.tilabs.tech
*.rentals.tilabs.tech
blackbook.tilabs.tech
stage.blackbook.tilabs.tech
rentals.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
security.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rvrentals.tilabs.tech
rstudio-dev.tilabs.tech
*.rentals.tilabs.tech
rentals.tilabs.tech
airflow-dev.tilabs.tech
dev.tilabs.tech
auth.tilabs.tech
eu.dev.tilabs.tech
*.blackbook.tilabs.tech
auth.tilabs.tech
*.dev.tilabs.tech
stage.blackbook.tilabs.tech
stage.blackbook.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rvrentals.tilabs.tech
security.tilabs.tech
rentals.tilabs.tech
blackbook.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rentals.tilabs.tech
blackbook.tilabs.tech
*.tilabs.tech
*.tilabs.tech
*.rentals.tilabs.tech
*.dev.tilabs.tech
rvrentals.tilabs.tech
stage.blackbook.tilabs.tech
*.dev.tilabs.tech
*.dev.tilabs.tech
eu.dev.tilabs.tech
*.tilabs.tech
blackbook.tilabs.tech
blackbook.tilabs.tech
jupyter-dev.tilabs.tech
jupyter-dev.tilabs.tech
eu.dev.tilabs.tech
*.blackbook.tilabs.tech
*.rentals.tilabs.tech
*.dev.tilabs.tech
*.rentals.tilabs.tech
security.tilabs.tech
*.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rentals.tilabs.tech
*.rentals.tilabs.tech
security.tilabs.tech
eu.dev.tilabs.tech
*.blackbook.tilabs.tech
*.blackbook.tilabs.tech
*.tilabs.tech
rstudio-dev.tilabs.tech
*.tilabs.tech
*.rentals.tilabs.tech
blackbook.tilabs.tech
stage.blackbook.tilabs.tech
rentals.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
security.tilabs.tech
*.dev.tilabs.tech
*.tilabs.tech
rvrentals.tilabs.tech
rstudio-dev.tilabs.tech
*.rentals.tilabs.tech
rentals.tilabs.tech
airflow-dev.tilabs.tech
dev.tilabs.tech
auth.tilabs.tech
eu.dev.tilabs.tech
*.blackbook.tilabs.tech
Certificate
The complete raw certificate details for stage.blackbook.tilabs.tech in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIQC0b9FK4BKipED3ry9TSsbjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjMwMDAwMDBaFw0xOTA5MjMx MjAwMDBaMCYxJDAiBgNVBAMTG3N0YWdlLmJsYWNrYm9vay50aWxhYnMudGVjaDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbVr/GopRRQ1Jff4raSQ9Bt fvblq6N388M6MCWzUO3AMYmFHvBHyVog5AOyAOWaY0A7KLCET9s1IdBx4WG+WBb9 SMydzuSsqk4xo8BPd3jMrlxzexOwJXgIACYK2Z5VlZHtHO9kCi/lE/qD6ZB7oIEi c0dhS10haZ8IRofadR4HCGpfZZ35ixrYFpFaziLkMDW1/YgbYAE/3MfVawXnXzT3 OXUTVGSSLm5B/vNKKagWzXwJjpY3424oH0Ae6JfkD2OITQ72qWS1NOEWXAOoMGeQ Ra3yTe6x0fmXGbwP2bg3o9BKZMIbHbJ8vqZW3YCe0U92RELI5l5L94bHr4m62DMC AwEAAaOCAqUwggKhMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0G A1UdDgQWBBRkmyIzaPrfafeevK5c9aXJvmTXzzBFBgNVHREEPjA8ghtzdGFnZS5i bGFja2Jvb2sudGlsYWJzLnRlY2iCHSouc3RhZ2UuYmxhY2tib29rLnRpbGFicy50 ZWNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVz dC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAEC ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFi LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3c EAAAAWVoVWvbAAAEAwBHMEUCIQDrbtpDDvo3GS4WJKWEU6Mij/3bnhMws9WMJKOe eHiSwgIgYz5lgOX8NK5h2C0I2vX1lCi3oJrrtUJozdYDVKwu4MMAdQCHdb/nWXz4 jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWVoVWyYAAAEAwBGMEQCIGeisV54 kcocDQBnIVWixyqznr6S4G4AWSyRNZehDhBaAiAx8AMZ+zGarQPHPlgww2hcQSYh AljMpR4LUF3fZw68wzANBgkqhkiG9w0BAQsFAAOCAQEAse179pEcSfzvk2gpkfDx 3KqwnWCCpW5E4HaJ2GRXoZCZzZtSl0BzXTX+El8JnssL1jXFYX4TmecjWY7EhUkn AZ6stH6FfJCJF8sY2c2+lc40qnN+jLYj6Q9UdDPtww0BKfupYKFIWC+l2w8oabwR UIn2oyAkCQH6HPNaUbQLgvDKb6C+/is7bnA0FO1duYGdSdo/al7UA2kmJfSU8S4E 0l2Bd2vbW/BJ8pQlzB7WWQ/tBmHtdm8o9nstuU+dy8AO2rhKCTjgL6WzPhcmX0nY 99f7lNDTqpXg/36dpOEIbWaLpioGyM5gx6gj3aFgGamYyD7bBM7hwuKekfq6oCQ6 bQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptWv8ailFFDUl9/itpJD 0G1+9uWro3fzwzowJbNQ7cAxiYUe8EfJWiDkA7IA5ZpjQDsosIRP2zUh0HHhYb5Y Fv1IzJ3O5KyqTjGjwE93eMyuXHN7E7AleAgAJgrZnlWVke0c72QKL+UT+oPpkHug gSJzR2FLXSFpnwhGh9p1HgcIal9lnfmLGtgWkVrOIuQwNbX9iBtgAT/cx9VrBedf NPc5dRNUZJIubkH+80opqBbNfAmOljfjbigfQB7ol+QPY4hNDvapZLU04RZcA6gw Z5BFrfJN7rHR+ZcZvA/ZuDej0Epkwhsdsny+plbdgJ7RT3ZEQsjmXkv3hsevibrY MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14990101821776286447636484842914622574 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.blackbook.tilabs.tech' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21060931750020923049176482806792859182650216040967506433685046746809203060624188665840257180322578851387607730274798654110177228740233073770656348408340513651981164477441198401508545471825990851055856586518096358338305292613622246335669266285827050573964093709386751254981319728558819275216859589714855194400150820907098677554282536687618177491313784206424717553534112532548069338376159123999205964215193447370761146808894796072707561127357294415586439207563608985591805018764000605052143719473892495432504523442794854925963413904449257830265002464057098573181332067674720363091065319304616361277036011852159075932211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 649b223368fadf69f79ebcae5cf5a5c9be64d7cf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.blackbook.tilabs.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.blackbook.tilabs.tech' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016568556bdb0000040300473045022100eb6eda430efa37192e1624a58453a3228ffddb9e1330b3d58c24a39e787892c20220633e6580e5fc34ae61d82d08daf5f59428b7a09aebb54268cdd60354ac2ee0c30075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016568556c980000040300463044022067a2b15e7891ca1c0d00672155a2c72ab39ebe92e06e00592c913597a10e105a022031f00319fb319aad03c73e5830c3685c4126210258cca51e0b505ddf670ebcc3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b1ed7bf6911c49fcef93682991f0f1dcaab09d6082a56e44e07689d86457a19099cd9b529740735d35fe125f099ecb0bd635c5617e1399e723598ec4854927019eacb47e857c908917cb18d9cdbe95ce34aa737e8cb623e90f547433edc30d0129fba960a148582fa5db0f2869bc115089f6a320240901fa1cf35a51b40b82f0ca6fa0befe2b3b6e703414ed5db9819d49da3f6a5ed403692625f494f12e04d25d81776bdb5bf049f29425cc1ed6590fed0661ed766f28f67b2db94f9dcbc00edab84a0938e02fa5b33e17265f49d8f7d7fb94d0d3aa95e0ff7e9da4e1086d668ba62a06c8ce60c7a823dda16019a998c83edb04cee1c2e29e91fabaa0243a6d