opsmanager-amr-sbx.atlas-sbx.dht.live

Issued by Amazon

About this certificate

This digital certificate with serial number 08:bd:6d:4a:d0:3b:d6:6e:10:75:3c:48:a1:9c:68:86 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opsmanager-amr-sbx.atlas-sbx.dht.live

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:bd:6d:4a:d0:3b:d6:6e:10:75:3c:48:a1:9c:68:86
Serial Number (int): 11617384782518454775612052448825075846
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8c:ed:d9:56:5e:c1:e1:3b:c9:11:46:f1:a8:64:3e:de:7a:42:8f:5a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cb:c3:b0:e4:ab:47:7e:6d:a1:67:82:c0:a5:f8:ce:91:37:97:d7:69
Fingerprint (sha256): 09:cc:97:42:33:a2:8b:26:d2:c9:31:68:ec:85:7e:88:4c:1e:7d:a9:ff:10:c4:2b:6f:5b:d2:71:91:1f:a3:f1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate opsmanager-amr-sbx.atlas-sbx.dht.live

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opsmanager-amr-sbx.atlas-sbx.dht.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opsmanager-amr-sbx.atlas-sbx.dht.live

Other certificates including the domain name dht.live

(limited to 100 certificates)
avw.airview0-dev.dht.live
monaco.airview0-dev.dht.live
api.aloe-dev.dht.live
nexus-new.airview0-shared.dht.live
*.mgmt.paas.dht.live
docs.showtime2-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
bitbucket.prod.dht.live
graphql.showtime5-sbx.dht.live
external.myair-eu-dev.dht.live
peep-ws5.smart-coaching-dev.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
scui.sleep-concierge-prd.dht.live
*.airview-icm-dev.dht.live
avw.airview0-dev.dht.live
data-platform-mock.myair-eu-dev.dht.live
dev.us-west-2.paas.dht.live
avx-mock-apac.myair-eu-dev.dht.live
honeybadgers-sbx.dht.live
avx-mock-amr.showtime5-sbx.dht.live
docs.showtime5-sbx.dht.live
avx.eta.dht.live
external.showtime2-sbx.dht.live
static.showtime5-sbx.dht.live
green-iot-avx-a.airview-messaging-qa.dht.live
dashboard-ws2.smart-coaching-dev.dht.live
monaco.airview0-dev.dht.live
support-api.myair-eu-dev.dht.live
privacy.hellosleep-dev.dht.live
avx-mock-amr.showtime5-sbx.dht.live
*.mgmt.paas.dht.live
external.showtime5-sbx.dht.live
monaco.eta.dht.live
support.showtime5-sbx.dht.live
support.showtime5-sbx.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
docs.showtime5-sbx.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
privacy.hellosleep-dev.dht.live
static.myair-eu-dev.dht.live
api.hellosleep-dev.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
jenkins.rcsydneypdsoftware-prd.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
api.showtime5-sbx.dht.live
privacy.showtime3-sbx.dht.live
sc-2036-survey-api.honeybadgers-sbx.dht.live
amsuat-www.resmed.com
sc-2036-mobilequestionsui.honeybadgers-sbx.dht.live
nightowl.showtime13-dev.dht.live
avw.airview0-dev.dht.live
graphql.showtime5-sbx.dht.live
api.showtime1-sbx.dht.live
support.myair-eu-dev.dht.live
monaco.airview0-dev.dht.live
dashboard-ws2.smart-coaching-dev.dht.live
peep.smart-coaching-dev.dht.live
*.prod.dht.live
support-api.showtime5-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
api.hellosleep-stg.dht.live
bitbucket.prod.dht.live
api.showtime1-sbx.dht.live
docs.dht.live
avx-mock-eu.showtime5-sbx.dht.live
api.showtime5-sbx.dht.live
honeybadgers-sbx.dht.live
support.myair-eu-dev.dht.live
avx-mock-apac.showtime5-sbx.dht.live
avw.eta.dht.live
static.showtime5-sbx.dht.live
api.showtime1-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
myapi.airview-kona-dev.dht.live
airview-xint-stg.dht.live
monaco.airview0-dev.dht.live
api.showtime1-sbx.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
opsmanager-amr-dev.atlas-sbx.dht.live
amsuat-www.resmed.com
*.pub.vamshi-test.devx-eks-dev.dht.live
*.priv.vamshi-test.devx-eks-dev.dht.live
dev.us-west-2.paas.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
*.mgmt.paas.dht.live
api.showtime1-sbx.dht.live
api.showtime5-sbx.dht.live
avx.airview0-dev.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
api.showtime-eu-1-sbx.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
ros2-qa.dht.live
avx-mock-amr.showtime5-sbx.dht.live
static.showtime2-sbx.dht.live
support.showtime2-sbx.dht.live
avx-mock-apac.showtime5-sbx.dht.live
ecs-service.playground-a-sbx.dht.live
avw.eta.dht.live

Certificate

The complete raw certificate details for opsmanager-amr-sbx.atlas-sbx.dht.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEoDCCA4igAwIBAgIQCL1tStA71m4QdTxIoZxohjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MTEwMDAwMDBaFw0yMTA1MTEx
MjAwMDBaMDAxLjAsBgNVBAMTJW9wc21hbmFnZXItYW1yLXNieC5hdGxhcy1zYngu
ZGh0LmxpdmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaDor5bj8
7lUvNK7wegD5GWSAeXhUwJR1+41rYRoaUcNCRJc9It7I17Y2yCMw4lqv5Iuqav7r
MyNu2vGqUxWrtKvDh+PtR6RTv14ZqtkoUxZuuHe04xwGktBZb8TUiXnMjSDz732b
yo8O/CrHM4we1V54d08ivGVMVSRaBszPVgue7sDf4xYIC2V76nnJyCoLy8eu2jam
QVqZyZbKF2YWKZjfrm6OADcZp1aWeN08Akique6acWLAkTQibn2qR9DsOskI+IbP
nt6DpuLXgTpLoT6L+xHZ0HBcLQsJVMCvoi9gVOMcP8rrg0C1b8erASYoA/hhJoVR
WnWgq7cpcs7tAgMBAAGjggGeMIIBmjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QH
J5Z0W/k90DAdBgNVHQ4EFgQUjO3ZVl7B4TvJEUbxqGQ+3npCj1owMAYDVR0RBCkw
J4Ilb3BzbWFuYWdlci1hbXItc2J4LmF0bGFzLXNieC5kaHQubGl2ZTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu
Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQCoEvzFCHWvUsQULVmixQyMaud2qLleiXu4eY4W
3jr7jJbm+eV2x9bKKnpx3SAfRYOvKwdReUGsgenoVrdDgpgu2UoezxR87WAdS/Zp
ZMlkR7Jzln2scIQMStlFmYhDbH3YCwcRWH1lVX1f1Ry1kylK7YaIl0Ltuotmq1sQ
r/rdHPWPFfRCd8C5FlGxAN06VyOPa4p9xKqqrJyifETrffju8e1dMqJFdiTe6QWG
OJPQzRaBEuFEeGBDb3xosFYZwM2cPZkBoiEIvqTn0Nn5CrV/czKCNmhLQxCHRPPI
xmdMk00zuOa/ue3LE7ehdq/vFdgqc3NNsiF/7v1nw1ow4Ube
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2g6K+W4/O5VLzSu8HoA
+RlkgHl4VMCUdfuNa2EaGlHDQkSXPSLeyNe2NsgjMOJar+SLqmr+6zMjbtrxqlMV
q7Srw4fj7UekU79eGarZKFMWbrh3tOMcBpLQWW/E1Il5zI0g8+99m8qPDvwqxzOM
HtVeeHdPIrxlTFUkWgbMz1YLnu7A3+MWCAtle+p5ycgqC8vHrto2pkFamcmWyhdm
FimY365ujgA3GadWlnjdPAJIqrnumnFiwJE0Im59qkfQ7DrJCPiGz57eg6bi14E6
S6E+i/sR2dBwXC0LCVTAr6IvYFTjHD/K64NAtW/HqwEmKAP4YSaFUVp1oKu3KXLO
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11617384782518454775612052448825075846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opsmanager-amr-sbx.atlas-sbx.dht.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21133193293157723527980683856905480850452633116446810298839864040169006947229260510996146189028678664509510923722074663571634834915731747470685704614009164706177168852156011156202178895976316426588753186521547454685870122896433150822304550064241927301987075106552590868690301952526340648778215313814584882834955278157506960777838470379780401254889585396569148806747756796100414668133225131798349460566636641382478684703396888189554436088071404072685775572175652831359504005070270576020654633447781581649113220021687323912363105940616336168023642172978425826800025704156662718545854533416200081943572158797305701650157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cedd9565ec1e13bc91146f1a8643ede7a428f5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsmanager-amr-sbx.atlas-sbx.dht.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a812fcc50875af52c4142d59a2c50c8c6ae776a8b95e897bb8798e16de3afb8c96e6f9e576c7d6ca2a7a71dd201f4583af2b07517941ac81e9e856b74382982ed94a1ecf147ced601d4bf66964c96447b273967dac70840c4ad9459988436c7dd80b0711587d65557d5fd51cb593294aed86889742edba8b66ab5b10affadd1cf58f15f44277c0b91651b100dd3a57238f6b8a7dc4aaaaac9ca27c44eb7df8eef1ed5d32a2457624dee905863893d0cd168112e1447860436f7c68b05619c0cd9c3d9901a22108bea4e7d0d9f90ab57f73328236684b43108744f3c8c6674c934d33b8e6bfb9edcb13b7a176afef15d82a73734db2217feefd67c35a30e146de