staging.account.clio.services
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0b:1f:f8:5d:7b:05:29:c4:f3:bb:1b:03:a1:0f:72:65 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.account.clio.services
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:1f:f8:5d:7b:05:29:c4:f3:bb:1b:03:a1:0f:72:65Serial Number (int): 14787506600122371786548671743005782629
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fe:aa:0c:c6:7d:46:f6:f8:b1:86:bc:86:55:2f:1d:04:df:ef:dc:6c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 60:0e:96:0b:c4:1b:a4:a0:60:b2:a6:c0:93:d5:24:70:29:f9:b2:17
Fingerprint (sha256): 0c:a7:20:de:2f:ad:cf:00:e6:af:ce:eb:09:c3:ae:ea:38:a2:51:36:77:d4:34:10:a3:28:38:b2:56:5e:6e:08
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate staging.account.clio.services
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.account.clio.services
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.account.clio.services
staging.remi.clio.services
staging-proxy.account.clio.services
staging.remi.clio.services
staging-proxy.account.clio.services
Other certificates including the domain name clio.services
(limited to 100 certificates)
billing.clio.services
staging.account.clio.services
staging.billing.clio.services
docusign.clio.services
docusign.clio.services
service-bucket-ruby.prod-eu-a.clio.services
docusign.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-eu-a.clio.services
formevo.clio.services
staging.account.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.account.clio.services
billing.clio.services
formevo.clio.services
service-bucket-ruby.prod-ca-a.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
formevo.clio.services
docusign.clio.services
staging.account.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging-proxy.grow.clio.services
docusign.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-ca-a.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-au-a.clio.services
staging.grow.clio.com
service-bucket.staging-us-a.clio.services
docusign.clio.services
docusign.clio.services
staging.billing.clio.services
docusign.clio.services
docusign.clio.services
billing.clio.services
staging.billing.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
billing.clio.services
staging.billing.clio.services
billing.clio.services
staging.billing.clio.services
docusign.clio.services
billing.clio.services
staging.account.clio.services
service-bucket-ruby.prod-eu-a.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
billing.clio.services
docusign.clio.services
service-bucket.staging-us-a.clio.services
staging.billing.clio.services
proxy.grow.clio.services
staging.account.clio.services
billing.clio.services
service-bucket-ruby.prod-au-a.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.account.clio.services
*.clio.services
service-bucket-ruby.staging-us-a.clio.services
staging.account.clio.services
billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
docusign.clio.services
proxy.grow.clio.services
staging.grow.clio.com
staging.billing.clio.services
staging.account.clio.services
staging.billing.clio.services
service-bucket.staging-us-a.clio.services
docusign.clio.services
staging.billing.clio.services
staging.remi.clio.services
staging.remi.clio.services
billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging.billing.clio.services
billing.clio.services
billing.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.billing.clio.services
docusign.clio.services
docusign.clio.services
service-bucket-ruby.prod-eu-a.clio.services
docusign.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-eu-a.clio.services
formevo.clio.services
staging.account.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.account.clio.services
billing.clio.services
formevo.clio.services
service-bucket-ruby.prod-ca-a.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
formevo.clio.services
docusign.clio.services
staging.account.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging-proxy.grow.clio.services
docusign.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-ca-a.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-au-a.clio.services
staging.grow.clio.com
service-bucket.staging-us-a.clio.services
docusign.clio.services
docusign.clio.services
staging.billing.clio.services
docusign.clio.services
docusign.clio.services
billing.clio.services
staging.billing.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
billing.clio.services
staging.billing.clio.services
billing.clio.services
staging.billing.clio.services
docusign.clio.services
billing.clio.services
staging.account.clio.services
service-bucket-ruby.prod-eu-a.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
billing.clio.services
docusign.clio.services
service-bucket.staging-us-a.clio.services
staging.billing.clio.services
proxy.grow.clio.services
staging.account.clio.services
billing.clio.services
service-bucket-ruby.prod-au-a.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.account.clio.services
*.clio.services
service-bucket-ruby.staging-us-a.clio.services
staging.account.clio.services
billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
docusign.clio.services
proxy.grow.clio.services
staging.grow.clio.com
staging.billing.clio.services
staging.account.clio.services
staging.billing.clio.services
service-bucket.staging-us-a.clio.services
docusign.clio.services
staging.billing.clio.services
staging.remi.clio.services
staging.remi.clio.services
billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging.billing.clio.services
billing.clio.services
billing.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
Certificate
The complete raw certificate details for staging.account.clio.services in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIQCx/4XXsFKcTzuxsDoQ9yZTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDEyNDAwMDAwMFoXDTI0MDIyMjIzNTk1OVowKDEm MCQGA1UEAxMdc3RhZ2luZy5hY2NvdW50LmNsaW8uc2VydmljZXMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7mSUv6h3W7MCv9MxrI546Cph65jdmx21 Bjzxl652sU1ahJbv9AV9fz+AMFP6q0KFKlMXoz2MIeQgNcaKCSIl7D7oL5WMGyd0 GPOPSPkWt0mRRH2kQkCpRWle3Uu21UNql+rmLTCnbqS9ogeAU/MvLWTn95H88g7t osRYQdGFRrPRNBLikeU/BJqNK2PAbDt5C2E9P4o658T7Yr6bwwAiKBQzVRC4N4Vu L3G2YrwiA68cuYACwHPbjU+WKrsWN6KQfbYyPuuPnQIDHyJCXM2cMi9IdFwLyNnz Wz/rcHDZoR1pdHjqDSY13cT7yWaudN9gJHB4N77JX8DGspXewzcPAgMBAAGjggHK MIIBxjAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU /qoMxn1G9vixhryGVS8dBN/v3GwwaQYDVR0RBGIwYIIdc3RhZ2luZy5hY2NvdW50 LmNsaW8uc2VydmljZXOCGnN0YWdpbmcucmVtaS5jbGlvLnNlcnZpY2VzgiNzdGFn aW5nLXByb3h5LmFjY291bnQuY2xpby5zZXJ2aWNlczAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG Kmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNV HSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAHYk qGkIcBd/zW8IXxRIBXEPqU/qKUw7LWt+z8mp3GEDZereQaDDqz4T56EsFgkR4Qen ejLZY1dOFNc+Kge9wLBIv5YOd0bcbpXVwXYsUb0xmFSyIDc/zaexYxl76RKTd6IL LtBKNJ4Cvl3+aUohBHN4BwTSupxMNHmMTnFHGM5pWzI/yGeFJZQK7TuNr+Uux+Vf 84fLAYRCog9N3n4HljGPPTpcUusPLxevxMOCHv8oS1Diac9xJn94MGep//tldNW/ YYgQj6xiTGxwvK4AnZog+uVWVS3kHg7BJBMF7pvADXbabSEUx2j9pOPDznf/TD/r +blBKYMLF9y2yTsnW5M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse5klL+od1uzAr/TMayO eOgqYeuY3ZsdtQY88ZeudrFNWoSW7/QFfX8/gDBT+qtChSpTF6M9jCHkIDXGigki Jew+6C+VjBsndBjzj0j5FrdJkUR9pEJAqUVpXt1LttVDapfq5i0wp26kvaIHgFPz Ly1k5/eR/PIO7aLEWEHRhUaz0TQS4pHlPwSajStjwGw7eQthPT+KOufE+2K+m8MA IigUM1UQuDeFbi9xtmK8IgOvHLmAAsBz241Pliq7FjeikH22Mj7rj50CAx8iQlzN nDIvSHRcC8jZ81s/63Bw2aEdaXR46g0mNd3E+8lmrnTfYCRweDe+yV/AxrKV3sM3 DwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14787506600122371786548671743005782629 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.account.clio.services' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22461735896750079237758540017327688014601803064707418160728741650136003682011066530822587262960010656261481960774535307841963513405831639836739159517380211541938141782078080775296267146766330748329530141765206156574028017940003608478259791162509025447031973891891036228707493383444568093314882042367540615695068195689810904311114237737217368323867687342059776917027529052132578720198759459307929651136036300265512941460378596276280250727945760798905254180950132906428581084424540050469956490578759593685246417913145285252674820312776312652791013775992663188047493968608452387075830812009339908948399462861431644567311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) feaa0cc67d46f6f8b186bc86552f1d04dfefdc6c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.account.clio.services' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.remi.clio.services' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-proxy.account.clio.services' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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