open.futurice.com
Issued by Amazon
About this certificate
This digital certificate with serial number 01:b7:3c:79:89:f4:20:4a:8f:e2:74:ea:f8:55:a4:36 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=open.futurice.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:b7:3c:79:89:f4:20:4a:8f:e2:74:ea:f8:55:a4:36Serial Number (int): 2280644894775249391799908604197577782
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 63:ee:9b:b4:52:42:68:bb:9f:05:5b:0b:5a:a1:82:df:22:33:0d:a7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 4b:d2:8f:3d:a2:0c:7f:42:67:74:6f:7c:9e:09:13:41:c4:94:d0:6c
Fingerprint (sha256): 0d:50:a6:cc:16:7c:9b:c8:4b:06:fc:16:a2:31:db:da:e9:14:21:2f:a2:15:44:0e:21:9f:18:2f:91:a6:89:03
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate open.futurice.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for open.futurice.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
open.futurice.com
*.open.futurice.com
*.open.futurice.com
Other certificates including the domain name futurice.com
(limited to 100 certificates)
southside.futurice.com
intra.futurice.com
hours.futurice.com
futucamp.futurice.com
go.futurice.com
cdn.futurice.com
fira-tyopoyta.futurice.com
cdn.futurice.com
valoisatulevaisuus.futurice.com
haskell.futurice.com
hours.futurice.com
stew.futurice.com
api.fum.futurice.com
travelsurvey.futurice.com
palvelumuotoilu-hackathon.futurice.com
power.futurice.com
play.futurice.com
haskell.futurice.com
xr.futurice.com
open.futurice.com
avalon.futurice.com
intra.futurice.com
login.futurice.com
hours.futurice.com
blog.futurice.com
travelsurvey.futurice.com
beforeiforget.app
meet.futurice.com
iot.futurice.com
www.zebraspring.com
support.futurice.com
play.futurice.com
open.futurice.com
irma.futurice.com
biometrics.futurice.com
haskell.futurice.com
cdn.futurice.com
labs.futurice.com
iot.futurice.com
projectnavigationgame.futurice.com
joukkoliikenne-hackathon.futurice.com
fira-tyopoyta.futurice.com
access.benecontact.com
analytics.futurice.com
go.futurice.com
fum.futurice.com
tyopoyta.fira.fi
intra.futurice.com
confluence.futurice.com
askwhy.fi
www.futurice.com
biometrics.futurice.com
futuwan.futurice.com
beerandtech.futurice.com
jose.futurice.com
fira-tyopoyta.futurice.com
valmistavanteollisuuden-hackathon.futurice.com
theme.futurice.com
stew.futurice.com
valmistavanteollisuuden-hackathon.futurice.com
futuwan.futurice.com
futuhours.futurice.com
bamboo.futurice.com
cdn.futurice.com
valoisatulevaisuus.futurice.com
iot.futurice.com
iot.futurice.com
login.futurice.com
tammerforce.com
go.futurice.com
stew.futurice.com
techweeklies-podcast.futurice.com
futurice.com
analytics.futurice.com
hours.futurice.com
biometrics.futurice.com
wow.futurice.com
haskell-ci-cache.futurice.com
tctvsoctrang.xbot.com.vn
share.futurice.com
stew.futurice.com
cdn.futurice.com
blog.futurice.com
hours.futurice.com
askwhy.fi
palvelumuotoilu-hackathon.futurice.com
outblock.io
play.futurice.com
hours.futurice.com
sodatab.net
beerandtech.futurice.com
docs.futurice.com
requestbin.futurice.com
testliveopen.futurice.com
xr.futurice.com
stew.futurice.com
iot.futurice.com
beerandtech.futurice.com
techweeklies-podcast.futurice.com
support.futurice.com
intra.futurice.com
hours.futurice.com
futucamp.futurice.com
go.futurice.com
cdn.futurice.com
fira-tyopoyta.futurice.com
cdn.futurice.com
valoisatulevaisuus.futurice.com
haskell.futurice.com
hours.futurice.com
stew.futurice.com
api.fum.futurice.com
travelsurvey.futurice.com
palvelumuotoilu-hackathon.futurice.com
power.futurice.com
play.futurice.com
haskell.futurice.com
xr.futurice.com
open.futurice.com
avalon.futurice.com
intra.futurice.com
login.futurice.com
hours.futurice.com
blog.futurice.com
travelsurvey.futurice.com
beforeiforget.app
meet.futurice.com
iot.futurice.com
www.zebraspring.com
support.futurice.com
play.futurice.com
open.futurice.com
irma.futurice.com
biometrics.futurice.com
haskell.futurice.com
cdn.futurice.com
labs.futurice.com
iot.futurice.com
projectnavigationgame.futurice.com
joukkoliikenne-hackathon.futurice.com
fira-tyopoyta.futurice.com
access.benecontact.com
analytics.futurice.com
go.futurice.com
fum.futurice.com
tyopoyta.fira.fi
intra.futurice.com
confluence.futurice.com
askwhy.fi
www.futurice.com
biometrics.futurice.com
futuwan.futurice.com
beerandtech.futurice.com
jose.futurice.com
fira-tyopoyta.futurice.com
valmistavanteollisuuden-hackathon.futurice.com
theme.futurice.com
stew.futurice.com
valmistavanteollisuuden-hackathon.futurice.com
futuwan.futurice.com
futuhours.futurice.com
bamboo.futurice.com
cdn.futurice.com
valoisatulevaisuus.futurice.com
iot.futurice.com
iot.futurice.com
login.futurice.com
tammerforce.com
go.futurice.com
stew.futurice.com
techweeklies-podcast.futurice.com
futurice.com
analytics.futurice.com
hours.futurice.com
biometrics.futurice.com
wow.futurice.com
haskell-ci-cache.futurice.com
tctvsoctrang.xbot.com.vn
share.futurice.com
stew.futurice.com
cdn.futurice.com
blog.futurice.com
hours.futurice.com
askwhy.fi
palvelumuotoilu-hackathon.futurice.com
outblock.io
play.futurice.com
hours.futurice.com
sodatab.net
beerandtech.futurice.com
docs.futurice.com
requestbin.futurice.com
testliveopen.futurice.com
xr.futurice.com
stew.futurice.com
iot.futurice.com
beerandtech.futurice.com
techweeklies-podcast.futurice.com
support.futurice.com
Certificate
The complete raw certificate details for open.futurice.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjTCCA3WgAwIBAgIQAbc8eYn0IEqP4nTq+FWkNjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MDMwMDAwMDBaFw0xOTA5MDMx MjAwMDBaMBwxGjAYBgNVBAMTEW9wZW4uZnV0dXJpY2UuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJLzd63kYuKXc361yd2lshJokvpBy9sIEkrr WTaMag0prOYGdxEnWfrSEFrkUlu61WyLFCYAGZl41J/BTLqNC/2zszfcXSALGDYU x1x9uduJsGj0aeL9V6dB+MRgNQ72FMbpqJYNnJ+JdtnUct7Uc74/fVhrcWGbm0A3 8mpM8iGALSsJ1/sBv4KNFFWak/cEWKzLWkuaV9WpXjZDshNo7yZTk1QRKN350Tr2 gRJszjTNS3EaJiEulLFIqb9IkP+hCH4PE2ogyjk4ZokMcjvw+kC2CdK0d6klsNqA Wgi53Kfhjyq7ToocZ5OlC6EQqwXV/KehufKEnsY4DEBHnnXxIwIDAQABo4IBnzCC AZswHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFGPu m7RSQmi7nwVbC1qhgt8iMw2nMDEGA1UdEQQqMCiCEW9wZW4uZnV0dXJpY2UuY29t ghMqLm9wZW4uZnV0dXJpY2UuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny bC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJ YIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG IWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq aHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1Ud EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB ALDM7ZNeWk04AEC2ztJRh2PYRnekZOn6xHSHdXg8Ob3BV4vhfuvNg9P2OQatV8Af gUJAeQLukB03n2JRnfGXxeZY60s5FgYT2GvqzPAZwVUwB74KoXhA4fBVmd8Eq9Jt G/4X1+LRbiZrCBoL+U0rtNhyVi0woydufj7Mt62b+AwDcDk5V1iPCpCl9RHXog21 jNVLP2XYQqJvbflOgsjFva1MuHiiRIvXmQYWDFSApIwJf/9/51HdLaHCuEyPngtR tbev85cccv9VtrsEostRBpjDaEHnXaNhHGEanYtisz4MNyz45YxEZU9lj9dMRQ9Z 6b42ZAzGEVas/z97I1h3998= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJLzd63kYuKXc361yd2l shJokvpBy9sIEkrrWTaMag0prOYGdxEnWfrSEFrkUlu61WyLFCYAGZl41J/BTLqN C/2zszfcXSALGDYUx1x9uduJsGj0aeL9V6dB+MRgNQ72FMbpqJYNnJ+JdtnUct7U c74/fVhrcWGbm0A38mpM8iGALSsJ1/sBv4KNFFWak/cEWKzLWkuaV9WpXjZDshNo 7yZTk1QRKN350Tr2gRJszjTNS3EaJiEulLFIqb9IkP+hCH4PE2ogyjk4ZokMcjvw +kC2CdK0d6klsNqAWgi53Kfhjyq7ToocZ5OlC6EQqwXV/KehufKEnsY4DEBHnnXx IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2280644894775249391799908604197577782 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'open.futurice.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25320125254237173901239550277836627784033445348050998609159795211097768919311006857567446167143520467515366803304112747324428393072080946471404883659059178688964068811405472109865491963774564538389956314315262547751055675101722224092455473169214057816368362643612814795180130492904635247654117984328384647282799363219594911952995961606610787130163992022226888743329462921505155166932268135793209314424737518759387781894523523287188430130031878509512206512281465184257736155892419919044066929591462571931041783872872574639385175205349530590833938992909969109258712204062923424346819758647399573399773869768426143478051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63ee9bb4524268bb9f055b0b5aa182df22330da7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.futurice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.open.futurice.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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