*.pocketpoints.com
Issued by Amazon
About this certificate
This digital certificate with serial number 05:02:64:17:1d:6a:5c:3f:cd:56:fd:07:4c:aa:23:57 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.pocketpoints.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:02:64:17:1d:6a:5c:3f:cd:56:fd:07:4c:aa:23:57Serial Number (int): 6658554644953399071254005840863699799
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: af:1f:41:d5:71:73:ef:cb:0f:af:21:92:0b:b4:ed:8a:53:9b:35:f2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): a4:ff:68:3f:ed:d2:b9:6f:d1:c6:63:ac:a2:bb:3f:73:3a:8c:ff:8e
Fingerprint (sha256): 0d:89:e7:47:f1:bd:eb:8d:31:a9:f6:ba:d2:03:1c:ae:41:dd:e4:33:5f:57:8f:d7:e7:be:9d:91:c2:3b:ce:e0
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.pocketpoints.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.pocketpoints.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.pocketpoints.com
Other certificates including the domain name pocketpoints.com
(limited to 100 certificates)
vendor.univo.app
dc1htw4u.savvysuit.com
www.tomassodigital.com
www.puffymore.com
brunaneri.com
homepage-dev.pocketpoints.com
cdn.superweb.vn
cheapshot.co
kmetijagorjup.ml
*.pocketpoints.com
vanves-victor-hugo.corehab.fr
app.rodom.com.br
confeccionesnicco.com
www.uiregex.com
incapsula.com
incapsula.com
incapsula.com
michaeldistel.com
getguysintogoatcube.com
www.shtanko.dev
incapsula.com
incapsula.com
www.racot-headspa.com
pocketpoints.com
last-fm.carlosagosto.com
www.couplessexquiz.com
pawelstryzh.com
salinawu.com
www.rewards-beta.pocketpoints.com
incapsula.com
incapsula.com
hamzaozturk.com.tr
*.pocketpoints.com
www.kimsdentalcare.com
collabs.app
incapsula.com
solutions.pocketpoints.com
fag.ai
incapsula.com
incapsula.com
www.bizlinkdxb.com
incapsula.com
ecommerce.pocketpoints.com
aac.roomin.app
fundfigure.com
eclat.inspey.com
isehararenkei.info
partypay.nl
doconline.care
try.pocketpoints.com
authentication.openhouse.ai
ecommerce.pocketpoints.com
adash.app
orya.app
www.rewards.pocketpoints.com
www.panamonitor.com
incapsula.com
maps.agrisense.live
aarnavjindal.com
www.messzz.com
www.anttikeinonen.fi
jackwgray.com
dariuszczajka.com
say-wot.com
getguysintogoatcube.com
pocketpoints.com
bz.chance-store.jp
pocketpoints.com
snuheme.org
*.pocketpoints.com
fleury.goshift.com.br
www.armarinhospalmares.com.br
last-fm.carlosagosto.com
incapsula.com
app.snailpo.st
www.asuulga.mn
charytime.app
incapsula.com
team.dev.usekeepers.com
www.morgue.city
overt.app
athmons.com
iaaps1.vidocto.com
ngonimujuru.com
marquette.marketing
klfit.co.uk
incapsula.com
udec-predev.klarway.com
www.odky.tokyo
incapsula.com
billmader.com
*.pocketpoints.com
sentryspotlight.com
incapsula.com
incapsula.com
sambarbershop.it
litovski.info
incapsula.com
www.greeninfernoband.com
incapsula.com
dc1htw4u.savvysuit.com
www.tomassodigital.com
www.puffymore.com
brunaneri.com
homepage-dev.pocketpoints.com
cdn.superweb.vn
cheapshot.co
kmetijagorjup.ml
*.pocketpoints.com
vanves-victor-hugo.corehab.fr
app.rodom.com.br
confeccionesnicco.com
www.uiregex.com
incapsula.com
incapsula.com
incapsula.com
michaeldistel.com
getguysintogoatcube.com
www.shtanko.dev
incapsula.com
incapsula.com
www.racot-headspa.com
pocketpoints.com
last-fm.carlosagosto.com
www.couplessexquiz.com
pawelstryzh.com
salinawu.com
www.rewards-beta.pocketpoints.com
incapsula.com
incapsula.com
hamzaozturk.com.tr
*.pocketpoints.com
www.kimsdentalcare.com
collabs.app
incapsula.com
solutions.pocketpoints.com
fag.ai
incapsula.com
incapsula.com
www.bizlinkdxb.com
incapsula.com
ecommerce.pocketpoints.com
aac.roomin.app
fundfigure.com
eclat.inspey.com
isehararenkei.info
partypay.nl
doconline.care
try.pocketpoints.com
authentication.openhouse.ai
ecommerce.pocketpoints.com
adash.app
orya.app
www.rewards.pocketpoints.com
www.panamonitor.com
incapsula.com
maps.agrisense.live
aarnavjindal.com
www.messzz.com
www.anttikeinonen.fi
jackwgray.com
dariuszczajka.com
say-wot.com
getguysintogoatcube.com
pocketpoints.com
bz.chance-store.jp
pocketpoints.com
snuheme.org
*.pocketpoints.com
fleury.goshift.com.br
www.armarinhospalmares.com.br
last-fm.carlosagosto.com
incapsula.com
app.snailpo.st
www.asuulga.mn
charytime.app
incapsula.com
team.dev.usekeepers.com
www.morgue.city
overt.app
athmons.com
iaaps1.vidocto.com
ngonimujuru.com
marquette.marketing
klfit.co.uk
incapsula.com
udec-predev.klarway.com
www.odky.tokyo
incapsula.com
billmader.com
*.pocketpoints.com
sentryspotlight.com
incapsula.com
incapsula.com
sambarbershop.it
litovski.info
incapsula.com
www.greeninfernoband.com
incapsula.com
Certificate
The complete raw certificate details for *.pocketpoints.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIQBQJkFx1qXD/NVv0HTKojVzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAyMTgwMDAwMDBaFw0yMDAzMTgx MjAwMDBaMB0xGzAZBgNVBAMMEioucG9ja2V0cG9pbnRzLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOvO/zypL1ogzQte79Ay3h792hU6RRpQ6IV1 jGuJMrSKHkDBWzYH9moqmKyeCPbDA8RMBs5Ui2LYq3e4ER0SqxP+aFxdHXNGwFWm aJG6CCG9hHwkFtQZ7DFzN2avykvyNen5EZOga+TlehF19Rqs9ZRmVT/3A2s7xNgq UTc729JYY4dgsN+6ssYBYLFPd4uJPPwUQ7pEtPWAjz1yvP89jJ9KAHhN2kkYRHEN 0u4sBzhLmAiqhUYt/7G/FB5wprnv/ngocxPK/a+B6FPefsPrJJ/SJTv7JDvVV5NL nkRyRwfsvwtswG97gsYupOMbfXQm3SU1gHevmBiNjlVmYYDDf9MCAwEAAaOCAn8w ggJ7MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSv H0HVcXPvyw+vIZILtO2KU5s18jAdBgNVHREEFjAUghIqLnBvY2tldHBvaW50cy5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisGAQQB 1nkCBAIEgfYEgfMA8QB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3L AAABaP6i+PsAAAQDAEcwRQIhAKCKou38Z7f9Wouk5um5YMsaWzrwXzNBcV99L7AS 8KBxAiBjJQ11etRMaLbv6AdUXHP4vnzicmrZy685rOJ36v7oXQB3AId1v+dZfPiM Q5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABaP6i+fcAAAQDAEgwRgIhAIClb/R8 ZseZKoBmJm1u4KO7cVctsa9Fl3aG3ec8/wtLAiEAyvqfK0JkVz7Tg+Yj9r1IF+VT SfuTaRKUI4IbYZUh6VUwDQYJKoZIhvcNAQELBQADggEBAJMbQlL7JUxz5yL6EEt0 ekUsz/bqW5NNE/CT07MOygNoYtfVVbxNppoEORrPiynQZiS/ku9N67SGEqPFm7Lg afmzmSNWE0/Ce4uX+f9A3sfRS7z66kUQrSOTeMatM4zHfVSFvnDNXA4QUXPqhZxC E148kLl+D0puhkwuKRWLo22dBs7U7jVKrQbso/EbygjAbtwI4cSxgMHQfrETUnvm qkg94iYba38UkaQR0jqB73fp7yEyIIMwqwUWucUiJura8AlnxNVGDXBwjHFhSNjp fR3olH25uK1op/FdQSTWenAGUcveN1SM/VfW/ntI34y95Ag8f5aqSGjEM4dmmMCL St8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA687/PKkvWiDNC17v0DLe Hv3aFTpFGlDohXWMa4kytIoeQMFbNgf2aiqYrJ4I9sMDxEwGzlSLYtird7gRHRKr E/5oXF0dc0bAVaZokboIIb2EfCQW1BnsMXM3Zq/KS/I16fkRk6Br5OV6EXX1Gqz1 lGZVP/cDazvE2CpRNzvb0lhjh2Cw37qyxgFgsU93i4k8/BRDukS09YCPPXK8/z2M n0oAeE3aSRhEcQ3S7iwHOEuYCKqFRi3/sb8UHnCmue/+eChzE8r9r4HoU95+w+sk n9IlO/skO9VXk0ueRHJHB+y/C2zAb3uCxi6k4xt9dCbdJTWAd6+YGI2OVWZhgMN/ 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6658554644953399071254005840863699799 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pocketpoints.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29768075701622326861240838442487986926206285204878628951007470701778297007735335892672380585739951370406799270544853838763369746039753502326206610940768223476003020688915506142300022979081870087786471135805227261889391464650593938351119931156426417283567528488268815201306497910746945471916985969692274699651338890670652891470885669486495477490586544424830721279022559831825667031722994433915526142723407814586849316187427834063682552240975320512152714073766191379386826644061382409613172695975788769800689356191830415632082195899110375351688464082563041889801740969175300711640800558712544935804454172957256850833363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af1f41d57173efcb0faf21920bb4ed8a539b35f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pocketpoints.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168fea2f8fb0000040300473045022100a08aa2edfc67b7fd5a8ba4e6e9b960cb1a5b3af05f3341715f7d2fb012f0a071022063250d757ad44c68b6efe807545c73f8be7ce2726ad9cbaf39ace277eafee85d0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168fea2f9f7000004030048304602210080a56ff47c66c7992a8066266d6ee0a3bb71572db1af45977686dde73cff0b4b022100cafa9f2b4264573ed383e623f6bd4817e55349fb9369129423821b619521e955 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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