uat.commerceapi.news.com.au
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 03:4e:4b:56:1e:ff:5b:af:9f:b0:06:c0:d1:0e:65:fa was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=uat.commerceapi.news.com.au
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4e:4b:56:1e:ff:5b:af:9f:b0:06:c0:d1:0e:65:faSerial Number (int): 4394211146255973629430569994468353530
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: fd:ac:22:11:8a:df:0b:43:17:73:18:0d:f0:84:f8:66:13:d6:8b:37
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 95:bb:9f:65:7a:27:4f:ed:c6:67:0d:da:b4:89:35:b5:5a:6f:9b:75
Fingerprint (sha256): 0d:b7:57:08:ad:c3:c1:20:78:db:3f:69:09:10:81:e8:7a:7a:05:7c:a2:eb:25:64:f2:0b:e5:31:64:d3:fc:20
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate uat.commerceapi.news.com.au
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for uat.commerceapi.news.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uat.commerceapi.news.com.au
*.uat.commerceapi.news.com.au
*.uat.commerceapi.news.com.au
Other certificates including the domain name news.com.au
(limited to 100 certificates)
sit.sopsapi.news.com.au
*.talk.kuraprod.cp1.news.com.au
www.stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
www.stacksocial.com
idpdev3.news.com.au
stacksocial.com
sslcam.newsdev.com.au
nlm.uatproxy.news.com.au
news.com.au
stacksocial.com
sslcam.newsdev.com.au
news.com.au
akamai-san174.exacttarget.com
stacksocial.com
stacksocial.com
stacksocial.com
news.com.au
stacksocial.com
www.stacksocial.com
uat.subscriptions.news.com.au
news.com.au
chrome-dot-gng.news.com.au
news.com.au
news.com.au
api.edtech.news.com.au
www.stacksocial.com
stacksocial.com
traktr.news.com.au
news.com.au
sslcam.newsdev.com.au
subscriptions.news.com.au
support.news.com.au
sit.commerceapi.news.com.au
stacksocial.com
news.com.au
*.dcs.news.com.au
amp.news.com.au
stacksocial.com
news.com.au
subscriptions.news.com.au
stacksocial.com
auth-connect.news.com.au
newsletters.news.com.au
news.com.au
ausbots.fbbot.news.com.au
news.com.au
news.com.au
www.stacksocial.com
stacksocial.com
*.news.com.au
www.stacksocial.com
newsletters.news.com.au
news.com.au
stacksocial.com
*.kurator.kuradev.cp1.news.com.au
stacksocial.com
uat.commerceapi.news.com.au
chrome-dot-gng.news.com.au
stacksocial.com
news.com.au
stacksocial.com
stacksocial.com
news.com.au
newsdev.com.au
newsdev.com.au
uatproxy.news.com.au
amp.news.com.au
gng.news.com.au
news.com.au
markets.news.com.au
sslcam.newsdev.com.au
stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
newsdev.com.au
newsdev.com.au
news.com.au
*.talk.kuradev.cp1.news.com.au
sit.graphql.news.com.au
uatproxy.news.com.au
news.com.au
newsdev.com.au
stacksocial.com
stacksocial.com
chartbeast.news.com.au
metrics.news.com.au
stacksocial.com
sslcam.newsdev.com.au
stacksocial.com
www.stacksocial.com
myprofile.news.com.au
news.com.au
news.com.au
newsletters.news.com.au
weather.news.com.au
news.com.au
*.talk.kuraprod.cp1.news.com.au
www.stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
www.stacksocial.com
idpdev3.news.com.au
stacksocial.com
sslcam.newsdev.com.au
nlm.uatproxy.news.com.au
news.com.au
stacksocial.com
sslcam.newsdev.com.au
news.com.au
akamai-san174.exacttarget.com
stacksocial.com
stacksocial.com
stacksocial.com
news.com.au
stacksocial.com
www.stacksocial.com
uat.subscriptions.news.com.au
news.com.au
chrome-dot-gng.news.com.au
news.com.au
news.com.au
api.edtech.news.com.au
www.stacksocial.com
stacksocial.com
traktr.news.com.au
news.com.au
sslcam.newsdev.com.au
subscriptions.news.com.au
support.news.com.au
sit.commerceapi.news.com.au
stacksocial.com
news.com.au
*.dcs.news.com.au
amp.news.com.au
stacksocial.com
news.com.au
subscriptions.news.com.au
stacksocial.com
auth-connect.news.com.au
newsletters.news.com.au
news.com.au
ausbots.fbbot.news.com.au
news.com.au
news.com.au
www.stacksocial.com
stacksocial.com
*.news.com.au
www.stacksocial.com
newsletters.news.com.au
news.com.au
stacksocial.com
*.kurator.kuradev.cp1.news.com.au
stacksocial.com
uat.commerceapi.news.com.au
chrome-dot-gng.news.com.au
stacksocial.com
news.com.au
stacksocial.com
stacksocial.com
news.com.au
newsdev.com.au
newsdev.com.au
uatproxy.news.com.au
amp.news.com.au
gng.news.com.au
news.com.au
markets.news.com.au
sslcam.newsdev.com.au
stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
newsdev.com.au
newsdev.com.au
news.com.au
*.talk.kuradev.cp1.news.com.au
sit.graphql.news.com.au
uatproxy.news.com.au
news.com.au
newsdev.com.au
stacksocial.com
stacksocial.com
chartbeast.news.com.au
metrics.news.com.au
stacksocial.com
sslcam.newsdev.com.au
stacksocial.com
www.stacksocial.com
myprofile.news.com.au
news.com.au
news.com.au
newsletters.news.com.au
weather.news.com.au
news.com.au
Certificate
The complete raw certificate details for uat.commerceapi.news.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgIQA05LVh7/W6+fsAbA0Q5l+jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDQyMTAwMDAwMFoXDTI0MDUxOTIzNTk1OVowJjEk MCIGA1UEAxMbdWF0LmNvbW1lcmNlYXBpLm5ld3MuY29tLmF1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA1NYoxrel0X24iKWlUraAujXLRPLR2ktpcp VdQ7s9sUUglDsDlCdwxRD3HlhxZIjU0443nuGArc6HLNAtmbqoWh5WClyDL30PHq INg+UeDHCe+rKd0bHhA2JLlwPcvgLxGiLAZV4RjyvlxtW8TvHrRlVfxy6tjXL+cy aLnYh8qFnvEV0tIqWEEzv75oGQ7K520MVsQ7/coGT2KSNYDHUmW2/cPsp4DVd2aw kL9439QAnG6LmQIYa/zsjv/ZzLM0RCTbn6t9MkCTVKVauy1fj0aJ4nTYwH2FaxtF C5f/T06RVzuB7SkyZEcgdxSI1HUUb0R3JlFzXHLGO0ik+FCvFwIDAQABo4IDEzCC Aw8wHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFP2s IhGK3wtDF3MYDfCE+GYT1os3MEUGA1UdEQQ+MDyCG3VhdC5jb21tZXJjZWFwaS5u ZXdzLmNvbS5hdYIdKi51YXQuY29tbWVyY2VhcGkubmV3cy5jb20uYXUwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0w Mi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG AQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYB BQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNl cjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/ Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYehunRDAAAEAwBHMEUCICET HponG+IX8MZKEs7HP7WyZ8sLCgBTM99sJWHqbkn4AiEAyQ9Aq5gHjTltovVTE6Vw eK70xjqDyS4oRCc8wSCCY1IAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r OdiEcwAAAYehunQtAAAEAwBIMEYCIQD9R/jgRgPB6sSPl7lDcjlEgDpbuXvqOWCu ndDtCoRc8wIhALRK6WV4eQ/ktE4ekvAabOqbyALJDVPG4klW/7QuDe0dAHUA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGHobpz+wAABAMARjBEAiBa sg0/7gX34BF7iAImuUCIP3zVnFaU58B8jxC6Ub2PmgIgRmpmsh/csMXl3Fkxs+cR i6oNTxw8Bmt5NFNy2Du7oyowDQYJKoZIhvcNAQELBQADggEBACgbL88lM5WoXTKt AZPN/to8QOtVKEpYIwSt5M2FTed0RVIHftAdud089rCHGlqe1pTFiAWU4Whr/jH8 Fg7dcDWiwr48OMjWm8KQW42BJI1sT8LdkX5UNR0CJ1dMkTYODLoHBD9EL/jxAIM2 g/9hzVwdlnfRjtDAUthPA5QtQ2dXb7IM9VR5gHWpFB//2AS7tsQWIeyJcyLKoRGj wNetXX928ADoL8NpUfHwjduDcYeZCVrTHDyWNcDI9fswjMuVDKKdyfH3K0cx3Vgi n/13broM7u/jRVlbc3r1aaWJZAyYjVf5RPJW92xEk/a3k5M3nyN3C2nxDJWjuigR oFtpUzw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA1NYoxrel0X24iKWlUr aAujXLRPLR2ktpcpVdQ7s9sUUglDsDlCdwxRD3HlhxZIjU0443nuGArc6HLNAtmb qoWh5WClyDL30PHqINg+UeDHCe+rKd0bHhA2JLlwPcvgLxGiLAZV4RjyvlxtW8Tv HrRlVfxy6tjXL+cyaLnYh8qFnvEV0tIqWEEzv75oGQ7K520MVsQ7/coGT2KSNYDH UmW2/cPsp4DVd2awkL9439QAnG6LmQIYa/zsjv/ZzLM0RCTbn6t9MkCTVKVauy1f j0aJ4nTYwH2FaxtFC5f/T06RVzuB7SkyZEcgdxSI1HUUb0R3JlFzXHLGO0ik+FCv FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4394211146255973629430569994468353530 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.commerceapi.news.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19194781956044727860919738929066085395620241859055078670256801178416370564310864540199444037308697528773926347300205579503495387926661584491741183442262968889503794521513899971957145953010383512981003960685725837281343211397125426148641156110301676116649827947615718052654777103328903605379916048753140870749084801518669062675097116900917727857527821402147188955943244642422115729354449450887486777473724497622501890699182547109190184606618111809283313092833217873824458767729554521866040482492680249029104467351632693013192179264485996624648567065786646689399288049357828155701765596734118534289505932610036900605719 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fdac22118adf0b431773180df084f86613d68b37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerceapi.news.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.commerceapi.news.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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