journalist.stg.wsj.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:b9:e9:48:65:de:09:1c:02:91:68:71:31:44:c4:9d was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=journalist.stg.wsj.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:b9:e9:48:65:de:09:1c:02:91:68:71:31:44:c4:9dSerial Number (int): 16916042405639695994267436392712029341
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e7:86:f5:af:8e:1f:1f:86:45:30:ae:f2:09:25:3b:76:36:c8:aa:75
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 56:7e:c2:0d:13:5b:14:2d:ae:47:dc:f2:96:fe:fa:54:c8:89:bd:f1
Fingerprint (sha256): 0f:0f:ef:fd:b5:a4:3e:fb:2f:fc:cb:fb:23:5e:7d:27:76:6c:d3:33:52:75:bf:4c:f0:d1:fe:90:b3:49:62:d8
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate journalist.stg.wsj.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for journalist.stg.wsj.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
journalist.stg.wsj.com
Other certificates including the domain name wsj.com
(limited to 100 certificates)
mlnewsplus.wsj.com
customercenter.wsj.com
suggest.factiva.com
brand.stg.dowjones.com
cmonetwork.wsj.com
iwap.wsj.com
id.cn.wsj.com
accounts.dowjones.com
suggest.int.factiva.com
on.wsj.com
iphonetest.wsj.com
credit-card-api-00.store.wsj.com
blueprint.stg.wsj.com
blue-partner.wsj.com
customercenter.wsj.com
accounts.dowjones.com
newsplus.int.wsj.com
newsplus.wsj.com
asia.buy.wsj.com
ssl.wsj.com
print.wsj.com
www.wsj.com
conferences.wsj.com
wsjtechhealth.wsj.com
setup.wsj.com
commenting.wsj.com
*.d.dev.wsj.com
ae.wsj.com
confirm.wsj.com
subscribe.wsj.com
ssl.wsj.com
print.wsj.com
update.wsj.com
projects.wsj.com
education.wsj.com
payment-01.store.wsj.com
chat.wsj.com
adfinder.wsj.com
r-uat.smpdev.wsj.com
guides.wsj.com
newsplus.wsj.com
*.wsj.com
stg.accounts.dowjones.com
www.s.dev.wsj.com
professor.wsj.com
www.s.dev.realestate.wsj.com
contact.wsj.com
www.s.dev.wsj.com
amp.wsj.com
sm.wsj.com
confirm.s.dev.wsj.com
CONTACT.WSJ.COM
deloitte.stg.wsj.com
*.s.dev.wsj.com
at.wsj.com
partner.wsj.com
iphonetest.wsj.com
newsplus.web.prod.pib.dowjones.io
professional.wsj.com
financialcrisis.wsj.com
highschool.wsj.com
r.wsj.com
prepare.wsj.com
ceocouncil.wsj.com
*.stg.dowjones.com
partners.wsj.com
foefestival.wsj.com
newsplus.web.prod.pib.dowjones.io
amp.wsj.com
mlsignin.stg.wsj.com
suggest.dowjones.com
chat.s.dev.wsj.com
v2.pixel.djp.data.newscorp.com
*.wsj.com
test9.dowjones.com
sbk-beta.asia.wsj.com
store.wsj.com
login.wsj.com
*.dowjones.com
cyber.pro.wsj.com
commerce.wsj.com
journalist.wsj.com
investinginafrica.wsj.com
am.wsj.com
global.factiva.com
accounts.dowjones.com
classifieds.wsj.com
store.wsj.com
customercenter.wsj.com
buy.wsj.com
confirm.wsj.com
blue-customercenter.wsj.com
journalist.stg.wsj.com
financingthefuture.stg.wsj.com
prod.payment.store.wsj.com
on.wsj.com
bbtest.wsj.com
commercialpartnerships.wsj.com
journalist.wsj.com
print.wsj.com
customercenter.wsj.com
suggest.factiva.com
brand.stg.dowjones.com
cmonetwork.wsj.com
iwap.wsj.com
id.cn.wsj.com
accounts.dowjones.com
suggest.int.factiva.com
on.wsj.com
iphonetest.wsj.com
credit-card-api-00.store.wsj.com
blueprint.stg.wsj.com
blue-partner.wsj.com
customercenter.wsj.com
accounts.dowjones.com
newsplus.int.wsj.com
newsplus.wsj.com
asia.buy.wsj.com
ssl.wsj.com
print.wsj.com
www.wsj.com
conferences.wsj.com
wsjtechhealth.wsj.com
setup.wsj.com
commenting.wsj.com
*.d.dev.wsj.com
ae.wsj.com
confirm.wsj.com
subscribe.wsj.com
ssl.wsj.com
print.wsj.com
update.wsj.com
projects.wsj.com
education.wsj.com
payment-01.store.wsj.com
chat.wsj.com
adfinder.wsj.com
r-uat.smpdev.wsj.com
guides.wsj.com
newsplus.wsj.com
*.wsj.com
stg.accounts.dowjones.com
www.s.dev.wsj.com
professor.wsj.com
www.s.dev.realestate.wsj.com
contact.wsj.com
www.s.dev.wsj.com
amp.wsj.com
sm.wsj.com
confirm.s.dev.wsj.com
CONTACT.WSJ.COM
deloitte.stg.wsj.com
*.s.dev.wsj.com
at.wsj.com
partner.wsj.com
iphonetest.wsj.com
newsplus.web.prod.pib.dowjones.io
professional.wsj.com
financialcrisis.wsj.com
highschool.wsj.com
r.wsj.com
prepare.wsj.com
ceocouncil.wsj.com
*.stg.dowjones.com
partners.wsj.com
foefestival.wsj.com
newsplus.web.prod.pib.dowjones.io
amp.wsj.com
mlsignin.stg.wsj.com
suggest.dowjones.com
chat.s.dev.wsj.com
v2.pixel.djp.data.newscorp.com
*.wsj.com
test9.dowjones.com
sbk-beta.asia.wsj.com
store.wsj.com
login.wsj.com
*.dowjones.com
cyber.pro.wsj.com
commerce.wsj.com
journalist.wsj.com
investinginafrica.wsj.com
am.wsj.com
global.factiva.com
accounts.dowjones.com
classifieds.wsj.com
store.wsj.com
customercenter.wsj.com
buy.wsj.com
confirm.wsj.com
blue-customercenter.wsj.com
journalist.stg.wsj.com
financingthefuture.stg.wsj.com
prod.payment.store.wsj.com
on.wsj.com
bbtest.wsj.com
commercialpartnerships.wsj.com
journalist.wsj.com
print.wsj.com
Certificate
The complete raw certificate details for journalist.stg.wsj.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQDLnpSGXeCRwCkWhxMUTEnTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTYwMDAwMDBaFw0yMTAyMTYx MjAwMDBaMCExHzAdBgNVBAMTFmpvdXJuYWxpc3Quc3RnLndzai5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBgKps+1XUuy5JRTi134xbstdPXmB nPpNVdtpKZzeWB/l3XpPFLMwn/qZGckcPRAhYjjYbOkATOB/WZ6swJm25BGrf+lk +kFr5IFpFSB7XHlk9AD5V16HY6W9jAnnV8l3mg3Dga0WL3XPBmndAjf0sYrK9A/Z 8XUtJ03vTkDtgUxmDMPshuBjq3NowzYgZu+T/HpzgNr+AsEQZDyNyHd07iSZRkMl ekKGIqbDiF+dKjRfNZwKg54brFarsWduSX/yfqTdLZAwpuAnChiLanSOv5wClXbZ cv1iI5IGHFLpx09I5Lw3kv0VXkU2McmFWD8Ix2mFtxGkthEH/eVDXDl3AgMBAAGj ggGPMIIBizAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQU54b1r44fH4ZFMK7yCSU7djbIqnUwIQYDVR0RBBowGIIWam91cm5hbGlzdC5z dGcud3NqLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA53BuaJ+igVBFL mKWWazPHUucnCgrVCtK5vAHRYKMlWso92zctlnumF4pXwZ2FS1McRtrpDN+lUhWL bIwS2WOSZdpI8qNV1cOec+WtRo18ysNK+YvwkhyvQX5gM8+yPCVvWw0B0RgmOt6Z WjvH6Uoou3ovdi2xgIk+SPRG7lkYWkFFz7+WoZYLnSfWzVZnvK9yAx5+e16O3/PN dCVk0cOc3qbcHULiaKzbRs0CcoQ5ytbl/XrUwNKu7ofeoAJBFG3ss/pGBzjsFnKA 9bGcuqkEg/kan7gVgODVFrdWw2JzqW7wLDehMUnbiAoOATGhJmxSshY87YQBa8xS SK0odEVR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gYCqbPtV1LsuSUU4td+ MW7LXT15gZz6TVXbaSmc3lgf5d16TxSzMJ/6mRnJHD0QIWI42GzpAEzgf1merMCZ tuQRq3/pZPpBa+SBaRUge1x5ZPQA+Vdeh2OlvYwJ51fJd5oNw4GtFi91zwZp3QI3 9LGKyvQP2fF1LSdN705A7YFMZgzD7IbgY6tzaMM2IGbvk/x6c4Da/gLBEGQ8jch3 dO4kmUZDJXpChiKmw4hfnSo0XzWcCoOeG6xWq7Fnbkl/8n6k3S2QMKbgJwoYi2p0 jr+cApV22XL9YiOSBhxS6cdPSOS8N5L9FV5FNjHJhVg/CMdphbcRpLYRB/3lQ1w5 dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16916042405639695994267436392712029341 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'journalist.stg.wsj.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27522914322270995630868129087862543190092733265307465433982278311262279789348222765983806213795767698394694339830722353631545736293860797794972074115082762920506069635606751969701688312953367483645117394772467430066240338539220514423447132957362937983974468051880622986701440894938778914077855037367596739078416715028337745669394568791436402896365493803298820069226869374021504653611757552650564396409410365944579504884138828941098807183944464021686965319741229637043592778142372574382228483881260070073234619413695457531982460014498272366560455186921663592433911102079542694958544598992682681462605179497212651780471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e786f5af8e1f1f864530aef209253b7636c8aa75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalist.stg.wsj.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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