*.doctolib.fr
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:4e:b7:0c:89:31:75:f0:5f:8f:81:1a:1b:22:b6:c7 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.doctolib.fr
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:4e:b7:0c:89:31:75:f0:5f:8f:81:1a:1b:22:b6:c7Serial Number (int): 17688675774324281991302832954871559879
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b8:1a:17:e6:f4:fe:ed:e4:c2:a4:05:d2:1b:42:1a:ac:50:08:2b:1e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 49:47:f2:f9:0d:dd:88:ed:8d:35:65:96:97:a9:5b:22:38:32:59:6c
Fingerprint (sha256): 10:3a:2a:5c:3e:65:9a:ef:28:77:85:8e:10:ea:88:fe:c2:8a:e6:c5:22:04:30:8c:7b:b3:54:88:55:8c:cb:3c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.doctolib.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.doctolib.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.doctolib.fr
Other certificates including the domain name doctolib.fr
(limited to 100 certificates)
statuspage.io
r.ip-6.sib.doctolib.fr
everbrosgames.com
appstatus.dancecapsules.merce.broadleafclients.com
r.ip-1.sib.doctolib.fr
statuspage.io
statuspage.io
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
www.yelobus.app
appstatus.dancecapsules.merce.broadleafclients.com
careers-staging.doctolib.fr
d4.specialcounsel.technology
about.doctolib.fr
status.affirm.com
doctolib.fr
doctocommit.doctolib.fr
doctolib.fr
statuspage.io
d4.specialcounsel.technology
d4.specialcounsel.technology
statuspage.io
admin.crownsbakery.com
r.ip-5.sib.doctolib.fr
img.ip-6.sib.doctolib.fr
statuspage.io
statuspage.io
statuspage.io
doctolib.fr
r.ip-t-1.sib.doctolib.fr
statuspage.io
search-logs.doctolib.fr
statuspage.io
doctolib.fr
statuspage.io
nawaman.net
appstatus.dancecapsules.merce.broadleafclients.com
www.doctolib.fr
img.ip-4.sib.doctolib.fr
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
doctolib.fr
doctolib.fr
info.doctolib.fr
doctolib.fr
statuspage.io
statuspage.io
statuspage.io
statuspage.io
doctolib.fr
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
about-staging.doctolib.fr
r.ip-2.sib.doctolib.fr
statuspage.io
r.ip-1.sib.doctolib.fr
statuspage.io
doctolib.fr
d4.specialcounsel.technology
statuspage.io
r.ip-2.sib.doctolib.fr
statuspage.io
statuspage.io
events-logs-staging.doctolib.com
community.doctolib.fr
statuspage.io
statuspage.io
r.ip-1.sib.doctolib.fr
statuspage.io
doctolib.fr
appstatus.dancecapsules.merce.broadleafclients.com
about-staging.doctolib.fr
r.ip-test.sib.doctolib.fr
doctolib.fr
doctolib.fr
img.ip-2.sib.doctolib.fr
img.ip-2.sib.doctolib.fr
r.ip-1.sib.doctolib.fr
ssl876414.cloudflaressl.com
pablomaronez.com
img.ip-6.sib.doctolib.fr
info-staging.doctolib.de
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
goiasambiental.com.br
statuspage.io
statuspage.io
doctolib.fr
statuspage.io
*.doctolib.fr
statuspage.io
statuspage.io
info-staging.doctolib.fr
statuspage.io
statuspage.io
d4.specialcounsel.technology
doctolib.fr
d4.specialcounsel.technology
d4.specialcounsel.technology
r.ip-6.sib.doctolib.fr
everbrosgames.com
appstatus.dancecapsules.merce.broadleafclients.com
r.ip-1.sib.doctolib.fr
statuspage.io
statuspage.io
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
www.yelobus.app
appstatus.dancecapsules.merce.broadleafclients.com
careers-staging.doctolib.fr
d4.specialcounsel.technology
about.doctolib.fr
status.affirm.com
doctolib.fr
doctocommit.doctolib.fr
doctolib.fr
statuspage.io
d4.specialcounsel.technology
d4.specialcounsel.technology
statuspage.io
admin.crownsbakery.com
r.ip-5.sib.doctolib.fr
img.ip-6.sib.doctolib.fr
statuspage.io
statuspage.io
statuspage.io
doctolib.fr
r.ip-t-1.sib.doctolib.fr
statuspage.io
search-logs.doctolib.fr
statuspage.io
doctolib.fr
statuspage.io
nawaman.net
appstatus.dancecapsules.merce.broadleafclients.com
www.doctolib.fr
img.ip-4.sib.doctolib.fr
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
doctolib.fr
doctolib.fr
info.doctolib.fr
doctolib.fr
statuspage.io
statuspage.io
statuspage.io
statuspage.io
doctolib.fr
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
about-staging.doctolib.fr
r.ip-2.sib.doctolib.fr
statuspage.io
r.ip-1.sib.doctolib.fr
statuspage.io
doctolib.fr
d4.specialcounsel.technology
statuspage.io
r.ip-2.sib.doctolib.fr
statuspage.io
statuspage.io
events-logs-staging.doctolib.com
community.doctolib.fr
statuspage.io
statuspage.io
r.ip-1.sib.doctolib.fr
statuspage.io
doctolib.fr
appstatus.dancecapsules.merce.broadleafclients.com
about-staging.doctolib.fr
r.ip-test.sib.doctolib.fr
doctolib.fr
doctolib.fr
img.ip-2.sib.doctolib.fr
img.ip-2.sib.doctolib.fr
r.ip-1.sib.doctolib.fr
ssl876414.cloudflaressl.com
pablomaronez.com
img.ip-6.sib.doctolib.fr
info-staging.doctolib.de
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
goiasambiental.com.br
statuspage.io
statuspage.io
doctolib.fr
statuspage.io
*.doctolib.fr
statuspage.io
statuspage.io
info-staging.doctolib.fr
statuspage.io
statuspage.io
d4.specialcounsel.technology
doctolib.fr
d4.specialcounsel.technology
d4.specialcounsel.technology
Certificate
The complete raw certificate details for *.doctolib.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcDCCA1igAwIBAgIQDU63DIkxdfBfj4EaGyK2xzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMDcwMDAwMDBaFw0yMDEyMDcx MjAwMDBaMBgxFjAUBgNVBAMMDSouZG9jdG9saWIuZnIwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCy5gvCKRjDKUJHdsqxEvkzTi3Xfm/5qEaZBA1rk/pz WdJQRd8hPisIr+vkbyM12FVFrXczlswXfvzaF165ZP6ePxqokWNZVcKrytHgXKLj fiFpJi8fELB+Xxy2gne++P2ygN+LuxgEuolVqg93msDDZN4Rmwao7jyQZK91Z6GV pAcN9OCE/zS5XqbseRo4wdk54ltFA8/JDGBRDOtEKWKn9sA4uBgtuCMmN5s4j8x+ +BeTitJm9jCOXuW64+cn2bPH87/FceftLF/VEZgOKEu0IWRburUa/YwDwJlnZ9uL P9bHB1SonFiEADKF8mdYXOplvB7VPeSvDVabewEbAGYdAgMBAAGjggGGMIIBgjAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUuBoX5vT+ 7eTCpAXSG0IarFAIKx4wGAYDVR0RBBEwD4INKi5kb2N0b2xpYi5mcjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAI2PHREN9hcN7a2Lkfy0FyEaGtF/be/34fqTfQ MFk0RRj+qSFUno0XGe17ySpjZsex9bOt974bCxMVV2LOj2RbvBu/UVURUtbdn/y0 kNFXOO9ai9iVtdsLDkivqMCmrUJYdykzt/J1UlPzACui/Nz6i7fNUA5/xPqCh5FK 9kDUUiGAUuqo3+sESDsPEMDHEy6U1xwMUXaJl/stzit1IilrAtqvJc/tdaR4w2Wc hLgz1iiNYnbcyisDJbIQmJq6oGXambPX92U065Gip9zYNCUqgomvHn34RKnhhMbe jKmaUMuB3PL8VW+XZ4Swl73bcBe6IooHJ6JzYsqK17GMkIAg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuYLwikYwylCR3bKsRL5 M04t135v+ahGmQQNa5P6c1nSUEXfIT4rCK/r5G8jNdhVRa13M5bMF3782hdeuWT+ nj8aqJFjWVXCq8rR4Fyi434haSYvHxCwfl8ctoJ3vvj9soDfi7sYBLqJVaoPd5rA w2TeEZsGqO48kGSvdWehlaQHDfTghP80uV6m7HkaOMHZOeJbRQPPyQxgUQzrRCli p/bAOLgYLbgjJjebOI/MfvgXk4rSZvYwjl7luuPnJ9mzx/O/xXHn7Sxf1RGYDihL tCFkW7q1Gv2MA8CZZ2fbiz/WxwdUqJxYhAAyhfJnWFzqZbwe1T3krw1Wm3sBGwBm HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17688675774324281991302832954871559879 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.doctolib.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22583858160696165969757627478112832392131674607705763382295733479397558929718257964256770841226661656302730026968882548451980175505795244466145721595084899069056362129600298666069592147513618776549627027063899850370629053651769347061425041356820387126257601575687333451992630829391055487828077300521395310958670482310999532636687114767918385727142078672624744326245969064046189308207519739051711078099636235149049143191484550256212218196815240421596414220275353093828576718752145650379935483356727476588206011365416102063023020425153505881619614399700253252228338484645450725215239180162745589535866497625843843491357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b81a17e6f4feede4c2a405d21b421aac50082b1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctolib.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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