royal.cookapps.com
Issued by Amazon
About this certificate
This digital certificate with serial number 03:03:67:55:ee:a2:73:d3:fc:13:14:1e:b6:94:a0:cd was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=royal.cookapps.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:03:67:55:ee:a2:73:d3:fc:13:14:1e:b6:94:a0:cdSerial Number (int): 4005356774367167238949484376922300621
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: fe:86:09:15:0c:15:c5:81:53:83:20:92:f5:c3:8a:46:eb:dd:17:6c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): cb:01:f2:f1:43:98:39:90:03:5b:fe:15:7d:a8:51:73:d1:1c:2f:14
Fingerprint (sha256): 11:e2:8e:db:1e:07:c5:ea:22:a6:29:de:04:36:8e:61:82:e6:da:08:44:cc:a8:20:bd:0d:da:df:8a:0e:fe:d7
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate royal.cookapps.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for royal.cookapps.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
royal.cookapps.com
Other certificates including the domain name cookapps.com
(limited to 100 certificates)
artrader.co
cookappsgames.com
www.cookapps.com
*.playgrounds.cookapps.com
happy.cookapps.com
cookapps.com
trello-utils.codelenny.com
*.cookapps.com
*.cookapps.com
alkhabourah.net
royal.cookapps.com
happy.cookapps.com
app.garantiaimoveis.com.br
diggleblitz.cookapps.com
app.socialsense.ai
*.cookapps.com
www.cookapps.com
*.cookapps.com
www.cookapps.com
conf.cookapps.com
cookapps.com
cookapps.com
download.docvita.app
royal.cookapps.com
highlightsnft.com
conf.cookapps.com
cookapps.com
cookapps.com
www.cookapps.com
chrisrohr.app
www.knotspotconnect.app
*.sr.cookapps.com
www.thepeepholepeople.com
fb.voyagers.cc
alldoc.app
makerskitchen.club
www.saasbrew.dev
www.cookapps.com
tempo.live
www.mesh-innovation.com
*.pcdev.cookapps.com
*.pg.cookapps.com
www.cookapps.com
www.splendo.health
happy.cookapps.com
torontotechcompany.com
www.eventosylogistica.net
memar.ae
erispdf.studio
dvptst-link.feliznet.jp
www.easyplaylists.online
cookapps.com
www.cookapps.com
sr-team.cookapps.com
works.cookapps.com
diggle.cookapps.com
www.cookapps.com
*.sr.cookapps.com
globalscience.com.de
*.cookapps.com
*.cookapps.com
survey.cookapps.com
cookapps.com
*.cookapps.com
*.cookapps.com
diggleblitz.cookapps.com
vwn0bx.info
www.cookapps.com
www.giftofcrafttoronto.ca
www.nativeslides.com
apps.afteraction.com
cookappsgames.com
www.tracity.co
vendas.viacertabanking.com.br
makerskitchen.club
www.cookapps.com
soik.me
cookappsgames.com
cedmaan.co.za
diggle.cookapps.com
cookappsgames.com
soik.me
works.cookapps.com
www.momenter.app
*.cookapps.com
*.cookapps.com
spellbindgames.io
littleapi.com
blog.jexport.ci
cookapps.com
www.eventosylogistica.net
cookapps.com
www.cookapps.com
conf.cookapps.com
*.dev.pxp.cookapps.com
www.cookapps.com
www.cookapps.com
www.gofi.ai
*.viva.cookapps.com
royal.cookapps.com
cookappsgames.com
www.cookapps.com
*.playgrounds.cookapps.com
happy.cookapps.com
cookapps.com
trello-utils.codelenny.com
*.cookapps.com
*.cookapps.com
alkhabourah.net
royal.cookapps.com
happy.cookapps.com
app.garantiaimoveis.com.br
diggleblitz.cookapps.com
app.socialsense.ai
*.cookapps.com
www.cookapps.com
*.cookapps.com
www.cookapps.com
conf.cookapps.com
cookapps.com
cookapps.com
download.docvita.app
royal.cookapps.com
highlightsnft.com
conf.cookapps.com
cookapps.com
cookapps.com
www.cookapps.com
chrisrohr.app
www.knotspotconnect.app
*.sr.cookapps.com
www.thepeepholepeople.com
fb.voyagers.cc
alldoc.app
makerskitchen.club
www.saasbrew.dev
www.cookapps.com
tempo.live
www.mesh-innovation.com
*.pcdev.cookapps.com
*.pg.cookapps.com
www.cookapps.com
www.splendo.health
happy.cookapps.com
torontotechcompany.com
www.eventosylogistica.net
memar.ae
erispdf.studio
dvptst-link.feliznet.jp
www.easyplaylists.online
cookapps.com
www.cookapps.com
sr-team.cookapps.com
works.cookapps.com
diggle.cookapps.com
www.cookapps.com
*.sr.cookapps.com
globalscience.com.de
*.cookapps.com
*.cookapps.com
survey.cookapps.com
cookapps.com
*.cookapps.com
*.cookapps.com
diggleblitz.cookapps.com
vwn0bx.info
www.cookapps.com
www.giftofcrafttoronto.ca
www.nativeslides.com
apps.afteraction.com
cookappsgames.com
www.tracity.co
vendas.viacertabanking.com.br
makerskitchen.club
www.cookapps.com
soik.me
cookappsgames.com
cedmaan.co.za
diggle.cookapps.com
cookappsgames.com
soik.me
works.cookapps.com
www.momenter.app
*.cookapps.com
*.cookapps.com
spellbindgames.io
littleapi.com
blog.jexport.ci
cookapps.com
www.eventosylogistica.net
cookapps.com
www.cookapps.com
conf.cookapps.com
*.dev.pxp.cookapps.com
www.cookapps.com
www.cookapps.com
www.gofi.ai
*.viva.cookapps.com
royal.cookapps.com
Certificate
The complete raw certificate details for royal.cookapps.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIQAwNnVe6ic9P8ExQetpSgzTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEwMjIwMDAwMDBaFw0yMDExMjIx MjAwMDBaMB0xGzAZBgNVBAMTEnJveWFsLmNvb2thcHBzLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALDTkcbsAv3LKmeMwl4ClwwVYN8n4fLPsyyT PtgWkVttGYF8WgaL+mOC7CCSR8sdXCYLQ58rTG30wXIYxMBpPgj4Ht4SbjNShxGv iDTogl30xz/Jf1vyIEUq8z9S1Gzqrw/dq3Axi+JGy+fJsymQ8XoneRANk8SunidC INXS06SXMXmwjgYKXkfOuQAlxIt1BaF12nybBX9aHSTuoHdy36qareh9GSdolhGp 7Z/rt7NviGjiMjx6SzV3s3DiRPmvW5sAHL/+ym/y+6XdellmzyY5qwQUlSmC+E4N O2ntSMtA8hKbDXkGH1s7fxNb0sOGNO2RCXMCnllw5y7iHbylf4ECAwEAAaOCAn8w ggJ7MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBT+ hgkVDBXFgVODIJL1w4pG690XbDAdBgNVHREEFjAUghJyb3lhbC5jb29rYXBwcy5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisGAQQB 1nkCBAIEgfYEgfMA8QB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ AAABbfDHgLwAAAQDAEcwRQIge/2KucpgvffsyWT3rFH78QCr7r48tW2I9wdS+6pY HVUCIQC67PULSol3c5j1E5zpLpu6gneD38EYjdKrd9hVrUfrWAB3AId1v+dZfPiM Q5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbfDHgZoAAAQDAEgwRgIhALHPGlp4 ppNzWM3DZwFz1TjIZuXIwfd/CIoZwJgLKPoTAiEAoNLwkVXnkEfTydCXsijjVCfK Z17rrbTbqOBrgn1VLrcwDQYJKoZIhvcNAQELBQADggEBADACGI36HkmmiAqIHO1d CnMHryl5AqYxJjpdCWIVT95PJ4AoQHNT6nLACCyriVbWIbya8FkliKWqL28pcbTx suHk63vMxI1QketCGR1OvMkptkEB8H23yReMrY68429/k1HmuTtGSPZVcAKzfuuy HMSuKdaFQOP4kk8G1NYaLMNTGoy5UcoHX89srpLaU1d2pafo4qwQ7ZarsOCwFBv0 YqHwEAhMtli/2DkDX/p6UqG+7/LuOb7Y7MShkUul2FI79awmTVfawnGV6KCPacuI CjLSS9kIv+P3TzFFaYmlCmrdPIYbcYp4tVFrbRfoB+XinM1Is1+0J0Bla5OPQKd+ y0Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNORxuwC/csqZ4zCXgKX DBVg3yfh8s+zLJM+2BaRW20ZgXxaBov6Y4LsIJJHyx1cJgtDnytMbfTBchjEwGk+ CPge3hJuM1KHEa+INOiCXfTHP8l/W/IgRSrzP1LUbOqvD92rcDGL4kbL58mzKZDx eid5EA2TxK6eJ0Ig1dLTpJcxebCOBgpeR865ACXEi3UFoXXafJsFf1odJO6gd3Lf qpqt6H0ZJ2iWEantn+u3s2+IaOIyPHpLNXezcOJE+a9bmwAcv/7Kb/L7pd16WWbP JjmrBBSVKYL4Tg07ae1Iy0DyEpsNeQYfWzt/E1vSw4Y07ZEJcwKeWXDnLuIdvKV/ gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4005356774367167238949484376922300621 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'royal.cookapps.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22322270454045264540363098097335380460589996643678448218306136011514479723046378491561204921878139249278243893150639230255394683129968125905959297340267871496608220362663064225199398878877504494144009902301130363978958281400833308803604624131606468831110820338230371278340780611753608705096668633292414197922212231515896502898875417781461524157822926332118442689997411491565495582933383408449699217706541891589192257853707753750201656089399599595135067441137407015012396230563188895294563681885062282331343005191730458483007138065071536967836438704476284796552051702725678172435213009223170784739612656967032506777473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fe8609150c15c58153832092f5c38a46ebdd176c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal.cookapps.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df0c780bc000004030047304502207bfd8ab9ca60bdf7ecc964f7ac51fbf100abeebe3cb56d88f70752fbaa581d55022100baecf50b4a89777398f5139ce92e9bba827783dfc1188dd2ab77d855ad47eb580077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df0c7819a0000040300483046022100b1cf1a5a78a6937358cdc3670173d538c866e5c8c1f77f088a19c0980b28fa13022100a0d2f09155e79047d3c9d097b228e35427ca675eebadb4dba8e06b827d552eb7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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