*.api.insent.ai
Issued by Amazon
About this certificate
This digital certificate with serial number 03:92:75:93:7f:49:67:0a:9b:67:92:41:f6:6c:a1:85 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.api.insent.ai
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:92:75:93:7f:49:67:0a:9b:67:92:41:f6:6c:a1:85Serial Number (int): 4748144056557683726330049503106474373
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 62:f0:17:cf:a7:b5:e1:0e:33:3c:55:55:a7:44:a7:2f:d7:03:d3:ba
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 98:1b:42:91:0c:aa:26:4d:82:e4:7b:77:d6:95:f9:f7:7f:2e:ae:3d
Fingerprint (sha256): 12:cd:5d:e3:e7:70:df:20:ec:51:90:e2:03:ff:b4:5b:0c:28:f8:f0:52:ed:0a:ed:ab:fe:f5:c2:c0:0c:ea:7f
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.api.insent.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.api.insent.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.api.insent.ai
Other certificates including the domain name insent.ai
(limited to 100 certificates)
govcloud-status.elastic.co
careers.insent.ai
insent.ai
myhr.rangercollege.edu
hrms.trnetworkconsulting.com
dev-fe.insent.ai
app.sportpals.net
govcloud-status.elastic.co
newpeace.jp
help.insent.ai
www.oscarbolivarphoto.com
people.insent.ai
cutygost.com
insent.ai
people.ats.ae
edifecs.widget.insent.ai
email.insent.ai
govcloud-status.elastic.co
virtualcampustour.leeds.ac.uk
myhr.ethnos.com.ng
www.tasksboard.com
msnking.com
myhr.rangercollege.edu
people.hidy-tech.com
www.bandthrift.com
portal.mytogs.co.nz
reach.insent.ai
www.flukkord.com
govcloud-status.elastic.co
us1certificate-3-202205050423.us1.outplayr.com
stage.domdaria.com
app.insent.ai
flokwok.com
kabanasacai.com.br
app-dev.bluemirror.ai
help.insent.ai
admin.doctor365.kr
oauth-geocaching.locusmap.eu
www.botls.app
govcloud-status.elastic.co
us1certificate-1-202202250731.us1.outplayr.com
www.future.plus
us1certificate-3-202205191313.us1.outplayr.com
insent.ai
shouldiuseflex.com
pushnotificationtest.insent.ai
www.seestadt.city
www.sandbox.web-test.insent.ai
www.jimeneztirado.com
maki.tolentino.xyz
*.api.insent.ai
govcloud-status.elastic.co
govcloud-status.elastic.co
int.360live.app
people.countone.co.zw
reach.insent.ai
*.insent.ai
people.nexstor.co.uk
*.insent.ai
*.insent.ai
prod-be.insent.ai
us1certificate-3-202205110845.us1.outplayr.com
govcloud-status.elastic.co
us1certificate-1-202203310609.us1.outplayr.com
*.insent.ai
us1certificate-3-202203270832.us1.outplayr.com
insent.ai
ppa.taneko.net
prod-be.insent.ai
us1certificate-3-202204191013.us1.outplayr.com
join.gdgadoekiti.com
us1certificate-3-202204120619.us1.outplayr.com
live.fruenshus.dk
hrm.motormata.com
myhr.rangercollege.edu
us1certificate-1-202202021459.us1.outplayr.com
us1certificate-2-202203200529.us1.outplayr.com
app.insent.ai
email.insent.ai
identitywidget1.insent.ai
work.knoxpo.com
prod-fe.insent.ai
reflect.burson.family
edifecs.api.insent.ai
dev--console.getdispatch.app
insent.ai
myhr.rangercollege.edu
*.api.insent.ai
people.rmggroup.com
prod-fe.insent.ai
dev-fe.insent.ai
people.plur.events
hrm.motormata.com
teamhub.ilikeagency.co
dev-be.insent.ai
showcase.hsvinnovations.com
cadastro.turbi.com.br
www.stopapp.cl
office.webmantra360.com
myhr.greatwildwolf.com
careers.insent.ai
insent.ai
myhr.rangercollege.edu
hrms.trnetworkconsulting.com
dev-fe.insent.ai
app.sportpals.net
govcloud-status.elastic.co
newpeace.jp
help.insent.ai
www.oscarbolivarphoto.com
people.insent.ai
cutygost.com
insent.ai
people.ats.ae
edifecs.widget.insent.ai
email.insent.ai
govcloud-status.elastic.co
virtualcampustour.leeds.ac.uk
myhr.ethnos.com.ng
www.tasksboard.com
msnking.com
myhr.rangercollege.edu
people.hidy-tech.com
www.bandthrift.com
portal.mytogs.co.nz
reach.insent.ai
www.flukkord.com
govcloud-status.elastic.co
us1certificate-3-202205050423.us1.outplayr.com
stage.domdaria.com
app.insent.ai
flokwok.com
kabanasacai.com.br
app-dev.bluemirror.ai
help.insent.ai
admin.doctor365.kr
oauth-geocaching.locusmap.eu
www.botls.app
govcloud-status.elastic.co
us1certificate-1-202202250731.us1.outplayr.com
www.future.plus
us1certificate-3-202205191313.us1.outplayr.com
insent.ai
shouldiuseflex.com
pushnotificationtest.insent.ai
www.seestadt.city
www.sandbox.web-test.insent.ai
www.jimeneztirado.com
maki.tolentino.xyz
*.api.insent.ai
govcloud-status.elastic.co
govcloud-status.elastic.co
int.360live.app
people.countone.co.zw
reach.insent.ai
*.insent.ai
people.nexstor.co.uk
*.insent.ai
*.insent.ai
prod-be.insent.ai
us1certificate-3-202205110845.us1.outplayr.com
govcloud-status.elastic.co
us1certificate-1-202203310609.us1.outplayr.com
*.insent.ai
us1certificate-3-202203270832.us1.outplayr.com
insent.ai
ppa.taneko.net
prod-be.insent.ai
us1certificate-3-202204191013.us1.outplayr.com
join.gdgadoekiti.com
us1certificate-3-202204120619.us1.outplayr.com
live.fruenshus.dk
hrm.motormata.com
myhr.rangercollege.edu
us1certificate-1-202202021459.us1.outplayr.com
us1certificate-2-202203200529.us1.outplayr.com
app.insent.ai
email.insent.ai
identitywidget1.insent.ai
work.knoxpo.com
prod-fe.insent.ai
reflect.burson.family
edifecs.api.insent.ai
dev--console.getdispatch.app
insent.ai
myhr.rangercollege.edu
*.api.insent.ai
people.rmggroup.com
prod-fe.insent.ai
dev-fe.insent.ai
people.plur.events
hrm.motormata.com
teamhub.ilikeagency.co
dev-be.insent.ai
showcase.hsvinnovations.com
cadastro.turbi.com.br
www.stopapp.cl
office.webmantra360.com
myhr.greatwildwolf.com
Certificate
The complete raw certificate details for *.api.insent.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEaTCCA1GgAwIBAgIQA5J1k39JZwqbZ5JB9myhhTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA0MjQwMDAwMDBaFw0yMzA1MjMy MzU5NTlaMBoxGDAWBgNVBAMMDyouYXBpLmluc2VudC5haTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJ5e5oFafJpLnIKvEgYXOp9zAzROqSjwdvLZBfzh nAfX4pJ/1OsiNQxyN3FVfgdEuO4F620g541QR2ujdP0m5uIpns87B37aV8wAfzs6 8EAqZ1ItiPgyaoJx2bMeuL0LJmYx12UYsLwMYTaIdK6BEaRxkcsBmHyFIcdLDw8I WkjTnHVxzxQme7KxFPVOhv06Q7vzTRxeGJiIRhnkANKeehwJGnsnWNmkIzJFDemb ElswwOmmuB3pcaPaV3+OrvmCZvXhEUx0vFlW3OLc7O77ud2B2xX7q+jLqOMjTuL3 1PMtq47jOmPOyOgbzaMKG6JIUiNS5DcyrpzwnLuIBRM5v5ECAwEAAaOCAX0wggF5 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBRi8BfP p7XhDjM8VVWnRKcv1wPTujAaBgNVHREEEzARgg8qLmFwaS5pbnNlbnQuYWkwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNV HR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z Y2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAAKP+qug4TxETdVXMqX5vmA/oiSIT1MWK6Qf5MEMYhv/L5YL DZWWKfTx6D0UH0THlqO4xpENkIu4ELc4fJgwZiWxawRieS4eeyh64pihfU4lkjos YAsoQbEjSaarh+gU11eU0YfkRf69GbK6U7HyfOLLnF+1R3+9riSCfIlAsS/ZKz/q sEvTmyMXrfcDQ4hf2R0zmlFK9lx+rCehUqNsk22YpKk9SgIJm/1eCy64K7IrOHZV PQtnc9l4XBuWfNZ0t48VZuYoZABsQv9GywRL6w8VJf8LXm7AFjFNeEpytOlM90oP kpk+iRKaeT+iJPUif/+vUXkP89pjRku+y7I/0aI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl7mgVp8mkucgq8SBhc6 n3MDNE6pKPB28tkF/OGcB9fikn/U6yI1DHI3cVV+B0S47gXrbSDnjVBHa6N0/Sbm 4imezzsHftpXzAB/OzrwQCpnUi2I+DJqgnHZsx64vQsmZjHXZRiwvAxhNoh0roER pHGRywGYfIUhx0sPDwhaSNOcdXHPFCZ7srEU9U6G/TpDu/NNHF4YmIhGGeQA0p56 HAkaeydY2aQjMkUN6ZsSWzDA6aa4Helxo9pXf46u+YJm9eERTHS8WVbc4tzs7vu5 3YHbFfur6Muo4yNO4vfU8y2rjuM6Y87I6BvNowobokhSI1LkNzKunPCcu4gFEzm/ kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4748144056557683726330049503106474373 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.api.insent.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19992449321591238443865502393323175981567628022050594047166574045266490900172631353787297165961157360702124859659048297117785060811963054018839358709344841752394018947599495403144943146333824209540562486104702073852414734761334061759282006399943585822431195956149922857499090582756881957511749925878545214303132577389300390617551872770565319279312900221137542414931538598430968886348014117444078397255258976584952680322093889278932833486991581500462661995325972049582715318958770524888323914537144570440496483321826234614012375455905317433005420586393925066854784849948063883780408864564343761870215494062652876504977 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62f017cfa7b5e10e333c5555a744a72fd703d3ba . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.insent.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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