midas.spafinder.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 07:cf:f5:2b:33:35:1b:86:78:e4:7d:e5:6a:4f:11:e2 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=midas.spafinder.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:cf:f5:2b:33:35:1b:86:78:e4:7d:e5:6a:4f:11:e2Serial Number (int): 10384374033222941755850988973315789282
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: fa:bf:e7:02:ae:db:41:d2:ea:74:e8:a2:82:b6:7b:da:dd:c6:61:d7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 59:a8:22:8d:b7:90:2a:ca:27:e4:19:6e:52:bb:cc:e1:39:14:bc:a5
Fingerprint (sha256): 13:2f:24:bc:a3:6c:e6:be:24:a6:1f:e1:1d:55:06:d9:e8:a6:23:28:e7:09:dd:4e:35:17:c4:0c:8e:2a:83:b2
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate midas.spafinder.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for midas.spafinder.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
midas.spafinder.com
Other certificates including the domain name spafinder.com
(limited to 100 certificates)
cdn.spafinder.com
f164.zooz.cf
blockcommunicator.com
filipwolanski.com
www.coreputters.com
vpln.spafinder.com
singlepointsol.com
midas.spafinder.com
midas.spafinder.com
www.lamconcrete.com
scamardi.info
svs.spafinder.com
test.app.kameo.co
dev.sbsb.kr
geoip.spafinder.com
studentsa.ru
www.fastclub.app
img.spafinder.com
shop.spafinder.com
penyadap.com
link.zeugnis.codes
track.spafinder.com
pull-dev.spafinder.com
labs.spafinder.com
raven.amp.prod.spafinder.com
modzter.com
img.spafinder.com
painelpadreosvaldo.g2canal.com.br
getelly.app
www.trim.social
icoach.pulso-preventielab.be
www.desafio21d.com
cdn.spafinder.com
bekbakes.com.au
vpln.spafinder.com
www.ogden.co
www.devicedb.app
www.stanplus.com
coronaviruslive.io
spafinder.com
services-lakeshore.smartbuildings.app
stage.eclypsium.com
link.investo2o.com
instantglance.com
elleven.minhacentralonline.com.br
enews.spafinder.com
shop.spafinder.com
desenfila.com.br
listings.spafinder.com
brian-poole.com
webnamieru.net
beta.extraordinarygrace.com
www.gloryth.com
midas.spafinder.com
linkedin-auth.karoldepka.com
www.diofantino.com
enews.spafinder.com
links.cavalry.scenegroup.co
klondikesolitaire-online.com
lxandrx.com
midas.spafinder.com
www.giovannihomeimprovementinc.com
tsubasa2540.ml
tarjem.sam-techs.com
shop.spafinder.com
img.spafinder.com
link.chalk.com
spafinder.com
vpln.spafinder.com
rameshkry.2rk.in
rockersesports.com
rtff.mjbdevs.co.uk
goldentranscript.column.us
g4rdens.xyz
labs.spafinder.com
mrgreensplumbing.com
lm.spafinder.com
enews.spafinder.com
www.lingosong.com
labs.spafinder.com
spafinder.com
groomerbox.com.br
inscist.com
www.camilopenalver.com
www.jismunboys.com
geoip.labs.spafinder.com
rtff.mjbdevs.co.uk
www.solal-experience.com
dev.niclas.xyz
tnmop.in
dcotagroup.com
aeons.me
find.spafinder.com
www.vulturedatalabs.com
benchmarkassociate.com
grammarabic.org
aaliyahlouns.com
radio-dev.gera.fan
spafinder.com
incapsula.com
f164.zooz.cf
blockcommunicator.com
filipwolanski.com
www.coreputters.com
vpln.spafinder.com
singlepointsol.com
midas.spafinder.com
midas.spafinder.com
www.lamconcrete.com
scamardi.info
svs.spafinder.com
test.app.kameo.co
dev.sbsb.kr
geoip.spafinder.com
studentsa.ru
www.fastclub.app
img.spafinder.com
shop.spafinder.com
penyadap.com
link.zeugnis.codes
track.spafinder.com
pull-dev.spafinder.com
labs.spafinder.com
raven.amp.prod.spafinder.com
modzter.com
img.spafinder.com
painelpadreosvaldo.g2canal.com.br
getelly.app
www.trim.social
icoach.pulso-preventielab.be
www.desafio21d.com
cdn.spafinder.com
bekbakes.com.au
vpln.spafinder.com
www.ogden.co
www.devicedb.app
www.stanplus.com
coronaviruslive.io
spafinder.com
services-lakeshore.smartbuildings.app
stage.eclypsium.com
link.investo2o.com
instantglance.com
elleven.minhacentralonline.com.br
enews.spafinder.com
shop.spafinder.com
desenfila.com.br
listings.spafinder.com
brian-poole.com
webnamieru.net
beta.extraordinarygrace.com
www.gloryth.com
midas.spafinder.com
linkedin-auth.karoldepka.com
www.diofantino.com
enews.spafinder.com
links.cavalry.scenegroup.co
klondikesolitaire-online.com
lxandrx.com
midas.spafinder.com
www.giovannihomeimprovementinc.com
tsubasa2540.ml
tarjem.sam-techs.com
shop.spafinder.com
img.spafinder.com
link.chalk.com
spafinder.com
vpln.spafinder.com
rameshkry.2rk.in
rockersesports.com
rtff.mjbdevs.co.uk
goldentranscript.column.us
g4rdens.xyz
labs.spafinder.com
mrgreensplumbing.com
lm.spafinder.com
enews.spafinder.com
www.lingosong.com
labs.spafinder.com
spafinder.com
groomerbox.com.br
inscist.com
www.camilopenalver.com
www.jismunboys.com
geoip.labs.spafinder.com
rtff.mjbdevs.co.uk
www.solal-experience.com
dev.niclas.xyz
tnmop.in
dcotagroup.com
aeons.me
find.spafinder.com
www.vulturedatalabs.com
benchmarkassociate.com
grammarabic.org
aaliyahlouns.com
radio-dev.gera.fan
spafinder.com
incapsula.com
Certificate
The complete raw certificate details for midas.spafinder.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIQB8/1KzM1G4Z45H3lak8R4jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDIxODAwMDAwMFoXDTI1MDMxODIzNTk1OVowHjEc MBoGA1UEAxMTbWlkYXMuc3BhZmluZGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANFnkt7da8XqAKk9g08721czEYO8r45R4aggKAcnRKYnxORn 8Bi1WlZ/3jpHx4m5rBLQvXC4LnZq/w7+9I3BOrxyppZDZuUpBzGZCwdfQnaNepuo aEEsNsIKsjIhGTO9N4+NwPSm0uL9Aq1RZzrU2BQJJn+uFfqVRa7dOEkqaBu9q5/x 7DkV5ITDrkYpN6GcL+YrSu6L0dCIuZDJTKBvNImHIPh0GbcrvbZ+et0rm0P1s5SS 5zQjrQGCg+3yZnd2Awuc7we1QNggwS7ldQ9ogTa47Ip2qCeuPyMDcY4KrEd+TLRj 6rTcoOOdew6ilTcJVr2txvCLe/PYTYVzPOw/bi0CAwEAAaOCAu4wggLqMB8GA1Ud IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBT6v+cCrttB0up0 6KKCtnva3cZh1zAeBgNVHREEFzAVghNtaWRhcy5zcGFmaW5kZXIuY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j ZXIwDAYDVR0TAQH/BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcATnWj J1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGNuqTyXgAABAMASDBGAiEA t04sF+QHhvMVHkbu4UqTrRvDEVtH+Vp2OCOoedvXCQMCIQDRoyupe3+i7pEJstpU dnFaGmXZavGa8bGtMbycbvwOagB3AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv 2Q6MLnm4AAABjbqk8qIAAAQDAEgwRgIhAKTPYQ0BxeAHdCEb/FdfO9elP+k3dEqP lJlPIjkrMWwQAiEAvk8mH05mao3HMJea3xOwRH3Nk8XgFUwD0SbKHmJpoegAdgDm 0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY26pPLKAAAEAwBHMEUC ID7F1spU6NJ3dF56DX3MDoPux98vTJ7a5VyPES07pY1aAiEAt+sYS4iUKftd8cHV JKEbT78sz2zFElaNZLk4u4D6DRkwDQYJKoZIhvcNAQELBQADggEBAFt72QtMw5FP RK7ubgE06ix4seg37iUWe1m/c5e2f8QI0jogTvo9fgg9RxgfWQQOxcc1fArlcGzV CyCI3QO9VUsP5hTbv8riguMN8lEksWYxwYtPVCvAwu0JyasI3ixqBbddIfPxGazS VRPok4wRjD5tdCKCuf1//qgjDQ/E/n8dBwkEZ+NkM926qTwLlITpvpV/XmuSWZ/K 2Rjeur1ronwtRsk1zfKIICv9pQQkTnCezN+4zcxUn0hB3Hlg3hzfAoOtY3MqvFJq nv/2MPx/bWVJ7arxQ2wyMsgFpvd+4u3/SVxX7NOPxua7/menr47k8MdZdtWRSKxH 5ITMP1Q//j0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WeS3t1rxeoAqT2DTzvb VzMRg7yvjlHhqCAoBydEpifE5GfwGLVaVn/eOkfHibmsEtC9cLgudmr/Dv70jcE6 vHKmlkNm5SkHMZkLB19Cdo16m6hoQSw2wgqyMiEZM703j43A9KbS4v0CrVFnOtTY FAkmf64V+pVFrt04SSpoG72rn/HsORXkhMOuRik3oZwv5itK7ovR0Ii5kMlMoG80 iYcg+HQZtyu9tn563SubQ/WzlJLnNCOtAYKD7fJmd3YDC5zvB7VA2CDBLuV1D2iB NrjsinaoJ64/IwNxjgqsR35MtGPqtNyg4517DqKVNwlWva3G8It789hNhXM87D9u LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10384374033222941755850988973315789282 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'midas.spafinder.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26434879839417802091750233616672576349003378925682818590230570430217121300362528407497646888932524087166483485621725127930828343638686779960641410351308782345485808768341782444962686696358044630466290641150384061911451380932404423989122651224625255851093052871239964142454043795256346201920312685212465406017573355300693535125301370380348683943900299965323714209512062467210857275248389776744954946021166413044401634147070747589226624294719677708407535616920248206799143761908410791246916956460521664621060028263794753419207276193662898092934809121205859775796499228709511942839185070763611610036020704980263170436653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fabfe702aedb41d2ea74e8a282b67bdaddc661d7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midas.spafinder.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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