clari.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:28:96:93:04:4a:d4:b0:fd:d5:da:5e:88:2f:2f:87 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=clari.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:28:96:93:04:4a:d4:b0:fd:d5:da:5e:88:2f:2f:87Serial Number (int): 13503025841499394138149462527301332871
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 84:cf:df:66:f2:c1:1a:b1:3a:3b:b8:7e:d4:58:1a:f5:02:c7:b6:a7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 72:76:d3:e6:b2:69:fe:fb:56:ef:31:d7:3e:f4:37:d6:81:cd:86:f5
Fingerprint (sha256): 13:91:7d:d4:e6:79:35:95:49:91:02:3e:72:89:f9:e9:cb:dc:3f:c0:2a:e2:c4:4e:02:60:c6:2d:75:7a:e1:90
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate clari.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for clari.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
clari.com
cf.clari.com
cf.clari.com
Other certificates including the domain name clari.com
(limited to 100 certificates)
ssl2793.cloudflare.com
nexus-staging.clari.com
login-sandbox.clari.com
ssl3103.cloudflare.com
app-builder-totodile.clari.com
engage.clari.com
www.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.dev.groove.clari.com
www.konggateway.clari.com
integration-staging.clari.com
sni217978.cloudflaressl.com
clari.com
sni.cloudflaressl.com
gateway-steelix.clari.com
backend.dev3.copilot.clari.com
ds-steelixapi.clari.com
sni217978.cloudflaressl.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
internal-gateway.clari.com
app-builder-bulbasaur.clari.com
backend.dev4.copilot.clari.com
webhooks.dev.copilot.clari.com
konggateway-steelix-internal.clari.com
app.clari.com
app.clari.com
admin.clari.com
login-sandbox.clari.com
download.clari.com
app-builder-hack1.clari.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
stage-scan.clari.com
beta.status.veracode.com
nexus-test-staging.clari.com
sni217978.cloudflaressl.com
hello.clari.com
nexus-steelix.clari.com
login.clari.com
sni217978.cloudflaressl.com
proservices.api.clari.com
sni217978.cloudflaressl.com
pages.clari.com
app.clari.com
integrations.clari.com
outreach.clari.com
hecate.clari.com
*.clari.com
login.clari.com
sni217978.cloudflaressl.com
beta.status.veracode.com
backend.wingman.clari.com
*.dev.wingman.clari.com
clari.com
rest-api.dev4.copilot.clari.com
pages.clari.com
compass.clari.com
partners.clari.com
engage.clari.com
sni217978.cloudflaressl.com
login-steelix.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
ol-www-craft.clari.com
production.clari.com
community.clari.com
pages.clari.com
app.clari.com
nexus-steelix.clari.com
app-builder-cyndaquil.clari.com
clari.com
integration-steelix.clari.com
integration-staging.clari.com
ssl2793.cloudflare.com
sni217978.cloudflaressl.com
app-builder-charmander.clari.com
nexus-staging.clari.com
nexus-staging.clari.com
app.dev.groove.clari.com
*.staging.clari.com
beta.status.veracode.com
*.sandbox.copilot.clari.com
sni217978.cloudflaressl.com
app-builder-hack6.clari.com
service-us.clari.com
sni217978.cloudflaressl.com
ssl3103.cloudflare.com
*.dev1.copilot.clari.com
prestaging.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.clari.com
beta.status.veracode.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
*.dev4.copilot.clari.com
sni.cloudflaressl.com
nexus-staging.clari.com
login-sandbox.clari.com
ssl3103.cloudflare.com
app-builder-totodile.clari.com
engage.clari.com
www.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.dev.groove.clari.com
www.konggateway.clari.com
integration-staging.clari.com
sni217978.cloudflaressl.com
clari.com
sni.cloudflaressl.com
gateway-steelix.clari.com
backend.dev3.copilot.clari.com
ds-steelixapi.clari.com
sni217978.cloudflaressl.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
internal-gateway.clari.com
app-builder-bulbasaur.clari.com
backend.dev4.copilot.clari.com
webhooks.dev.copilot.clari.com
konggateway-steelix-internal.clari.com
app.clari.com
app.clari.com
admin.clari.com
login-sandbox.clari.com
download.clari.com
app-builder-hack1.clari.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
stage-scan.clari.com
beta.status.veracode.com
nexus-test-staging.clari.com
sni217978.cloudflaressl.com
hello.clari.com
nexus-steelix.clari.com
login.clari.com
sni217978.cloudflaressl.com
proservices.api.clari.com
sni217978.cloudflaressl.com
pages.clari.com
app.clari.com
integrations.clari.com
outreach.clari.com
hecate.clari.com
*.clari.com
login.clari.com
sni217978.cloudflaressl.com
beta.status.veracode.com
backend.wingman.clari.com
*.dev.wingman.clari.com
clari.com
rest-api.dev4.copilot.clari.com
pages.clari.com
compass.clari.com
partners.clari.com
engage.clari.com
sni217978.cloudflaressl.com
login-steelix.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
ol-www-craft.clari.com
production.clari.com
community.clari.com
pages.clari.com
app.clari.com
nexus-steelix.clari.com
app-builder-cyndaquil.clari.com
clari.com
integration-steelix.clari.com
integration-staging.clari.com
ssl2793.cloudflare.com
sni217978.cloudflaressl.com
app-builder-charmander.clari.com
nexus-staging.clari.com
nexus-staging.clari.com
app.dev.groove.clari.com
*.staging.clari.com
beta.status.veracode.com
*.sandbox.copilot.clari.com
sni217978.cloudflaressl.com
app-builder-hack6.clari.com
service-us.clari.com
sni217978.cloudflaressl.com
ssl3103.cloudflare.com
*.dev1.copilot.clari.com
prestaging.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.clari.com
beta.status.veracode.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
*.dev4.copilot.clari.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for clari.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEazCCA1OgAwIBAgIQCiiWkwRK1LD91dpeiC8vhzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAxMTIwMDAwMDBaFw0yMzAyMTAy MzU5NTlaMBQxEjAQBgNVBAMTCWNsYXJpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJvvrBulBQnQXNeR7sb7pY6UHPPUjG9avmkwiyd4GiM4albR GKJ8CUvHSkFzTKIfn3Z/3ff76aH1SgQRSF9nQlADgn/Hk5N9iaUAqpJBYwWn3g6M ieZlGqXvzXQbczXZo747UFxWF7riY9vzomS124k9XH9KM2WUYbqe6VA3emFB0iz8 8bFr4N2vTOkvVgfFLunlTbBJqFDXGhs+PJYaX19Sacum1LCZP9gOWKTB1onMrw/K 2VpN5PKStyOGh5BBuIsLwb49DD2/BThjpxX6QVlueDUyFXBU2NmSlVqkVH+vYQ/4 rU86tNzYvH2HqMlgEAV2ZVepTOm48zz7heAqvX0CAwEAAaOCAYUwggGBMB8GA1Ud IwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSEz99m8sEasTo7 uH7UWBr1Ase2pzAiBgNVHREEGzAZggljbGFyaS5jb22CDGNmLmNsYXJpLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0G A1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29t MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z Y2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEAEslMxJqI3L5VJCDCYCIwUyMFQN1oZkAcJ3CZYi5feVrl R3CQuWrxPAaN23tQkEYLymbdYHTMfckw6jViRLySkaj5xI1YxTG8906C+7dCRrk9 QhYPvD5EgPZqWkB053Smssbod4iGWjvQsOkIlUcZ09FgBuIGS/8YqaSIJXXczQuk auKlvlpyT+10SHkBRUXdeOnxPZgUKCx15m6tNsJfw/zRtWC0od2Wp308RdWIceCI 25KbI0450hQXJJ3MNqi/cZcjHfrZYigPYyNdRQncDB2L/b78+N33l3bod5jt5TZu pMgsOBKdOkw4Nw9lyQQKRkQhOB8fsSxZYpckkvJwYg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++sG6UFCdBc15Huxvul jpQc89SMb1q+aTCLJ3gaIzhqVtEYonwJS8dKQXNMoh+fdn/d9/vpofVKBBFIX2dC UAOCf8eTk32JpQCqkkFjBafeDoyJ5mUape/NdBtzNdmjvjtQXFYXuuJj2/OiZLXb iT1cf0ozZZRhup7pUDd6YUHSLPzxsWvg3a9M6S9WB8Uu6eVNsEmoUNcaGz48lhpf X1Jpy6bUsJk/2A5YpMHWicyvD8rZWk3k8pK3I4aHkEG4iwvBvj0MPb8FOGOnFfpB WW54NTIVcFTY2ZKVWqRUf69hD/itTzq03Ni8fYeoyWAQBXZlV6lM6bjzPPuF4Cq9 fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13503025841499394138149462527301332871 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clari.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19685124084185525587111196673473964703027753226520443729166300478879031751777160560486889552453427357310797657100665588709196143732356829580913648233379651509393520622063153909025642669524511826817854198793450879473310834268918166063820253010884656951690471540266711937072980463279651718859165147153130511374280303706125938390272226098148294819580508646744551668732437907922074408355990655765303442082276718671095842142748447057630947549672684769611919646643982739614920504613474428113044020063542908896206462079199622939124116921382989257286312741700486356925639950776340752120777238929352404550674965545737517710717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 84cfdf66f2c11ab13a3bb87ed4581af502c7b6a7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.clari.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0012c94cc49a88dcbe552420c260223053230540dd6866401c277099622e5f795ae5477090b96af13c068ddb7b5090460bca66dd6074cc7dc930ea356244bc9291a8f9c48d58c531bcf74e82fbb74246b93d42160fbc3e4480f66a5a4074e774a6b2c6e87788865a3bd0b0e908954719d3d16006e2064bff18a9a4882575dccd0ba46ae2a5be5a724fed744879014545dd78e9f13d9814282c75e66ead36c25fc3fcd1b560b4a1dd96a77d3c45d58871e088db929b234e39d21417249dcc36a8bf7197231dfad962280f63235d4509dc0c1d8bfdbefcf8ddf79776e87798ede5366ea4c82c38129d3a4c38370f65c9040a464421381f1fb12c5962972492f27062