neighborhood.elkay.com
Issued by Amazon
About this certificate
This digital certificate with serial number 07:ae:8e:2f:2a:a4:c7:d1:3d:e5:9e:d5:82:92:e3:5e was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=neighborhood.elkay.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:ae:8e:2f:2a:a4:c7:d1:3d:e5:9e:d5:82:92:e3:5eSerial Number (int): 10210939462964405682988063371117650782
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ee:a5:b2:cf:da:d0:b9:6d:0a:79:7f:c3:48:b5:fa:ca:c2:6f:de:05
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): b4:90:a3:6b:ac:f5:de:b1:bc:78:66:76:b4:43:ba:23:41:5d:b0:28
Fingerprint (sha256): 15:4c:fb:80:a4:f8:99:70:87:67:30:9e:bf:07:c9:b8:b2:a6:8e:03:68:17:f7:56:6e:40:cd:ac:02:b9:12:0d
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate neighborhood.elkay.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for neighborhood.elkay.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
neighborhood.elkay.com
*.neighborhood.elkay.com
*.neighborhood.elkay.com
Other certificates including the domain name elkay.com
(limited to 100 certificates)
feedback.qualityhosting.de
survey.gradwell.com
go.elkay.com
social.elkay.com
surveys.elkay.com
isupplier.elkay.com
surveys.elkay.com
helpcenter.elkay.com
helpcenter.elkay.com
certificates.getfeedback.com
autodiscover.elkay.com
survey.westernwindowsystems.com
go.elkay.com
ekyprod.elkay.com
supportsurvey.control4.com
surveys.myarg.com
events.elkay.com
surveys.fredmangroup.com
latam.elkay.com
certificates.getfeedback.com
surrogate.omegafamilysurrogates.com
*.elkay.com
*.elkay.com
isupplier.elkay.com
go.elkay.com
events.elkay.com
partners.elkay.com
feedback.blackboardinsurance.com
partners.elkay.com
surveys.elkay.com
neighborhood.elkay.com
ekyqa.elkay.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
employees.elkay.com
helpcenter.elkay.com
feedback.spotcap.com
applications-test.elkay.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
asiapac.elkay.com
certificates.getfeedback.com
applications.elkay.com
asiapac.elkay.com
corporate.elkay.com
survey.boomtownroi.com
helpcenter.elkay.com
surveys.elkay.com
feedback.wufoo.com
feedback.blackboardinsurance.com
asiapac.elkay.com
surrogate.omegafamilysurrogates.com
www.elkay.com
certificates.getfeedback.com
go.elkay.com
helpcenter.elkay.com
helpcenter.elkay.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
ekyqa.elkay.com
corporate.elkay.com
forms.comfortkeepers.com
prtg.elkay.com
certificates.getfeedback.com
events.elkay.com
enquete.pietervanforeest.nl
events.elkay.com
thehub.elkay.com
supportsurvey.control4.com
feedback.liftago.com
surveys.elkay.com
elkay.com
go.elkay.com
feedback.nanotempertech.com
customdomain.getfeedback.com
surveys.crimsoneducation.org
survey.faq.rakuten.net
surveys.elkay.com
hrprd.elkay.com
feedback.wingate.com.au
go.elkay.com
surveys.elkay.com
surveys.elkay.com
survey.faq.rakuten.net
certificates.getfeedback.com
ekyprod.elkay.com
europe.elkay.com
feedback.icelandair.com
ekyprod.elkay.com
go.elkay.com
go.elkay.com
events.elkay.com
survey.westernwindowsystems.com
go.elkay.com
survey.adstream.com
ekyprod.elkay.com
surveys.fredmangroup.com
autodiscover.elkay.com
helpcenter.elkay.com
survey.gradwell.com
go.elkay.com
social.elkay.com
surveys.elkay.com
isupplier.elkay.com
surveys.elkay.com
helpcenter.elkay.com
helpcenter.elkay.com
certificates.getfeedback.com
autodiscover.elkay.com
survey.westernwindowsystems.com
go.elkay.com
ekyprod.elkay.com
supportsurvey.control4.com
surveys.myarg.com
events.elkay.com
surveys.fredmangroup.com
latam.elkay.com
certificates.getfeedback.com
surrogate.omegafamilysurrogates.com
*.elkay.com
*.elkay.com
isupplier.elkay.com
go.elkay.com
events.elkay.com
partners.elkay.com
feedback.blackboardinsurance.com
partners.elkay.com
surveys.elkay.com
neighborhood.elkay.com
ekyqa.elkay.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
employees.elkay.com
helpcenter.elkay.com
feedback.spotcap.com
applications-test.elkay.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
asiapac.elkay.com
certificates.getfeedback.com
applications.elkay.com
asiapac.elkay.com
corporate.elkay.com
survey.boomtownroi.com
helpcenter.elkay.com
surveys.elkay.com
feedback.wufoo.com
feedback.blackboardinsurance.com
asiapac.elkay.com
surrogate.omegafamilysurrogates.com
www.elkay.com
certificates.getfeedback.com
go.elkay.com
helpcenter.elkay.com
helpcenter.elkay.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
ekyqa.elkay.com
corporate.elkay.com
forms.comfortkeepers.com
prtg.elkay.com
certificates.getfeedback.com
events.elkay.com
enquete.pietervanforeest.nl
events.elkay.com
thehub.elkay.com
supportsurvey.control4.com
feedback.liftago.com
surveys.elkay.com
elkay.com
go.elkay.com
feedback.nanotempertech.com
customdomain.getfeedback.com
surveys.crimsoneducation.org
survey.faq.rakuten.net
surveys.elkay.com
hrprd.elkay.com
feedback.wingate.com.au
go.elkay.com
surveys.elkay.com
surveys.elkay.com
survey.faq.rakuten.net
certificates.getfeedback.com
ekyprod.elkay.com
europe.elkay.com
feedback.icelandair.com
ekyprod.elkay.com
go.elkay.com
go.elkay.com
events.elkay.com
survey.westernwindowsystems.com
go.elkay.com
survey.adstream.com
ekyprod.elkay.com
surveys.fredmangroup.com
autodiscover.elkay.com
helpcenter.elkay.com
Certificate
The complete raw certificate details for neighborhood.elkay.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIQB66OLyqkx9E95Z7VgpLjXjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAyMDEwMDAwMDBaFw0yMzAzMDEy MzU5NTlaMCExHzAdBgNVBAMTFm5laWdoYm9yaG9vZC5lbGtheS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqgQB8q5rdw3jAMFmJ/gO2vPNtXKZO zBwTvsnHXlgyrDVLori/KbZcJTxw+7py62NixfrvTZlvB+ldlRarqAeAVLoa1iy5 iZPDc8H9qYHoTu/F/Ng+x2K2zeHIYioWUqb/hbR8Ruy++AMB0dHoAmTsCis88ITk D4JQvfxDK+rPW2/wKbyCJNzWOcysyS6oZaTdvISDRIFtZ01eRdUnvvv/S2uS6Hqa xaHv2VEJVkbwChFWTTzbr71EerwmQumxORfFAkygyC52SjTzUo7A0DPdjpGFvc9R rR2sPyuUSiLUmHvL3Ly28nmvhxmTPLqIbvgK3RQAColBDDpi9yNmyrFfAgMBAAGj ggGeMIIBmjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQU7qWyz9rQuW0KeX/DSLX6ysJv3gUwOwYDVR0RBDQwMoIWbmVpZ2hib3Job29k LmVsa2F5LmNvbYIYKi5uZWlnaGJvcmhvb2QuZWxrYXkuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAy oDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBHNu0Cnk8TycXnfXGQRLh5EL4opY5aInTTFxVhWYUDh7dTkdZ8x10vjxZ3 T1Adjqoqns9alQOTKcDFVRH1FeaQ+gndnjItK0VxvofDOA5dGM5cptlOrjAv3NSF X+FLffmVQFqP/P8br6mn+3qkyen+F9otBGbKQjf+aWwjhOOezzSWdrSjQbH+uUDf nHjssy2mkPyURfT4gIpdDjn4NGOrbkd/RdkEuIHYbT83aBYMA/noNI6VNe6ZxXGU RSXQUCfTb5q1vMtuhxDQOn35wXS1ZCLgv3mNYP5phGHBWYYbPgpLk32+fWAqJ+yX OoXnNo6S8hEnCHMDmgk0shy5Nk90 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oEAfKua3cN4wDBZif4D trzzbVymTswcE77Jx15YMqw1S6K4vym2XCU8cPu6cutjYsX6702ZbwfpXZUWq6gH gFS6GtYsuYmTw3PB/amB6E7vxfzYPsdits3hyGIqFlKm/4W0fEbsvvgDAdHR6AJk 7AorPPCE5A+CUL38Qyvqz1tv8Cm8giTc1jnMrMkuqGWk3byEg0SBbWdNXkXVJ777 /0trkuh6msWh79lRCVZG8AoRVk0826+9RHq8JkLpsTkXxQJMoMgudko081KOwNAz 3Y6Rhb3PUa0drD8rlEoi1Jh7y9y8tvJ5r4cZkzy6iG74Ct0UAAqJQQw6YvcjZsqx XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10210939462964405682988063371117650782 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neighborhood.elkay.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29603376570987634435315551141464832761524792264345218668331079287977451742954302836184412445323750036616503176010606173670259079298078303706763620985228080001593275231158093769054670286631505497147236807612974075566740870099046176333729023978319164669961212672279866460962976357643522395164104108204551003965787995047305799901722424346126222726264033151226471284895953081669492737955103237697391675082792778664124851510487132598661593776604745211074985821314584347229280636394099762806779312429503060769730303676922771060036965539390785602887510779250130504096843028403377350954714132875917074543719619019071023657311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eea5b2cfdad0b96d0a797fc348b5facac26fde05 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhood.elkay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neighborhood.elkay.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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