vern.halcyonmobile.com
Issued by Amazon
About this certificate
This digital certificate with serial number 05:0f:f1:83:53:35:24:58:9f:60:54:d3:15:3e:7e:9e was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vern.halcyonmobile.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:0f:f1:83:53:35:24:58:9f:60:54:d3:15:3e:7e:9eSerial Number (int): 6728922897157871723749738947607953054
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 5a:47:82:30:13:72:2c:38:ec:ae:c4:09:ca:c2:1a:10:c9:ac:d9:28
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 97:78:10:de:6e:7f:bc:fd:67:ec:df:5c:72:57:91:f1:ba:53:ee:e2
Fingerprint (sha256): 16:36:31:9b:65:ad:b1:00:e8:f5:8b:11:be:ea:e4:53:00:c3:20:5a:48:4b:01:96:8d:82:28:11:3c:87:1a:3a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate vern.halcyonmobile.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vern.halcyonmobile.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vern.halcyonmobile.com
*.vern.halcyonmobile.com
*.vern.halcyonmobile.com
Other certificates including the domain name halcyonmobile.com
(limited to 100 certificates)
halcyonmobile.com
tiff.halcyonmobile.com
wiki.halcyonmobile.com
api.halcyonmobile.com
halcyonmobile.com
vern.halcyonmobile.com
wiki.halcyonmobile.com
staging.halcyonmobile.com
api.halcyonmobile.com
xmas.halcyonmobile.com
pigment.halcyonmobile.com
business.alpha.nirmy.app
halcyonmobile.com
docs.android.halcyonmobile.com
aptosoceanrose.com
app.dulago.com.br
stealth-solutions.co.uk
halcyonmobile.com
wiki.halcyonmobile.com
picnici.com
xmas.halcyonmobile.com
api.staging.halcyonmobile.com
cdn.halcyonmobile.com
halcyonmobile.com
fargate.halcyonmobile.com
prashantraghu.me
halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
tiff.halcyonmobile.com
www.bountechsummit.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
fantana.io
*.build.halcyonmobile.com
xmas.halcyonmobile.com
xmas.halcyonmobile.com
docs.android.halcyonmobile.com
app.dulago.com.br
www.gr3c.online
wiki.halcyonmobile.com
wp.halcyonmobile.com
wiki.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
cdn.halcyonmobile.com
wiki.halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
pigment.halcyonmobile.com
cdn.halcyonmobile.com
app.uptimer.co
wiki.halcyonmobile.com
staging.halcyonmobile.com
thriftit.app
tiff.halcyonmobile.com
wiki.halcyonmobile.com
app.minaphoto.jp
halcyonmobile.com
finesse.ltd
halcyonmobile.com
halcyonmobile.com
*.build.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
*.build.halcyonmobile.com
wiki.halcyonmobile.com
api.halcyonmobile.com
api.staging.halcyonmobile.com
wiki.halcyonmobile.com
agent.aadhaar-bank.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
devivero.us
api.staging.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
blog.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
wiki.halcyonmobile.com
api.halcyonmobile.com
halcyonmobile.com
vern.halcyonmobile.com
wiki.halcyonmobile.com
staging.halcyonmobile.com
api.halcyonmobile.com
xmas.halcyonmobile.com
pigment.halcyonmobile.com
business.alpha.nirmy.app
halcyonmobile.com
docs.android.halcyonmobile.com
aptosoceanrose.com
app.dulago.com.br
stealth-solutions.co.uk
halcyonmobile.com
wiki.halcyonmobile.com
picnici.com
xmas.halcyonmobile.com
api.staging.halcyonmobile.com
cdn.halcyonmobile.com
halcyonmobile.com
fargate.halcyonmobile.com
prashantraghu.me
halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
tiff.halcyonmobile.com
www.bountechsummit.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
fantana.io
*.build.halcyonmobile.com
xmas.halcyonmobile.com
xmas.halcyonmobile.com
docs.android.halcyonmobile.com
app.dulago.com.br
www.gr3c.online
wiki.halcyonmobile.com
wp.halcyonmobile.com
wiki.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
cdn.halcyonmobile.com
wiki.halcyonmobile.com
halcyonmobile.com
tiff.halcyonmobile.com
pigment.halcyonmobile.com
cdn.halcyonmobile.com
app.uptimer.co
wiki.halcyonmobile.com
staging.halcyonmobile.com
thriftit.app
tiff.halcyonmobile.com
wiki.halcyonmobile.com
app.minaphoto.jp
halcyonmobile.com
finesse.ltd
halcyonmobile.com
halcyonmobile.com
*.build.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
*.build.halcyonmobile.com
wiki.halcyonmobile.com
api.halcyonmobile.com
api.staging.halcyonmobile.com
wiki.halcyonmobile.com
agent.aadhaar-bank.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
devivero.us
api.staging.halcyonmobile.com
wiki.halcyonmobile.com
pigment.halcyonmobile.com
blog.halcyonmobile.com
halcyonmobile.com
halcyonmobile.com
Certificate
The complete raw certificate details for vern.halcyonmobile.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnDCCA4SgAwIBAgIQBQ/xg1M1JFifYFTTFT5+njANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MDgwMDAwMDBaFw0xOTA5MDgx MjAwMDBaMCExHzAdBgNVBAMTFnZlcm4uaGFsY3lvbm1vYmlsZS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9jJjiTtmNpV8j20r0iQ83FMfC+zo Xru0DWRUt8w9yYWSRp0MTlkgHgK0YxWgqb6mojPtSA5MfRK5MPjo7B3gqQ28E3bp rik2InUngRrZzyASX3uJapp0yEAtnnhjt2ipeaeVuXQa75WfJaIHkJOhyhcSBoL0 o3w9J4+RhSmvKBmRrm2ejtin49ckFLVpNTnL/W9tvOXWG1cXtnolFt6HFGbKfzoF 8mHlMnndsTSDy3RUYuSK1zV6WkpizNAL6hvyTIb/N/cjzPnuwJlyy5i3qXDmZx4q 2RETAQngfLkg1Wn6QmYlVqIh76R0/D6ziTgfPR+SJP3JqOA9LXsJn6NfAgMBAAGj ggGpMIIBpTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUWkeCMBNyLDjsrsQJysIaEMms2SgwOwYDVR0RBDQwMoIWdmVybi5oYWxjeW9u bW9iaWxlLmNvbYIYKi52ZXJuLmhhbGN5b25tb2JpbGUuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw oC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3Js MCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20v c2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBAJfd76WLfd08BiwG8yJnEsuKt1XTwLnVVbhDO21OB3pk qqJ6viqext5tcdjdZkZv3fyUF4dtoyi8/WFP1MDGkWvS5Vd7yd70D2eqMB9FeZaw NRyrWcSkyW84ZtYDxpNtj47i397TILAXPX5wxfYWu660RFAuVglPPMO3M4fGeZyc t3GN9C5+HJAWB6b4yRYmtAeoQ6BL8UOPfoFR6rRJVS8HqqFtMEHXJ3PVi/RvJEYA uY1BmhZ8Qa7S2xZkixgrY/Gt+pON/L8+hehlCtax5+LGyzyMfh7ek8O5JqjPtZS8 WehgDXXxib6Pc7icDSYWDnkj/mIFww3IFJeC7DgWieg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfYyY4k7ZjaVfI9tK9Ik PNxTHwvs6F67tA1kVLfMPcmFkkadDE5ZIB4CtGMVoKm+pqIz7UgOTH0SuTD46Owd 4KkNvBN26a4pNiJ1J4Ea2c8gEl97iWqadMhALZ54Y7doqXmnlbl0Gu+VnyWiB5CT ocoXEgaC9KN8PSePkYUprygZka5tno7Yp+PXJBS1aTU5y/1vbbzl1htXF7Z6JRbe hxRmyn86BfJh5TJ53bE0g8t0VGLkitc1elpKYszQC+ob8kyG/zf3I8z57sCZcsuY t6lw5mceKtkREwEJ4Hy5INVp+kJmJVaiIe+kdPw+s4k4Hz0fkiT9yajgPS17CZ+j XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6728922897157871723749738947607953054 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vern.halcyonmobile.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20950724501709435780774416207445511167151455856315585455521474691128410575732374262053661625167873597196150346728782782189655229579767453859569367026957693487227205224127958240862942760755220389721159271221138020235622848900026862566504753612004550713121630946438636603494678825630557508396509289130679292790702903352733154431676935188560042866903199711788018940058171353860479863925626598329616862572406983087902011848985012835318248086616674698492000955291790296040708202627618273708358713911276360802041904093520550566601191230267634487530516938369334335734043905806274111140433080127479810829956121004109750838111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a47823013722c38ecaec409cac21a10c9acd928 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vern.halcyonmobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vern.halcyonmobile.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0097ddefa58b7ddd3c062c06f3226712cb8ab755d3c0b9d555b8433b6d4e077a64aaa27abe2a9ec6de6d71d8dd66466fddfc9417876da328bcfd614fd4c0c6916bd2e5577bc9def40f67aa301f457996b0351cab59c4a4c96f3866d603c6936d8f8ee2dfded320b0173d7e70c5f616bbaeb444502e56094f3cc3b73387c6799c9cb7718df42e7e1c901607a6f8c91626b407a843a04bf1438f7e8151eab449552f07aaa16d3041d72773d58bf46f244600b98d419a167c41aed2db16648b182b63f1adfa938dfcbf3e85e8650ad6b1e7e2c6cb3c8c7e1ede93c3b926a8cfb594bc59e8600d75f189be8f73b89c0d26160e7923fe6205c30dc8149782ec381689e8