*.themaven.net
Issued by Amazon
About this certificate
This digital certificate with serial number 02:27:d7:a3:f0:97:8b:32:16:c6:54:11:76:93:e6:10 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.themaven.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:27:d7:a3:f0:97:8b:32:16:c6:54:11:76:93:e6:10Serial Number (int): 2865329275767572446352519497784747536
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 76:3b:69:9a:e6:ef:37:ad:11:60:70:eb:87:8f:45:6b:13:58:99:9a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e6:20:9e:6a:5b:39:2e:ed:f2:d7:c7:b9:b9:4f:ad:e0:92:36:2e:3c
Fingerprint (sha256): 16:80:8b:80:96:41:6d:4b:05:36:35:ce:cf:f9:3a:76:26:1b:be:8e:ee:c8:4b:11:07:e7:aa:fc:19:41:6f:07
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.themaven.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.themaven.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.themaven.net
Other certificates including the domain name themaven.net
(limited to 100 certificates)
maven.io
*.imgix.net
imgix2.map.fastly.net
*.maven.io
*.prod.themaven.net
dns-vetting1k.map.fastly.net
wiki.themaven.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.prod.themaven.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
themaven.net
*.imgix.net
*.themaven.net
*.imgix.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.themaven.net
saymedia2.map.fastly.net
themaven.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
imgix2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.stage.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
themaven.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
*.test.themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
*.maven.io
*.prod.themaven.net
dns-vetting1k.map.fastly.net
wiki.themaven.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.prod.themaven.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
themaven.net
*.imgix.net
*.themaven.net
*.imgix.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.themaven.net
saymedia2.map.fastly.net
themaven.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
imgix2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.stage.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
themaven.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
*.test.themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
Certificate
The complete raw certificate details for *.themaven.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEUDCCAzigAwIBAgIQAifXo/CXizIWxlQRdpPmEDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjEwMTgwMDAwMDBaFw0xNzExMTgx MjAwMDBaMBkxFzAVBgNVBAMMDioudGhlbWF2ZW4ubmV0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAx8zJJGM2RSkrWKLm6N0mmJfiHVvvVxk3D2iEyYgV Y1EGnGOi9l//a5KqFeoRi+1tV+lJuTnFRxZLy88xFkWoTsaiz6YYyhguTTzUC2GT jGzpcPHQgCtmL7Hi656s43xXEbWbdXSoMdhZLQ61fCZXajz8fufgAw2GDrHFZW+0 R8wSHlBZdw7m1lgqcMl5IKS0XWXx2NSe2f6E/DX4DE03zx+Hyfmp8Z6s47xSE+/J sURrSNBNvboc+IgXecpYH+9mfyNfyvyeeeDyjir08VJak+yndJlm4o2zveoCCec5 nB0fAz9+Y4gSsyFsHtHZq1oJ/TVOgLRuOWfIxluWNhqlhwIDAQABo4IBZTCCAWEw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFHY7aZrm 7zetEWBw64ePRWsTWJmaMBkGA1UdEQQSMBCCDioudGhlbWF2ZW4ubmV0MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAG/WS14VC3g+h3Ef1 393bik+xbVu+n2vCp+QAPdDgEjHE5gY4AQ7XO3azV2uxbtCbS5KmyqBvH27W0M95 ej9Xjdz2DomNgZXf87ziF52GZlNna3tsKYjrpQh7r4YKavYKNZDpqQDaPqSKtYKp ShAyZk4ZSoZKti99k+pb1N5Esa8ayyBEAmfr03W9+XvmiReqmwNo4J7WCFEWxqdi 1qpmYa9yxhUJ5BPMBDQh93jtxWNjog/2P5ZBuXxervaGEDqqpQ1iOodAdIVIHkV7 hFkcAap+r3KysSa+oEETXbDkre2rUDZ5gEW85YmpYuJHOloQ5Pp7kX8LUp1x+AKp /pfpWQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8zJJGM2RSkrWKLm6N0m mJfiHVvvVxk3D2iEyYgVY1EGnGOi9l//a5KqFeoRi+1tV+lJuTnFRxZLy88xFkWo Tsaiz6YYyhguTTzUC2GTjGzpcPHQgCtmL7Hi656s43xXEbWbdXSoMdhZLQ61fCZX ajz8fufgAw2GDrHFZW+0R8wSHlBZdw7m1lgqcMl5IKS0XWXx2NSe2f6E/DX4DE03 zx+Hyfmp8Z6s47xSE+/JsURrSNBNvboc+IgXecpYH+9mfyNfyvyeeeDyjir08VJa k+yndJlm4o2zveoCCec5nB0fAz9+Y4gSsyFsHtHZq1oJ/TVOgLRuOWfIxluWNhql hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2865329275767572446352519497784747536 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.themaven.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25222406286286646849087142931925782103467744338684982164338024560611270264213235246591874247662143087617165696022487290469288505295352116248086073350554075929554109225179694206797797770500816146142302276440028312236376307480910391020915691297843644405398186774426858391470367615096030680318318946258442715484770284971920210676935869570498968675791889639537191044729425672123245176749520232665948431713146681340114403546481998275635841160808946271856747350088437898878283882944633702971833998301655145207164284299627533112595200363166279890301046508779609224173674416633276675458864604366405768839682067343713337255303 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 763b699ae6ef37ad116070eb878f456b1358999a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaven.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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