st.paysafecash.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 03:63:06:6d:3b:01:e0:de:15:7d:4d:b4:bd:00:21:e1 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=st.paysafecash.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:63:06:6d:3b:01:e0:de:15:7d:4d:b4:bd:00:21:e1Serial Number (int): 4501851724938917930868081830762914273
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: c5:bf:5c:6e:7b:d2:49:f9:f5:01:7b:82:90:d4:26:4d:e1:31:bf:07
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 5a:2f:be:91:97:c4:61:a0:80:76:a3:7e:f1:83:69:92:56:60:c1:05
Fingerprint (sha256): 16:e6:cc:b4:e4:56:ae:97:af:c0:72:74:ca:6d:ad:f6:51:fd:99:a9:01:a4:3a:9c:16:d2:1b:b7:d8:8f:65:d8
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate st.paysafecash.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for st.paysafecash.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
st.paysafecash.com
www.st.paysafecash.com
www.st.paysafecash.com
Other certificates including the domain name paysafecash.com
(limited to 100 certificates)
registration.paysafecash.com
registration.dv.paysafecash.com
paysafecash.com
*.paysafecard.com
registration.paysafecash.com
promotion.paysafecash.com
go.paysafecash.com
dv.paysafecash.com
akamai-san29.exacttarget.com
customer-api.it.paysafecash.com
registration.dv.paysafecash.com
paysafecash.com
www.paysafecash.com
*.mt.paysafecard.com
*.pr.paysafecard.com
registration2.st.paysafecash.com
registration.st.paysafecash.com
customer-api.paysafecash.com
registration2.dv.paysafecash.com
*.dv.paysafecard.com
pages.mailer.paysafecash.com
paysafecard.com
*.paysafecard.com
view.mailer.paysafecash.com
paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
dv.paysafecash.com
it.paysafecash.com
akamai-san29.exacttarget.com
customer-api.test.paysafecash.com
st.paysafecash.com
*.paysafecard.com
customer-api2.dv.paysafecash.com
customer-api.test.paysafecash.com
*.paysafecard.com
registration.st.paysafecash.com
cloud.mailer.paysafecash.com
registration.dv.paysafecash.com
*.mt.paysafecard.com
test.paysafecash.com
cloud.mailer.paysafecash.com
*.dv.paysafecard.com
customer-api.it.paysafecash.com
customer-api.st.paysafecash.com
paysafecash.com
click.mailer.paysafecash.com
it.paysafecash.com
go.paysafecash.com
paysafecash.com
customer-api.paysafecash.com
cloud.mailer.paysafecash.com
pages.mailer.paysafecash.com
paysafecard.com
customer-api.test.paysafecash.com
go.paysafecash.com
customer-api2.it.paysafecash.com
registration.test.paysafecash.com
st.paysafecash.com
customer-api.paysafecash.com
*.mt.paysafecard.com
paysafecash.com
paysafecash.com
test.paysafecash.com
go.paysafecash.com
akamai-san29.exacttarget.com
customer-api.it.paysafecash.com
customer-api.paysafecash.com
customer-api.dv.paysafecash.com
www.paysafecash.com
*.dv.paysafecard.com
customer-api.test.paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
view.mailer.paysafecash.com
promotion.paysafecash.com
dv.paysafecash.com
2.it.paysafecash.com
registration.paysafecash.com
registration.test.paysafecash.com
pages.mailer.paysafecash.com
*.paysafecard.com
registration.paysafecash.com
go.paysafecash.com
st.paysafecash.com
go.paysafecash.com
registration.st.paysafecash.com
registration.paysafecash.com
dv.paysafecash.com
pages.mailer.paysafecash.com
go.paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
*.dv.paysafecard.com
paysafecard.com
click.mailer.paysafecash.com
*.dv.paysafecard.com
customer-api2.st.paysafecash.com
www.paysafecard.com
paysafecard.com
registration.dv.paysafecash.com
paysafecash.com
*.paysafecard.com
registration.paysafecash.com
promotion.paysafecash.com
go.paysafecash.com
dv.paysafecash.com
akamai-san29.exacttarget.com
customer-api.it.paysafecash.com
registration.dv.paysafecash.com
paysafecash.com
www.paysafecash.com
*.mt.paysafecard.com
*.pr.paysafecard.com
registration2.st.paysafecash.com
registration.st.paysafecash.com
customer-api.paysafecash.com
registration2.dv.paysafecash.com
*.dv.paysafecard.com
pages.mailer.paysafecash.com
paysafecard.com
*.paysafecard.com
view.mailer.paysafecash.com
paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
dv.paysafecash.com
it.paysafecash.com
akamai-san29.exacttarget.com
customer-api.test.paysafecash.com
st.paysafecash.com
*.paysafecard.com
customer-api2.dv.paysafecash.com
customer-api.test.paysafecash.com
*.paysafecard.com
registration.st.paysafecash.com
cloud.mailer.paysafecash.com
registration.dv.paysafecash.com
*.mt.paysafecard.com
test.paysafecash.com
cloud.mailer.paysafecash.com
*.dv.paysafecard.com
customer-api.it.paysafecash.com
customer-api.st.paysafecash.com
paysafecash.com
click.mailer.paysafecash.com
it.paysafecash.com
go.paysafecash.com
paysafecash.com
customer-api.paysafecash.com
cloud.mailer.paysafecash.com
pages.mailer.paysafecash.com
paysafecard.com
customer-api.test.paysafecash.com
go.paysafecash.com
customer-api2.it.paysafecash.com
registration.test.paysafecash.com
st.paysafecash.com
customer-api.paysafecash.com
*.mt.paysafecard.com
paysafecash.com
paysafecash.com
test.paysafecash.com
go.paysafecash.com
akamai-san29.exacttarget.com
customer-api.it.paysafecash.com
customer-api.paysafecash.com
customer-api.dv.paysafecash.com
www.paysafecash.com
*.dv.paysafecard.com
customer-api.test.paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
view.mailer.paysafecash.com
promotion.paysafecash.com
dv.paysafecash.com
2.it.paysafecash.com
registration.paysafecash.com
registration.test.paysafecash.com
pages.mailer.paysafecash.com
*.paysafecard.com
registration.paysafecash.com
go.paysafecash.com
st.paysafecash.com
go.paysafecash.com
registration.st.paysafecash.com
registration.paysafecash.com
dv.paysafecash.com
pages.mailer.paysafecash.com
go.paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
*.dv.paysafecard.com
paysafecard.com
click.mailer.paysafecash.com
*.dv.paysafecard.com
customer-api2.st.paysafecash.com
www.paysafecard.com
paysafecard.com
Certificate
The complete raw certificate details for st.paysafecash.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEezCCA2OgAwIBAgIQA2MGbTsB4N4VfU20vQAh4TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDQyNzAwMDAwMFoXDTI0MDUyNjIzNTk1OVowHTEb MBkGA1UEAxMSc3QucGF5c2FmZWNhc2guY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAqRHQLv3KR4CJDwLhJNMZrWI9bhhTKzRBXogbnvgiuY1YhJj0 yed1azFc5IoqsYUbBR8bjfp71PFQc12gNjVdLupSg4bT/dHTFEZK3PWI8OdKxE70 1/NxITnYZ5htsqZGc+Gbk98AEAGoOipM0ONNxAxkpPJPYvwzZB3tFuV/8z+X3vWE 1WUJgcrEuqWnjixTmCnQm/JdeLn9m1pPwJhBBduv+BPaHgMbk80CYV4nm1vjQ8UT v2CciXilZu2iGIOaoxCDqiQSU19/l7lLh4KeawcnP2p/qSIBoq+R200T/NnE3U3T PVd73jNe902jOnm+N4md9M2e/2wNwp5Kt1kkgQIDAQABo4IBljCCAZIwHwYDVR0j BBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFMW/XG570kn59QF7 gpDUJk3hMb8HMDUGA1UdEQQuMCyCEnN0LnBheXNhZmVjYXNoLmNvbYIWd3d3LnN0 LnBheXNhZmVjYXNoLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJt MDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAEC ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAy LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5h bWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAA6aekcVfr5GkTjviGUIq+e3 hfD+yKqXsnhsCoqi4pBwfH3Zl1vDTuxYgrIh6qDr8ARTghPAXP2UqWgnFvTrx0NX G/iUJKycLGdSXu+Gc1nVhzVfxhaEds9g58LMhpITTL57hLNkY8hyFeTASKTT3/qC tezqxt9t507BG1Vkbo7+1QFqL+tj/mySsQfjMWzD64RXClhQ2OGozEf0UaSM20eX r6ZAZEgGU81/92m91Dgt2N+X4mEFr0G4sI59B4dS32yj58Nz8Tub4M1finefQYgz 7SALoUyn4WwU+YRX0SjdBSgJi2kznCDShoHlcxr3knD4mTVjR34zwwsS69UgZd8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHQLv3KR4CJDwLhJNMZ rWI9bhhTKzRBXogbnvgiuY1YhJj0yed1azFc5IoqsYUbBR8bjfp71PFQc12gNjVd LupSg4bT/dHTFEZK3PWI8OdKxE701/NxITnYZ5htsqZGc+Gbk98AEAGoOipM0ONN xAxkpPJPYvwzZB3tFuV/8z+X3vWE1WUJgcrEuqWnjixTmCnQm/JdeLn9m1pPwJhB Bduv+BPaHgMbk80CYV4nm1vjQ8UTv2CciXilZu2iGIOaoxCDqiQSU19/l7lLh4Ke awcnP2p/qSIBoq+R200T/NnE3U3TPVd73jNe902jOnm+N4md9M2e/2wNwp5Kt1kk gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4501851724938917930868081830762914273 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'st.paysafecash.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21343057563967159222109932195120853023183786092836709463835075765455107525314337308890748209156119728006735051086154452906387649529622166259912975639324967919407958321414673226152261294567852670685864070477354014389630840363775973441649365356959675284323353244536411243020663348651437717059942899705468133019038252481238828982893135989830558567406125828201824056611195696138162178172031137948672516903357539917058125858294560900441231771452583207102673898370262990700910462948892899469585174061423685345745782355942514899860178341767149215347843232306186441581315232812664918631176055541723689695737009191529102255233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c5bf5c6e7bd249f9f5017b8290d4264de131bf07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.paysafecash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st.paysafecash.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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