*.primary.live.schibsted.tech
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:ef:fd:05:e1:3f:34:cd:7e:a9:e3:9e:36:9b:6a:01 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.primary.live.schibsted.tech
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:ef:fd:05:e1:3f:34:cd:7e:a9:e3:9e:36:9b:6a:01Serial Number (int): 18526054809874805485112309850218129921
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 84:57:58:65:8a:a7:f6:1a:91:a2:bd:12:8c:04:6a:af:8f:d5:30:9b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 77:00:50:5d:3a:0d:69:ad:cc:06:5c:f0:30:56:d2:66:bc:2b:f4:65
Fingerprint (sha256): 1a:2c:cd:b0:70:22:2b:52:eb:82:09:f3:d6:dc:e2:a7:02:93:d5:df:ca:7d:53:4b:43:31:15:c2:2e:e3:21:b6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.primary.live.schibsted.tech
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.primary.live.schibsted.tech
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.primary.live.schibsted.tech
Other certificates including the domain name schibsted.tech
(limited to 100 certificates)
live-api-prod.schibsted.tech
vip.schibsted.tech
schibsted.tech
*.schibsted.tech
*.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.dev.convox.schibsted.tech
vip.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
schibsted.tech
eventhub.primary.live.schibsted.tech
*.schibsted.tech
*.sls.sa.schibsted.tech
ap.no
schibsted.tech
*.fallback.live.schibsted.tech
*.primary.live.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
liveblog-users-images.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.schibsted.tech
schibsted.tech
*.schibsted.tech
schibsted.tech
vip.schibsted.tech
redirect.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.schibsted.tech
ap.no
schibsted.tech
*.dev.schibsted.tech
*.live.schibsted.tech
ap.no
schibsted.tech
*.schibsted.tech
vip.schibsted.tech
ap.no
static.prod.schibsted.tech
liveblog-embed.schibsted.tech
*.pro.se.convox.schibsted.tech
ap.no
*.pro.de.convox.schibsted.tech
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
ap.no
*.pre.convox.schibsted.tech
ap.no
ap.no
*.dev.convox.schibsted.tech
*.schibsted.tech
live-api-prod.schibsted.tech
liveblog-static-assets.schibsted.tech
*.schibsted.tech
core-header.schibsted.tech
*.dev.convox.schibsted.tech
*.schibsted.tech
*.bord4.convox.schibsted.tech
*.pro.se.convox.schibsted.tech
liveblog-users-images.schibsted.tech
*.pro.de.convox.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.sa.schibsted.tech
liveblog-avatars.schibsted.tech
*.pre.convox.schibsted.tech
*.pre.se.convox.schibsted.tech
primary.live.schibsted.tech
schibsted.tech
most-read.schibsted.tech
ap.no
*.live.schibsted.tech
live-timeline-addon.schibsted.tech
schibsted.tech
schibsted.tech
ap.no
*.pro.convox.schibsted.tech
live-api-prod.schibsted.tech
liveblog-embed.schibsted.tech
schibsted.tech
schibsted.tech
schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
ap.no
schibsted.tech
vip.schibsted.tech
vip.schibsted.tech
schibsted.tech
*.schibsted.tech
*.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.dev.convox.schibsted.tech
vip.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
schibsted.tech
eventhub.primary.live.schibsted.tech
*.schibsted.tech
*.sls.sa.schibsted.tech
ap.no
schibsted.tech
*.fallback.live.schibsted.tech
*.primary.live.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
liveblog-users-images.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.schibsted.tech
schibsted.tech
*.schibsted.tech
schibsted.tech
vip.schibsted.tech
redirect.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.schibsted.tech
ap.no
schibsted.tech
*.dev.schibsted.tech
*.live.schibsted.tech
ap.no
schibsted.tech
*.schibsted.tech
vip.schibsted.tech
ap.no
static.prod.schibsted.tech
liveblog-embed.schibsted.tech
*.pro.se.convox.schibsted.tech
ap.no
*.pro.de.convox.schibsted.tech
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
ap.no
*.pre.convox.schibsted.tech
ap.no
ap.no
*.dev.convox.schibsted.tech
*.schibsted.tech
live-api-prod.schibsted.tech
liveblog-static-assets.schibsted.tech
*.schibsted.tech
core-header.schibsted.tech
*.dev.convox.schibsted.tech
*.schibsted.tech
*.bord4.convox.schibsted.tech
*.pro.se.convox.schibsted.tech
liveblog-users-images.schibsted.tech
*.pro.de.convox.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.sa.schibsted.tech
liveblog-avatars.schibsted.tech
*.pre.convox.schibsted.tech
*.pre.se.convox.schibsted.tech
primary.live.schibsted.tech
schibsted.tech
most-read.schibsted.tech
ap.no
*.live.schibsted.tech
live-timeline-addon.schibsted.tech
schibsted.tech
schibsted.tech
ap.no
*.pro.convox.schibsted.tech
live-api-prod.schibsted.tech
liveblog-embed.schibsted.tech
schibsted.tech
schibsted.tech
schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
ap.no
schibsted.tech
vip.schibsted.tech
Certificate
The complete raw certificate details for *.primary.live.schibsted.tech in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQDe/9BeE/NM1+qeOeNptqATANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDYwMDAwMDBaFw0yMzAxMDQy MzU5NTlaMCgxJjAkBgNVBAMMHSoucHJpbWFyeS5saXZlLnNjaGlic3RlZC50ZWNo MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58y2NSyqHbWk/GweXK6Q rA1+9PlMAN9jbT0BGcpZ5oydtTd/lyWSAZRADwPeu1UCJpY7LB1xOaGChe3BUI6H QXyAiry52CZ5d1K5ixzWukhRru+fGZCb8SaZQJNAFKAxQgi6aPsLh3BXGcOyqj3c mjnHs+mP7wNFqpaNpj4kkfLVOylCPw7kQBRfDkmybSo05VJLmdY/1rA+5HcsQCGD YfIbYPMj2Yy0iygwasACJeh4jUfeklcxGhyXeu9q49xd7aHPlfxexAR2QXDx4otk p+vtU8HsnW0PayFP5/IlizNg+4+WscPm8n5aTtT8+CWoXWanM9eS99AmJA8rjkuc iQIDAQABo4IBizCCAYcwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAw HQYDVR0OBBYEFIRXWGWKp/YakaK9EowEaq+P1TCbMCgGA1UdEQQhMB+CHSoucHJp bWFyeS5saXZlLnNjaGlic3RlZC50ZWNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDov L2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAww CjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCf77x16fbd QEk0fQKhj9GFYuCgu24LN8wJrwEPVPwi6DZlXbWpaVG50RYgALMDJHgyzVdE522H hjPz/BPybAGC/pi9TzDZcge1gJFngclVH1LlAubHWwwKQ1gANPn/0KVyX5/7dzx2 Eq6E/jRgptM4CHGHObPis8JnZQB6MtmeB1UTbHYk3SampPZuA7FJ7bj+/G9tqZWN hfm2iCF5r/DhVawrnv+AwtoeG+sCft5mHwM73MmXARDBXWIvhZYDRjPL3m4OhQXZ MtoX1mR16B0Xd4ub3BWUkjmvvt4Kmy0PnrjcpoUz1eFu/JsBV9YEkNIDNSpBcPmO YLEwjPPAgI7e -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58y2NSyqHbWk/GweXK6Q rA1+9PlMAN9jbT0BGcpZ5oydtTd/lyWSAZRADwPeu1UCJpY7LB1xOaGChe3BUI6H QXyAiry52CZ5d1K5ixzWukhRru+fGZCb8SaZQJNAFKAxQgi6aPsLh3BXGcOyqj3c mjnHs+mP7wNFqpaNpj4kkfLVOylCPw7kQBRfDkmybSo05VJLmdY/1rA+5HcsQCGD YfIbYPMj2Yy0iygwasACJeh4jUfeklcxGhyXeu9q49xd7aHPlfxexAR2QXDx4otk p+vtU8HsnW0PayFP5/IlizNg+4+WscPm8n5aTtT8+CWoXWanM9eS99AmJA8rjkuc iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18526054809874805485112309850218129921 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.primary.live.schibsted.tech' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29261995572882199274632006752500054051237058275328648907430339189156635664269165932051280096022323832296204162740475328084439816046661680231965874752012904980898907314132560749525768408996940898967939888830716559467709408010243532871853801481067546913366012261090368090289208993399683378626349787134100036322780522894733595508846154401444185902212380708572923544451927488370062631465067567316970240022790052222179575226721612153237333355890001203520406791272950792896483706790587114037972727964983651297069666247639347080391599902182098084242785880858297140210826717080161427982685764055462865667962299692450075876489 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 845758658aa7f61a91a2bd128c046aaf8fd5309b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primary.live.schibsted.tech' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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