*.voxpopme.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0b:25:d1:7a:ea:e3:bc:36:67:5b:d2:0c:9b:7d:43:40 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.voxpopme.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:25:d1:7a:ea:e3:bc:36:67:5b:d2:0c:9b:7d:43:40Serial Number (int): 14817871699537660431283301153396048704
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 44:2d:7b:02:37:cf:f5:95:ae:da:84:53:2d:d0:33:f7:35:6a:83:f9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 5d:97:72:9e:99:07:00:31:ee:ea:25:8a:57:49:b8:17:82:d1:25:8d
Fingerprint (sha256): 1c:6d:70:1e:06:de:84:b3:a5:5d:3d:b9:c4:a5:4a:65:c1:12:62:01:be:9b:c2:d3:60:32:bc:97:a4:79:3c:a4
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.voxpopme.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.voxpopme.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.voxpopme.com
Other certificates including the domain name voxpopme.com
(limited to 100 certificates)
resources.voxpopme.com
web-stage.voxpopme.com
*.stage-eu.voxpopme.com
voxpopme.com
blog.voxpopme.com
content.voxpopme.com
qna.fi
opinions.voxpopme.com
site.voxpopme.com
work.idenfit.com
bomrelmohan.com.np
*.voxpopme.com
developer.voxpopme.com
site-test2.voxpopme.com
developer.voxpopme.com
content.voxpopme.com
resources.voxpopme.com
*.voxpopme.com
blog.voxpopme.com
www.metrogroup.team
*.stage-eu.voxpopme.com
site.voxpopme.com
*.voxpopme.com
voxpopme.com
voxpopme.com
smartrider.urbanmania.app
nvor.net
zendesk.translationexchange.com
*.voxpopme.com
*.voxpopme.com
zendesk.translationexchange.com
content.voxpopme.com
blog.voxpopme.com
app.tpcm-usa.com
*.voxpopme.com
content.voxpopme.com
*.voxpopme.com
webprofy.uz
www.bravespetits.com
*.voxpopme.systems
courthousebuys.com
unfoldingstories.app
survey.voxpopme.com
*.eu.voxpopme.com
is.voxpopme.com
www.giftofcrafttoronto.ca
voxpopme.com
api.voxpopme.com
blog.voxpopme.com
*.voxpopme.systems
www.netanel.io
*.voxpopme.com
*.voxpopme.com
*.eu.voxpopme.com
resources.voxpopme.com
www.jgds.org
dashboard.voxpopme.com
blog.voxpopme.com
content-staging.voxpopme.com
*.voxpopme.com
*.stage-eu.voxpopme.com
resources.voxpopme.com
content.voxpopme.com
voxpopme.com
api.voxpopme.com
survey.voxpopme.com
voxpopme.com
*.voxpopme.com
bez-dzieci.pl
blog.voxpopme.com
*.voxpopme.systems
resources.voxpopme.com
*.stage-eu.voxpopme.com
*.voxpopme.com
opinions.voxpopme.com
content.voxpopme.com
is.voxpopme.com
voxpopme.com
opinions.voxpopme.com
voxpopme.com
*.eu.voxpopme.com
web-stage.voxpopme.com
bundy.me
resources.voxpopme.com
opinions.voxpopme.com
*.voxpopme.com
*.voxpopme.systems
signin.statusfy.com
content.voxpopme.com
blog.voxpopme.com
dev.ylboisestate.app
site-test.voxpopme.com
content.voxpopme.com
www.urbancivic.in
juniperfencing.co.uk
site-test.voxpopme.com
*.utility.voxpopme.com
www.tinichats.com
content.voxpopme.com
web-stage.voxpopme.com
web-stage.voxpopme.com
*.stage-eu.voxpopme.com
voxpopme.com
blog.voxpopme.com
content.voxpopme.com
qna.fi
opinions.voxpopme.com
site.voxpopme.com
work.idenfit.com
bomrelmohan.com.np
*.voxpopme.com
developer.voxpopme.com
site-test2.voxpopme.com
developer.voxpopme.com
content.voxpopme.com
resources.voxpopme.com
*.voxpopme.com
blog.voxpopme.com
www.metrogroup.team
*.stage-eu.voxpopme.com
site.voxpopme.com
*.voxpopme.com
voxpopme.com
voxpopme.com
smartrider.urbanmania.app
nvor.net
zendesk.translationexchange.com
*.voxpopme.com
*.voxpopme.com
zendesk.translationexchange.com
content.voxpopme.com
blog.voxpopme.com
app.tpcm-usa.com
*.voxpopme.com
content.voxpopme.com
*.voxpopme.com
webprofy.uz
www.bravespetits.com
*.voxpopme.systems
courthousebuys.com
unfoldingstories.app
survey.voxpopme.com
*.eu.voxpopme.com
is.voxpopme.com
www.giftofcrafttoronto.ca
voxpopme.com
api.voxpopme.com
blog.voxpopme.com
*.voxpopme.systems
www.netanel.io
*.voxpopme.com
*.voxpopme.com
*.eu.voxpopme.com
resources.voxpopme.com
www.jgds.org
dashboard.voxpopme.com
blog.voxpopme.com
content-staging.voxpopme.com
*.voxpopme.com
*.stage-eu.voxpopme.com
resources.voxpopme.com
content.voxpopme.com
voxpopme.com
api.voxpopme.com
survey.voxpopme.com
voxpopme.com
*.voxpopme.com
bez-dzieci.pl
blog.voxpopme.com
*.voxpopme.systems
resources.voxpopme.com
*.stage-eu.voxpopme.com
*.voxpopme.com
opinions.voxpopme.com
content.voxpopme.com
is.voxpopme.com
voxpopme.com
opinions.voxpopme.com
voxpopme.com
*.eu.voxpopme.com
web-stage.voxpopme.com
bundy.me
resources.voxpopme.com
opinions.voxpopme.com
*.voxpopme.com
*.voxpopme.systems
signin.statusfy.com
content.voxpopme.com
blog.voxpopme.com
dev.ylboisestate.app
site-test.voxpopme.com
content.voxpopme.com
www.urbancivic.in
juniperfencing.co.uk
site-test.voxpopme.com
*.utility.voxpopme.com
www.tinichats.com
content.voxpopme.com
web-stage.voxpopme.com
Certificate
The complete raw certificate details for *.voxpopme.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIQCyXReurjvDZnW9IMm31DQDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDkwNDAwMDAwMFoXDTI0MTAwMjIzNTk1OVowGTEX MBUGA1UEAwwOKi52b3hwb3BtZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDH6jlr9BLo+b6Mha29PGPcyLZabkOUNquXhv7mgd5ShHS6cd6mvzkG rOo+dtqg0433U9yKM2gyhbJM/inIwirz7EyPkaj97+uqj5U8r/JttsjST4zS3l9a UQTqAwSdMv9ou+BywxHgLTr6DL9Pkr8hf8dwNL9R6tsH9HLOQF3jDi281AnLz+At KpQspXoa+mHEQfk31j9xzhQzxbSeMluwB/xiuW2phCH6dDcaYEmnr7BepBuW/2MQ DDdOlxk6bw2/aXADcpot+y1SDhXhrMyhAMrP0ptEePMjvPUD0Ijgo/982X5WOQUL thmO84A+qLYj87zWzDkG3l/1mpLfT1t3AgMBAAGjggLnMIIC4zAfBgNVHSMEGDAW gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQURC17AjfP9ZWu2oRTLdAz 9zVqg/kwGQYDVR0RBBIwEIIOKi52b3hwb3BtZS5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYD VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB Af8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAYperV+HAAAEAwBHMEUCIAiy5dLfhA60dMC/ w/BAmroz44BM3rZ3LZLNNgF1QtHjAiEAplbs8aiUiaM/Tautu4LDlQOkQ0BI3kqv UGEpPGvPVBIAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYpe rVskAAAEAwBHMEUCIQC0RL7/4pKfx2zebBlD/GoAbtXQrJ1dzbN4fC688Uv6kgIg ZW91rRZeatT8hcwrTVweFpvenqxrDA02t8Ep6OUlNAgAdgDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYperVrrAAAEAwBHMEUCIDjgd1ne24990jTc PGPRUn1l4yelWsCvxj+vn2u0bIKeAiEAry7z8bS1kxyTG81XQX2BR9lwL1TYDxuu iW5iX4DwNc8wDQYJKoZIhvcNAQELBQADggEBADa+cUk0iat+30VCC9ZhldSLBjqJ fxoiqndvBy+T5wAAsVX1mQQw+ZK4ULpIRXJGziif88QaO4G7itihGS6Mi+WNCYg3 oyWG3fntYrC5fLyjXW1L81I1bWhwSRqC0nxw3IYyA7OGuplEkrxoRaFeJNQYvOml PyQTiSxLPOi1hQPAIQC5UJlqnfMxPIBZllRrv4QSmOejJbktW6Suy3sdwKjO2oMw Ike8D3zXaKwHAny9UoiIqqIibC6o92YNPWeclhHmgHNcRHXQcQdWc7cjAwY4miKr iIt1WLxhhc/k/HUhS11tmZUw/Ew4t4MEADaHvloxKCMd6mt/DGCNtoblJfM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+o5a/QS6Pm+jIWtvTxj 3Mi2Wm5DlDarl4b+5oHeUoR0unHepr85BqzqPnbaoNON91PcijNoMoWyTP4pyMIq 8+xMj5Go/e/rqo+VPK/ybbbI0k+M0t5fWlEE6gMEnTL/aLvgcsMR4C06+gy/T5K/ IX/HcDS/UerbB/RyzkBd4w4tvNQJy8/gLSqULKV6GvphxEH5N9Y/cc4UM8W0njJb sAf8YrltqYQh+nQ3GmBJp6+wXqQblv9jEAw3TpcZOm8Nv2lwA3KaLfstUg4V4azM oQDKz9KbRHjzI7z1A9CI4KP/fNl+VjkFC7YZjvOAPqi2I/O81sw5Bt5f9ZqS309b dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14817871699537660431283301153396048704 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.voxpopme.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25236922997051240038879417300140304312054098190519031421232195374376657848191199884106763703339601023699222320990645126176872370677720785497572891090529561337193308083742580486288197751139907667070151197597374509061590888496010163376460952878782555872061647935345747610670783336111152714030336617802197138826210476996556725086482322017990910431981424575719284207918236657416085674911019855121791973777122688287524758492199398418369696332346817849169113976401937489910339982998042198948436430990434956966778631431460064963564947862512138990772108648986626541215024331588752236387050196748770018682476697198959136824183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 442d7b0237cff595aeda84532dd033f7356a83f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voxpopme.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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