demo.verified.me
Issued by Amazon
About this certificate
This digital certificate with serial number 04:52:07:f9:58:4a:5c:e2:ef:a5:2f:c8:8d:76:01:fa was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=demo.verified.me
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:52:07:f9:58:4a:5c:e2:ef:a5:2f:c8:8d:76:01:faSerial Number (int): 5742842057543790989546451520382697978
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 52:d9:b1:ca:72:8c:91:10:ce:31:70:29:d6:cb:de:a3:96:ef:39:9c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 6f:f6:e5:0c:96:11:55:1e:85:ab:d9:0f:fb:1a:59:40:3b:6d:02:cd
Fingerprint (sha256): 1c:85:11:7c:0c:76:7c:a6:1a:8d:d7:d5:78:f5:fe:2b:bc:3e:7d:80:dc:65:0a:b8:1b:2b:b6:ae:28:a5:e8:15
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate demo.verified.me
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for demo.verified.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
demo.verified.me
*.demo.verified.me
app.demo.verified.me
*.demo.verified.me
app.demo.verified.me
Other certificates including the domain name verified.me
(limited to 100 certificates)
technology.agilitihealth.com
status.zohocorp.com
status.digitalhumans.jp
status.slightlydifferent.co.nz
*.verified.me
verified.me
idp-sig-cmt.verified.me
alpha.noc.cloudi.cloud
status.clear.co
status.zohocorp.com
status.manageengine.cn
www.verified.me
verified.me
status.lan.zenvia360.com
mobile.verified.me
status.editwebsites.co.uk
status.clear.co
status.manageengine.cn
*.verified.me
status.hayesmanagement.com
mobile.verified.me
status.digitalhumans.jp
mobile.verified.me
demo.verified.me
alpha.noc.cloudi.cloud
mobile.verified.me
status.savantlabs.io
uptime.koneksahealth.com
status.manageengine.cn
status.on.seclore.com
mobile.verified.me
demo.verified.me
app.verified.me
www.verified.me
status.digitalhumans.jp
status.on.seclore.com
www.verified.me
status.hayesmanagement.com
status.savantlabs.io
status.on.seclore.com
status.digitalhumans.jp
staging-status.uleeco.com
partner-status.verified.me
status.vodlix.com
status.streamsets.com
*.maple.verified.me
app.verified.me
uptime.koneksahealth.com
uptime.koneksahealth.com
status.hayesmanagement.com
uptime.koneksahealth.com
status.digitalhumans.jp
techstatus.solano.edu
*.ibm.verified.me
status.slightlydifferent.co.nz
status.chevinfleet.com
status.chevinfleet.com
www.verified.me
app.verified.me
staging-status.uleeco.com
status.vodlix.com
www.verified.me
status.hayesmanagement.com
stats.mediamanaged.com
status.digitalhumans.jp
*.int.verified.me
status.digitalhumans.jp
networkstatus.thomas-and-company.com
status.editwebsites.co.uk
verified.me
*.verified.me
status.hayesmanagement.com
content.uat.verified.me
status.streamsets.com
staging-status.uleeco.com
status.hayesmanagement.com
status.hayesmanagement.com
networkstatus.thomas-and-company.com
mobile.verified.me
verified.me
status.digitalhumans.jp
*.uat.verified.me
status.slightlydifferent.co.nz
status.manageengine.cn
*.verified.me
status.lan.zenvia360.com
stats.mediamanaged.com
status.hayesmanagement.com
images.verified.me
status.slightlydifferent.co.nz
*.verified.me
status.digitalhumans.jp
monitoring.carletoninc.com
staging-status.uleeco.com
www.verified.me
verified.me
images.verified.me
*.verified.me
status.chevinfleet.com
status.hayesmanagement.com
status.zohocorp.com
status.digitalhumans.jp
status.slightlydifferent.co.nz
*.verified.me
verified.me
idp-sig-cmt.verified.me
alpha.noc.cloudi.cloud
status.clear.co
status.zohocorp.com
status.manageengine.cn
www.verified.me
verified.me
status.lan.zenvia360.com
mobile.verified.me
status.editwebsites.co.uk
status.clear.co
status.manageengine.cn
*.verified.me
status.hayesmanagement.com
mobile.verified.me
status.digitalhumans.jp
mobile.verified.me
demo.verified.me
alpha.noc.cloudi.cloud
mobile.verified.me
status.savantlabs.io
uptime.koneksahealth.com
status.manageengine.cn
status.on.seclore.com
mobile.verified.me
demo.verified.me
app.verified.me
www.verified.me
status.digitalhumans.jp
status.on.seclore.com
www.verified.me
status.hayesmanagement.com
status.savantlabs.io
status.on.seclore.com
status.digitalhumans.jp
staging-status.uleeco.com
partner-status.verified.me
status.vodlix.com
status.streamsets.com
*.maple.verified.me
app.verified.me
uptime.koneksahealth.com
uptime.koneksahealth.com
status.hayesmanagement.com
uptime.koneksahealth.com
status.digitalhumans.jp
techstatus.solano.edu
*.ibm.verified.me
status.slightlydifferent.co.nz
status.chevinfleet.com
status.chevinfleet.com
www.verified.me
app.verified.me
staging-status.uleeco.com
status.vodlix.com
www.verified.me
status.hayesmanagement.com
stats.mediamanaged.com
status.digitalhumans.jp
*.int.verified.me
status.digitalhumans.jp
networkstatus.thomas-and-company.com
status.editwebsites.co.uk
verified.me
*.verified.me
status.hayesmanagement.com
content.uat.verified.me
status.streamsets.com
staging-status.uleeco.com
status.hayesmanagement.com
status.hayesmanagement.com
networkstatus.thomas-and-company.com
mobile.verified.me
verified.me
status.digitalhumans.jp
*.uat.verified.me
status.slightlydifferent.co.nz
status.manageengine.cn
*.verified.me
status.lan.zenvia360.com
stats.mediamanaged.com
status.hayesmanagement.com
images.verified.me
status.slightlydifferent.co.nz
*.verified.me
status.digitalhumans.jp
monitoring.carletoninc.com
staging-status.uleeco.com
www.verified.me
verified.me
images.verified.me
*.verified.me
status.chevinfleet.com
status.hayesmanagement.com
Certificate
The complete raw certificate details for demo.verified.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEoDCCA4igAwIBAgIQBFIH+VhKXOLvpS/IjXYB+jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MTMwMDAwMDBaFw0yMTA1MTMx MjAwMDBaMBsxGTAXBgNVBAMTEGRlbW8udmVyaWZpZWQubWUwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCwrWcreZzhEYDD54I6W3nroe0nCOJAdOqEsvGg 7PR++k9i9Xe2A5mHkbMnPLNVY0YU5JlI7ng/IBNif6X//JNn7RkJVS7qrsZnGh5T B2TZnCaX6ceMLcWNfu5TL7tceSCpk206q4o9EkGBqgKuYao+0FTdXh5E0WEyh+Jb Ljsi/yvfYZCXKURMB7xepMXqcxDVkXJSzUUuFApJEUfck+4hd03CZ9cWC/WREnx+ dUEKlun6Zb2XN8gxpbJio+5o6IqWIpSdImjr/rSxWrmqa2BjG12V4/il55uUyZXZ qFh/+TSNEe0lrRRcgpBoXrn7u3rqHl6HgSmhnDQ9kl3yja/lAgMBAAGjggGzMIIB rzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUUtmx ynKMkRDOMXAp1sveo5bvOZwwRQYDVR0RBD4wPIIQZGVtby52ZXJpZmllZC5tZYIS Ki5kZW1vLnZlcmlmaWVkLm1lghRhcHAuZGVtby52ZXJpZmllZC5tZTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAWn6LfyMDZrpjsnU0QyosjoeglvgAOfI6OxOgP PEuPsoOBV1CreOUOM5Y3M0smS4k16tQen83GPMUYjW6w5OD6x5DWUnSdo2CZhq/m UO4iP1ZMrCd3NyjMIoWtS3dioM4l9urIxa/QsFEkNOvQc2xaCY5+9xYmusY56I+a H4Y2TLldB2Zmb4pqRrKu4D3k2yKgHumQ4ptN+9+nDzPMcdTh4+y6FtdC855brQD9 YgB8rT19TJPyGsr4XlsdRFWI8VDc36Skr4fX7h26X55JK917Sa+7upEpC5wDwzQI ELZOlFSzkL/W+DQ5ECljh6IhgNy9SGIdG2QKM6/nzhz2MQy0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK1nK3mc4RGAw+eCOlt5 66HtJwjiQHTqhLLxoOz0fvpPYvV3tgOZh5GzJzyzVWNGFOSZSO54PyATYn+l//yT Z+0ZCVUu6q7GZxoeUwdk2Zwml+nHjC3FjX7uUy+7XHkgqZNtOquKPRJBgaoCrmGq PtBU3V4eRNFhMofiWy47Iv8r32GQlylETAe8XqTF6nMQ1ZFyUs1FLhQKSRFH3JPu IXdNwmfXFgv1kRJ8fnVBCpbp+mW9lzfIMaWyYqPuaOiKliKUnSJo6/60sVq5qmtg YxtdleP4peeblMmV2ahYf/k0jRHtJa0UXIKQaF65+7t66h5eh4EpoZw0PZJd8o2v 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5742842057543790989546451520382697978 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo.verified.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22303449883775073916687518608395020858115293973575804657065484793841590552303283378584802285275796608795093815858588320445729360043756558235432220039488997229274894606889661989025279089436583939596516979295587330258542640908795281050318462935590613248243651376308193585912990603064226740111041276027628205683989873539084830602704111974085697807839094459497455641508821365775418991046657230959120785048608349889680486518803251941428312157492416023842322054022703152233027790428985946043218029806169779484581033072878269794511427691641491773691948545346705334153953583419495393736691138591587630064924696814008843218917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 52d9b1ca728c9110ce317029d6cbdea396ef399c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.verified.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.verified.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.demo.verified.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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