*.rummytime.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0a:bf:56:3d:39:9b:a7:c1:df:f7:8a:78:8f:cb:42:58 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.rummytime.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:bf:56:3d:39:9b:a7:c1:df:f7:8a:78:8f:cb:42:58Serial Number (int): 14285757795801959493288150007680811608
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 83:4a:06:8f:bb:7d:7f:dc:83:b2:3c:5b:35:09:ea:78:d7:a7:1b:dd
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): e4:be:c7:ec:b8:a4:78:ed:64:4e:5e:e7:c4:8f:9f:e3:82:d5:a2:f5
Fingerprint (sha256): 1d:60:14:69:b1:4c:eb:26:d2:93:22:e7:4e:2a:f2:b9:95:d7:f7:de:d4:3a:6b:f4:af:c5:cc:f8:ad:5a:44:b2
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.rummytime.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.rummytime.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.rummytime.com
rummytime.com
rummytime.com
Other certificates including the domain name rummytime.com
(limited to 100 certificates)
iecaminosluz.mybookplus.net
*.rummytime.com
link.eco99-prod.moveodevelop.com
al.googleplay.rummytime.com
www.pp.fun
www.countingdowntocoble.com
www.jollytennis.com
01010000.tech
*.rummytime.com
bkiaccounting.tallyfor.com
app.ardenthire.com
quintaesenciastore.com
iecaminosluz.mybookplus.net
link.vircap.io
*.rummytime.com
www.staking.adadao.org
www.dresez.com
videocreator.studio
tamminhdao.com
carebuds-dev-eu.care-portal.sidekickhealth.com
www.flexnet.dev
inh-elgrancatire.elinmejorable.com
www.naoztd.com
www.manzardapartman.hu
biotechhoney.com
rummytime.com
www.naoztd.com
*.rummytime.com
so-design-studio.com
rongeka.com
badassxxx.com
badassxxx.com
biotechhoney.com
abedstudio.com
www.nenatanasijevic.info
app.plan-play.com
dev-app.viviclinic.com
fingermanga.com
*.rummytime.com
rummytime.com
www.the-green-brick-road.org
gazfoxart.com
qrq.app
explorer.zksync.io
www.alidogan.dev
rummytime.com
www.train-go-sorry.com
www.attaboy.io
app.h3skills.com
www.classhouse.co
hazelthexton.com
events.inclusivetechgroup.org
www.hellovia.id
www.amadeleite.com.br
www.servioriente.tk
*.rummytime.com
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
semesterticket.yanniks.app
nkadone-staging.grobox.co.ke
stage.liontic.com
www.distancelearnings.in
app.meilleurecopro.com
app.plan-play.com
footmob.in
inh-creamburguer.elinmejorable.com
*.stage.rummytime.com
p3.org
esnetworks.com
admin.colorribbon.de
dashboard.dscor.net
*.rummytime.com
tamminhdao.com
link.vircap.io
www.zhangqichuan.com
stage.liontic.com
yadidi.donyaplatform.com
*.rummytime.com
docs.useswyft.com
delrio.biibiic.com
rentzol.com
*.rummytime.com
s44.tech
lancaste.dev
kragic.com
*.rummytime.com
onoa.in
rummytime.com
wanderingjew.info
www.fasteque.ch
windupmusic.ca
buyc.unerry.jp
www.moduballet.co.kr
*.stage.rummytime.com
www.deckdealer.co.za
rummytime.com
www.countingdowntocoble.com
www.moncayorural.com
mouquta.com
rummytime.com
*.rummytime.com
link.eco99-prod.moveodevelop.com
al.googleplay.rummytime.com
www.pp.fun
www.countingdowntocoble.com
www.jollytennis.com
01010000.tech
*.rummytime.com
bkiaccounting.tallyfor.com
app.ardenthire.com
quintaesenciastore.com
iecaminosluz.mybookplus.net
link.vircap.io
*.rummytime.com
www.staking.adadao.org
www.dresez.com
videocreator.studio
tamminhdao.com
carebuds-dev-eu.care-portal.sidekickhealth.com
www.flexnet.dev
inh-elgrancatire.elinmejorable.com
www.naoztd.com
www.manzardapartman.hu
biotechhoney.com
rummytime.com
www.naoztd.com
*.rummytime.com
so-design-studio.com
rongeka.com
badassxxx.com
badassxxx.com
biotechhoney.com
abedstudio.com
www.nenatanasijevic.info
app.plan-play.com
dev-app.viviclinic.com
fingermanga.com
*.rummytime.com
rummytime.com
www.the-green-brick-road.org
gazfoxart.com
qrq.app
explorer.zksync.io
www.alidogan.dev
rummytime.com
www.train-go-sorry.com
www.attaboy.io
app.h3skills.com
www.classhouse.co
hazelthexton.com
events.inclusivetechgroup.org
www.hellovia.id
www.amadeleite.com.br
www.servioriente.tk
*.rummytime.com
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
semesterticket.yanniks.app
nkadone-staging.grobox.co.ke
stage.liontic.com
www.distancelearnings.in
app.meilleurecopro.com
app.plan-play.com
footmob.in
inh-creamburguer.elinmejorable.com
*.stage.rummytime.com
p3.org
esnetworks.com
admin.colorribbon.de
dashboard.dscor.net
*.rummytime.com
tamminhdao.com
link.vircap.io
www.zhangqichuan.com
stage.liontic.com
yadidi.donyaplatform.com
*.rummytime.com
docs.useswyft.com
delrio.biibiic.com
rentzol.com
*.rummytime.com
s44.tech
lancaste.dev
kragic.com
*.rummytime.com
onoa.in
rummytime.com
wanderingjew.info
www.fasteque.ch
windupmusic.ca
buyc.unerry.jp
www.moduballet.co.kr
*.stage.rummytime.com
www.deckdealer.co.za
rummytime.com
www.countingdowntocoble.com
www.moncayorural.com
mouquta.com
rummytime.com
Certificate
The complete raw certificate details for *.rummytime.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIQCr9WPTmbp8Hf94p4j8tCWDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyMzAwMDAwMFoXDTI0MDYyMDIzNTk1OVowGjEY MBYGA1UEAwwPKi5ydW1teXRpbWUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAv13+Rbdl4lxqYXF+GHCdTddOk1f6/CcaqJwnTTjw0NgF9fsd9csX oWHEq+J5eplr72HbuoSYPWIii+rE9IjkB4hrU6CFqBQsqe9bQTnE/mn3LOk9M7w6 M4hh5P08whOsrsdW8fdAxisBCbfwOqJplimkAry+2YO3+4JK0HYGfgyD+sjbN/kW qiJFmYdRWtbpLgbie8U0T+P0LGkpd0vbujP4sHK+UpQZx4PBzrclhkMZ7cvS4211 oeR9CATzeytAWBaIQ3H3QKaOlL5MWq+z21k9+Pmo2/SiAWLKLjZi/HSZiRKgVRPJ 33eM873bpeukrJHQ1rjR6OTwHKqMhXsX2QIDAQABo4IC9jCCAvIwHwYDVR0jBBgw FoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFINKBo+7fX/cg7I8WzUJ 6njXpxvdMCkGA1UdEQQiMCCCDyoucnVtbXl0aW1lLmNvbYINcnVtbXl0aW1lLmNv bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3Qu Y29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20v cjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiEX4dLYAAAQD AEcwRQIgSrhCsUDplMUBsmDmXA3qccyn0CumOrqJM/fWNNeplnECIQDhGjAbZP6L IUiiH469w+MBHHkR6hC2ZQihghF6IvbCBAB2AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABiEX4dHkAAAQDAEcwRQIhAOp4uuuVYNtjSjCLW6RBKiVg C6xkJMDkoKoe2jhXd3hPAiATbqAfNCIVkqojDgfNSdHCs7BFSrcj3PYuv5qf4sTq eAB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiEX4dEUAAAQD AEYwRAIgfOM+fhWcktGmtc3Z1/vtJjAMba9amC1t46NswPiSxkMCIAbBsK0ybJNx cpqF3D8oN4cxMZ+4at42xRJSUkCLx3phMA0GCSqGSIb3DQEBCwUAA4IBAQAgPlkD Zmzwjnl6Iykpampo043af92mK2DJbAWNszZa1g3Dg50NjExDP4qPNjRyp8n4ViFp 88OSMpw6cQ/Fmg6F2V+qVDE1gyG2ZLKACpPKEizbVYHyCCsS8doGwFrZDkFyxIOa 8M7N/wkc7fS4oT3tTXJWVtIHOuP/ltOFJmhBh5R2Xbem0dxepgUTbujcWH+6r7FM xnW0w9VnwMZ+1Ztvh/C3NGPUpft0oALsfRoISBUEPYM70sjy1qmR04NzuHk592xt tylQ/tp9qsH0H3EUlSaJpMh9nZ7+FlR6b7Sd7sxj4OW+fwT0pMQNZrks2u74OwbX UXPONxcF7tlgfdGG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv13+Rbdl4lxqYXF+GHCd TddOk1f6/CcaqJwnTTjw0NgF9fsd9csXoWHEq+J5eplr72HbuoSYPWIii+rE9Ijk B4hrU6CFqBQsqe9bQTnE/mn3LOk9M7w6M4hh5P08whOsrsdW8fdAxisBCbfwOqJp limkAry+2YO3+4JK0HYGfgyD+sjbN/kWqiJFmYdRWtbpLgbie8U0T+P0LGkpd0vb ujP4sHK+UpQZx4PBzrclhkMZ7cvS4211oeR9CATzeytAWBaIQ3H3QKaOlL5MWq+z 21k9+Pmo2/SiAWLKLjZi/HSZiRKgVRPJ33eM873bpeukrJHQ1rjR6OTwHKqMhXsX 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14285757795801959493288150007680811608 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rummytime.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24157866048207911049827521074556613034815285512805872211110843786689100001640410060396178750573516731612347584319906877114381816971451023371544665762960411373193343715355023345959147684695714959765547475596824978273413841168165563273213794144215271391353039162974965814607501001132172287597965455375355450152314624838109426603210095783212754352295105104363278702515671766170988134814417499471520467585737845598727812672574664629630366460900071044707339463643703553917991566726427703317128573577832866504287826966642863158407511300811407463794980596752572973042932234475055701247283890469385328432220618293968069400537 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 834a068fbb7d7fdc83b23c5b3509ea78d7a71bdd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rummytime.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rummytime.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018845f874b6000004030047304502204ab842b140e994c501b260e65c0dea71cca7d02ba63aba8933f7d634d7a99671022100e11a301b64fe8b2148a21f8ebdc3e3011c7911ea10b66508a182117a22f6c20400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018845f874790000040300473045022100ea78baeb9560db634a308b5ba4412a25600bac6424c0e4a0aa1eda385777784f0220136ea01f34221592aa230e07cd49d1c2b3b0454ab723dcf62ebf9a9fe2c4ea78007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018845f87445000004030046304402207ce33e7e159c92d1a6b5cdd9d7fbed26300c6daf5a982d6de3a36cc0f892c643022006c1b0ad326c9371729a85dc3f28378731319fb86ade36c5125252408bc77a61 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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