collab.nerdfactory.ai
Issued by Amazon
About this certificate
This digital certificate with serial number 06:2a:c3:ec:89:38:3e:5a:c6:0a:ed:fd:b2:8e:d2:de was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=collab.nerdfactory.ai
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:2a:c3:ec:89:38:3e:5a:c6:0a:ed:fd:b2:8e:d2:deSerial Number (int): 8197418252954464092559543241978860254
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c9:9c:a2:7b:44:e1:9f:e2:22:f5:79:ef:4c:b1:e0:61:f9:82:2e:ed
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e3:32:cb:6d:0d:fa:9c:b2:8c:82:d4:ad:7f:0a:a0:b4:fd:dc:7e:84
Fingerprint (sha256): 1e:4a:d9:83:bc:dc:21:51:19:96:62:3e:21:78:81:f3:cb:88:ab:92:6a:16:b8:0f:77:c5:1e:52:15:c8:16:72
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate collab.nerdfactory.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for collab.nerdfactory.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
collab.nerdfactory.ai
Other certificates including the domain name nerdfactory.ai
(limited to 100 certificates)
blog.nerdfactory.ai
blog.nerdfactory.ai
www.cowboytattoo.com.br
www.frikkherding.no
voryq-dev.nerdfactory.ai
kommati.lernit.app
blog.nerdfactory.ai
collab.nerdfactory.ai
aivory-manager-demo.nerdfactory.ai
collab.nerdfactory.ai
blog.nerdfactory.ai
voda-backoffice.nerdfactory.ai
www.urbantransit.app
collab.nerdfactory.ai
pacecapitalmgt.com
mail.nerdfactory.ai
mail.nerdfactory.ai
mamam-media.nerdfactory.ai
product.azago.in
mamam.nerdfactory.ai
www.blindstream.com
www.lascalamalaga.com
blog.nerdfactory.ai
voda-test.nerdfactory.ai
anuta-dev.nerdfactory.ai
mail.nerdfactory.ai
product.azago.in
patent-backend.nerdfactory.ai
blog.nerdfactory.ai
www.thepalettelife.com
cdn.nerdfactory.ai
wooribaby-universal-links.nerdfactory.ai
mail.nerdfactory.ai
www.josiahrininger.com
voryq-media.nerdfactory.ai
www.cowboytattoo.com.br
mail.nerdfactory.ai
link.prost.com
analytics.nerdfactory.ai
befirst-qa.ovdns.co.za
aivory.nerdfactory.ai
about.gapcrossstaging.com
hillswestny.com
blog.nerdfactory.ai
www.blindstream.com
voda-data-prod.nerdfactory.ai
pacecapitalmgt.com
nerdchat.nerdfactory.ai
collab.nerdfactory.ai
events.recomea.com
console.charatoru.jp
mamam.nerdfactory.ai
www.urbantransit.app
blog.nerdfactory.ai
mamam-stage.nerdfactory.ai
strategy-backend.nerdfactory.ai
mamam-stage.zetapol.org
blog.nerdfactory.ai
mail.nerdfactory.ai
vincitoulu.fi
aivory.nerdfactory.ai
wooribaby-universal-links.nerdfactory.ai
blog.nerdfactory.ai
anuta-dev.nerdfactory.ai
mail.nerdfactory.ai
mail.nerdfactory.ai
gcodeanalyser.com
aivory.nerdfactory.ai
patent-manager-demo.nerdfactory.ai
strategy-backend.nerdfactory.ai
vav-testpage.nerdfactory.ai
nerdchat-media.nerdfactory.ai
blog.nerdfactory.ai
www.cowboytattoo.com.br
www.frikkherding.no
voryq-dev.nerdfactory.ai
kommati.lernit.app
blog.nerdfactory.ai
collab.nerdfactory.ai
aivory-manager-demo.nerdfactory.ai
collab.nerdfactory.ai
blog.nerdfactory.ai
voda-backoffice.nerdfactory.ai
www.urbantransit.app
collab.nerdfactory.ai
pacecapitalmgt.com
mail.nerdfactory.ai
mail.nerdfactory.ai
mamam-media.nerdfactory.ai
product.azago.in
mamam.nerdfactory.ai
www.blindstream.com
www.lascalamalaga.com
blog.nerdfactory.ai
voda-test.nerdfactory.ai
anuta-dev.nerdfactory.ai
mail.nerdfactory.ai
product.azago.in
patent-backend.nerdfactory.ai
blog.nerdfactory.ai
www.thepalettelife.com
cdn.nerdfactory.ai
wooribaby-universal-links.nerdfactory.ai
mail.nerdfactory.ai
www.josiahrininger.com
voryq-media.nerdfactory.ai
www.cowboytattoo.com.br
mail.nerdfactory.ai
link.prost.com
analytics.nerdfactory.ai
befirst-qa.ovdns.co.za
aivory.nerdfactory.ai
about.gapcrossstaging.com
hillswestny.com
blog.nerdfactory.ai
www.blindstream.com
voda-data-prod.nerdfactory.ai
pacecapitalmgt.com
nerdchat.nerdfactory.ai
collab.nerdfactory.ai
events.recomea.com
console.charatoru.jp
mamam.nerdfactory.ai
www.urbantransit.app
blog.nerdfactory.ai
mamam-stage.nerdfactory.ai
strategy-backend.nerdfactory.ai
mamam-stage.zetapol.org
blog.nerdfactory.ai
mail.nerdfactory.ai
vincitoulu.fi
aivory.nerdfactory.ai
wooribaby-universal-links.nerdfactory.ai
blog.nerdfactory.ai
anuta-dev.nerdfactory.ai
mail.nerdfactory.ai
mail.nerdfactory.ai
gcodeanalyser.com
aivory.nerdfactory.ai
patent-manager-demo.nerdfactory.ai
strategy-backend.nerdfactory.ai
vav-testpage.nerdfactory.ai
nerdchat-media.nerdfactory.ai
Certificate
The complete raw certificate details for collab.nerdfactory.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQBirD7Ik4PlrGCu39so7S3jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjgwMDAwMDBaFw0yMDA5Mjgx MjAwMDBaMCAxHjAcBgNVBAMTFWNvbGxhYi5uZXJkZmFjdG9yeS5haTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMas40a8kIzZon9HyMZBBz5cfQvKzqHe Ek4BxwxR7p3fpdyqUpocyOACQBMTvHD7g/1eC94uETzyM7Yf03yNg9oBWKMAZSin 3Ni2kVknjaezpEBFyu2weoKbHptPseyzZK+sB8Shxpf6OFl2sxN1cE41r1cNknRe lfJM+bUrB712d3AJ2yYEoif+vAt+i9zpWkZgLCC3u8O5f0ZnsGgh0ezIhsY4vis9 A/RjxPV9OUWRl1YLq0ABtzDRIxhoB9ixcKZtYdbLGjg2u/BsK/DhDrxIXXAsjmdH /bb8YZugI+H4aZgZlOGTuINV4SaEmz2be9QXnsYzQceJcWUL0veJnYECAwEAAaOC AoAwggJ8MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBTJnKJ7ROGf4iL1ee9MseBh+YIu7TAgBgNVHREEGTAXghVjb2xsYWIubmVyZGZh Y3RvcnkuYWkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQMG CisGAQQB1nkCBAIEgfQEgfEA7wB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCW ZDaOHtGFAAABbNZ0yaYAAAQDAEcwRQIgERUqJbzgNvRSOT+XkcCPrZPTk33tx82q I2ayvYlZM80CIQCFUHi6jWqKLk4cwitKdneO3t9vdi2YZlAETOmgjErSQQB1AId1 v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbNZ0ye0AAAQDAEYwRAIg XCeLZ9LxOj1aQMlsZa7NRHosKgEXI/CzUMW7eTFUaI8CIHocCjgPAqyUm+ILkZgP dbwOhxBtCB8nnX3pPtLZ82hYMA0GCSqGSIb3DQEBCwUAA4IBAQBsbYEv1ZAfYCel eAgkcfutV511I0QoSmDLPdz50LqcVbgeIDmJT1SbpqR/iNLfk74um6xUZzjl5d3S seC19o5ij/tUgfbUXAcUrjwspKL4rklukqeYvBqcVf0L6DIWETTjKVbeuCsFUFZ1 bGTiwrwSrQ/ehzZUI4n5AtIX80lHwlQhl4qSQW7qT0KIq1C9TI+a9dy93FhEpbiq F5ICKWLa69mpJKCqSI6ikptWR24iDjrgt/BYioJgiv2WvC1nXDfIXKgc6nUM9pp4 kihaEC+6ESIpTVXd9IL4zoXgEka1z8a8pjD9pei1c7Bjq6gWe/BDW652CJZBJHu4 IRtVdtqc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqzjRryQjNmif0fIxkEH Plx9C8rOod4STgHHDFHund+l3KpSmhzI4AJAExO8cPuD/V4L3i4RPPIzth/TfI2D 2gFYowBlKKfc2LaRWSeNp7OkQEXK7bB6gpsem0+x7LNkr6wHxKHGl/o4WXazE3Vw TjWvVw2SdF6V8kz5tSsHvXZ3cAnbJgSiJ/68C36L3OlaRmAsILe7w7l/RmewaCHR 7MiGxji+Kz0D9GPE9X05RZGXVgurQAG3MNEjGGgH2LFwpm1h1ssaODa78Gwr8OEO vEhdcCyOZ0f9tvxhm6Aj4fhpmBmU4ZO4g1XhJoSbPZt71BeexjNBx4lxZQvS94md gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8197418252954464092559543241978860254 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collab.nerdfactory.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25080438533990678438425302173500687335493888137343521075417868780667523963917538704113792355065399156906528262288002450522581986660400622731582557221642172019367712649143697599637601347618879405133756490523173279916570790721857110106582668442564694250469075477566894523632279147827017145725999802788274959511817687169401501025149464437842281692112173784586485798434178958928683491780338591425204233873933914802147457278963762559254732675883816067278159093282329070947337903532072618921311718867220314659397956513174448360550461978641680681354088637718701115644286111032742267456702560557828704833077677714820381121921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c99ca27b44e19fe222f579ef4cb1e061f9822eed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab.nerdfactory.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016cd674c9a60000040300473045022011152a25bce036f452393f9791c08fad93d3937dedc7cdaa2366b2bd895933cd022100855078ba8d6a8a2e4e1cc22b4a76778ededf6f762d986650044ce9a08c4ad2410075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cd674c9ed000004030046304402205c278b67d2f13a3d5a40c96c65aecd447a2c2a011723f0b350c5bb793154688f02207a1c0a380f02ac949be20b91980f75bc0e87106d081f279d7de93ed2d9f36858 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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