api-tguard.emtg.jp
Issued by Amazon
About this certificate
This digital certificate with serial number 02:0b:52:8f:e0:a1:e6:4d:e9:0f:cd:7c:04:4a:bb:bc was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api-tguard.emtg.jp
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:0b:52:8f:e0:a1:e6:4d:e9:0f:cd:7c:04:4a:bb:bcSerial Number (int): 2717245813748820664919960985105251260
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 66:3a:f3:f6:b7:54:41:f1:db:0e:2e:a8:f8:c7:ef:ae:72:70:6f:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 15:25:14:58:b3:47:1e:f4:05:9a:bf:5c:47:75:49:63:87:ba:fe:50
Fingerprint (sha256): 1e:dc:09:d6:57:38:e8:8a:58:b0:a0:ed:80:e1:76:4f:fa:de:bb:31:17:b8:80:c4:ff:d7:d0:61:37:b0:2b:ec
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api-tguard.emtg.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-tguard.emtg.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-tguard.emtg.jp
Other certificates including the domain name emtg.jp
(limited to 100 certificates)
fcticket.emtg.jp
imgc.emtg.jp
dev-kimaguren.emtg.jp
secure.emtg.jp
store.emtg.jp
test-sp.e-yazawa.emtg.jp
collection.emtg.jp
stg-secure.emtg.jp
*.imgc.emtg.jp
store.emtg.jp
cc-jpbl.emtg.jp
sp.arena.emtg.jp
emtg.jp
test-sp.arena.emtg.jp
test-sp.e-yazawa.emtg.jp
*.hawks.emtg.jp
stg-teamkobukuro.emtg.jp
trade.emtg.jp
sp.arena.emtg.jp
store.emtg.jp
goodf.emtg.jp
faq.emtg.jp
secure.emtg.jp
register.emtg.jp
*.arena.emtg.jp
stg-teamkobukuro.emtg.jp
emtg.jp
sp.arena.emtg.jp
dev-ssl.emtg.jp
api-tguard.emtg.jp
stg-teamkobukuro.emtg.jp
emtg.jp
emtg.jp
*.store.emtg.jp
ticket-trade.emtg.jp
emtg.jp
secure.emtg.jp
sp.arena.emtg.jp
*.premium.emtg.jp
*.sns.emtg.jp
api-tguard.emtg.jp
stg-sns.emtg.jp
stg-tguard.emtg.jp
image.emtg.jp
dev-secure.emtg.jp
imgc.emtg.jp
test-sp3m.e-yazawa.emtg.jp
register.emtg.jp
collection.emtg.jp
api-tguard.emtg.jp
collection.emtg.jp
sns.emtg.jp
*.hawks.emtg.jp
dev-secure2.emtg.jp
stg-classkobukuro.emtg.jp
dev-secure.emtg.jp
dev-secure.emtg.jp
emtg.jp
emtg.jp
image.emtg.jp
fcticket.emtg.jp
stg-tguard.emtg.jp
artist-mailbox.emtg.jp
sp.arena.emtg.jp
fcticket.emtg.jp
test-sp.arena.emtg.jp
stg-sns.emtg.jp
*.emtg.jp
secure.emtg.jp
test-sp3m.e-yazawa.emtg.jp
cc-giants.emtg.jp
trade.emtg.jp
emtg.jp
stg-tguard.emtg.jp
emtg.jp
fcticket.emtg.jp
cc-hnf.emtg.jp
sp.arena.emtg.jp
stg-tguard.emtg.jp
register.emtg.jp
dev-secure.emtg.jp
img.emtg.jp
kobukuro.emtg.jp
image.emtg.jp
cc-jpbl.emtg.jp
*.emtg.jp
stg-secure.emtg.jp
img.music.emtg.jp
sp.arena.emtg.jp
stg-teamkobukuro.emtg.jp
image.emtg.jp
emtg.jp
stg-classkobukuro.emtg.jp
stg-secure.emtg.jp
dev-paycenter.emtg.jp
goodf.emtg.jp
secure.emtg.jp
stg-classkobukuro.emtg.jp
secure.emtg.jp
emtg.jp
imgc.emtg.jp
dev-kimaguren.emtg.jp
secure.emtg.jp
store.emtg.jp
test-sp.e-yazawa.emtg.jp
collection.emtg.jp
stg-secure.emtg.jp
*.imgc.emtg.jp
store.emtg.jp
cc-jpbl.emtg.jp
sp.arena.emtg.jp
emtg.jp
test-sp.arena.emtg.jp
test-sp.e-yazawa.emtg.jp
*.hawks.emtg.jp
stg-teamkobukuro.emtg.jp
trade.emtg.jp
sp.arena.emtg.jp
store.emtg.jp
goodf.emtg.jp
faq.emtg.jp
secure.emtg.jp
register.emtg.jp
*.arena.emtg.jp
stg-teamkobukuro.emtg.jp
emtg.jp
sp.arena.emtg.jp
dev-ssl.emtg.jp
api-tguard.emtg.jp
stg-teamkobukuro.emtg.jp
emtg.jp
emtg.jp
*.store.emtg.jp
ticket-trade.emtg.jp
emtg.jp
secure.emtg.jp
sp.arena.emtg.jp
*.premium.emtg.jp
*.sns.emtg.jp
api-tguard.emtg.jp
stg-sns.emtg.jp
stg-tguard.emtg.jp
image.emtg.jp
dev-secure.emtg.jp
imgc.emtg.jp
test-sp3m.e-yazawa.emtg.jp
register.emtg.jp
collection.emtg.jp
api-tguard.emtg.jp
collection.emtg.jp
sns.emtg.jp
*.hawks.emtg.jp
dev-secure2.emtg.jp
stg-classkobukuro.emtg.jp
dev-secure.emtg.jp
dev-secure.emtg.jp
emtg.jp
emtg.jp
image.emtg.jp
fcticket.emtg.jp
stg-tguard.emtg.jp
artist-mailbox.emtg.jp
sp.arena.emtg.jp
fcticket.emtg.jp
test-sp.arena.emtg.jp
stg-sns.emtg.jp
*.emtg.jp
secure.emtg.jp
test-sp3m.e-yazawa.emtg.jp
cc-giants.emtg.jp
trade.emtg.jp
emtg.jp
stg-tguard.emtg.jp
emtg.jp
fcticket.emtg.jp
cc-hnf.emtg.jp
sp.arena.emtg.jp
stg-tguard.emtg.jp
register.emtg.jp
dev-secure.emtg.jp
img.emtg.jp
kobukuro.emtg.jp
image.emtg.jp
cc-jpbl.emtg.jp
*.emtg.jp
stg-secure.emtg.jp
img.music.emtg.jp
sp.arena.emtg.jp
stg-teamkobukuro.emtg.jp
image.emtg.jp
emtg.jp
stg-classkobukuro.emtg.jp
stg-secure.emtg.jp
dev-paycenter.emtg.jp
goodf.emtg.jp
secure.emtg.jp
stg-classkobukuro.emtg.jp
secure.emtg.jp
emtg.jp
Certificate
The complete raw certificate details for api-tguard.emtg.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEWDCCA0CgAwIBAgIQAgtSj+Ch5k3pD818BEq7vDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjA5MjAwMDAwMDBaFw0xNzEwMjAx MjAwMDBaMB0xGzAZBgNVBAMTEmFwaS10Z3VhcmQuZW10Zy5qcDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAKrQfM1WL2n/u87FxyUGYWy4QASzY44hcUR8 hm7CTVLb1X0aojAXx1tb/ATzLpYNCf297lAv7r3q2g+BrK+eb+IRJRswRh5AJ8VZ gkxrrgAGyWBqD2XtwabNt5QpzK95jJqYRl/syNoAmv/KHOKsh7d4gHtfUD0bFZOU kAchVRGVt/twpXoTzRyGwy0l85F5pjrGSp+rJWpXVsEwkovuj7KTVhrbhjxxSrho jMHvNe+nbAEe6pw1dW2Qm0txZGpGXzFh4FXZlt49TOZewPCKGwR6YVn2vOg2EQZn J46FuUyhpPtp/iLME22aZMkBDF0VdzWRO9Fd16a73ucTm7XPTPcCAwEAAaOCAWkw ggFlMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBRm OvP2t1RB8dsOLqj4x++ucnBveDAdBgNVHREEFjAUghJhcGktdGd1YXJkLmVtdGcu anAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAsk70W i4aiW9+w9VHdDoRw0RmUFNd5w7Kb36oZZebEqIRHaXbMjzM06YihYZ+hMqY4k75Q QQ1q0CQUMErPiMJWsnNTWL2TZnDhYlfxnqiKSNjuc9Oh23Ss5ci1T779cowxqdLP j5kI9ZXXzIxKfzutNqjM/gvkaSz3X6CJIq9VGacH+yOMQwtaQLYuFPQXWkqLqXlm niSQCKDVQp5FpZUFCrLJ0ciHf2YpLxDExOCgWoGxYhUyVRdwrlcO0kg/FgPFsDLZ dYj8+D1kHQ/FA9fsptwNWLHFjK/vYm3BqGuZefprlsjsUV/c7XPzSNfrVmDzql11 wVuk7rmeygbHnRsY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtB8zVYvaf+7zsXHJQZh bLhABLNjjiFxRHyGbsJNUtvVfRqiMBfHW1v8BPMulg0J/b3uUC/uveraD4Gsr55v 4hElGzBGHkAnxVmCTGuuAAbJYGoPZe3Bps23lCnMr3mMmphGX+zI2gCa/8oc4qyH t3iAe19QPRsVk5SQByFVEZW3+3ClehPNHIbDLSXzkXmmOsZKn6slaldWwTCSi+6P spNWGtuGPHFKuGiMwe8176dsAR7qnDV1bZCbS3FkakZfMWHgVdmW3j1M5l7A8Iob BHphWfa86DYRBmcnjoW5TKGk+2n+IswTbZpkyQEMXRV3NZE70V3Xprve5xObtc9M 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2717245813748820664919960985105251260 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-tguard.emtg.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21563320866262586735852907789574405003307814949748168222880089301269038631093241819077218951914061220185958598639868228018849318973287291571261965987118917853938935159174334935863819740680598877476291220645355523654744198869763764190592101406839808995118686027590488141620308396834548270581778722648582047591196194857880150257711067951026723056914370805574274785934187746625333972398496598353973982752498429978925264069725056904083514584856565340085096833726353909669794413146395092872704797738410956123104519702865278484811845538805536961362811174806998209857559021380785616398665605242458364267208122331431907052791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 663af3f6b75441f1db0e2ea8f8c7efae72706f78 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-tguard.emtg.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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