address.api.dpv.de
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 06:4d:36:20:1c:f7:d2:58:c1:d3:7c:65:b8:be:bf:21 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=address.api.dpv.de
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:4d:36:20:1c:f7:d2:58:c1:d3:7c:65:b8:be:bf:21Serial Number (int): 8376272627201652898165386812128673569
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 6d:3d:9a:dc:6d:14:27:42:ab:e9:a4:87:b5:6e:1e:13:68:05:4c:e6
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 2b:13:e8:7b:cc:7c:be:00:4b:0c:fe:96:be:f7:cb:99:38:56:25:48
Fingerprint (sha256): 20:79:c3:cf:d4:d7:07:b4:f9:7b:15:39:61:53:b9:32:7d:41:f4:9f:5f:e4:c3:7c:63:eb:19:6b:10:01:b9:12
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate address.api.dpv.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for address.api.dpv.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
address.api.dpv.de
Other certificates including the domain name dpv.de
(limited to 100 certificates)
*.computec.dev.shop.dpv.de
*.aboshop-stern.dev.shop.dpv.de
static.stern.de
static.stern.de
static.stern.de
dev.api.dpv.de
*.eltern.stage.shop.dpv.de
*.geo.stage.shop.dpv.de
*.capital.stage.shop.dpv.de
www.guj.digital
*.inspiringnetwork.stage.shop.dpv.de
*.cicero.dev.shop.dpv.de
*.aboshop-stern.stage.shop.dpv.de
view.service.dpv.de
stiwa.dpv.de
*.11freunde.stage.shop.dpv.de
static.stern.de
serviceportal.dpv.de
stiwa.dpv.de
akamai-san49.exacttarget.com
*.inspiringnetwork.stage.shop.dpv.de
dpv.de
www.stage.stern.de
admin.shop.dpv.de
shop.geo.de
*.dogs-magazin.dev.shop.dpv.de
*.meinabo.dev.shop.dpv.de
shop.dpv.de
www.stage.stern.de
*.vgn.stage.shop.dpv.de
static.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
click.service.dpv.de
serviceportal.dpv.de
static.stern.de
static.stern.de
mitarbeitershop.dpv.de
www.guj.digital
shop.geo.de
admin.shop.dpv.de
san-18-s50.tlsprovisioning.exacttarget.com
dpv.de
*.abenteuer-reisen.dev.shop.dpv.de
www.guj.digital
cloud.service.dpv.de
*.egmont.stage.shop.dpv.de
*.stern.dev.shop.dpv.de
*.cicero.stage.shop.dpv.de
*.monopol.stage.shop.dpv.de
akamai-san49.exacttarget.com
static.stern.de
*.aboshop-stern.stage.shop.dpv.de
*.dogs-magazin.stage.shop.dpv.de
www.guj.digital
static.stern.de
*.eltern.dev.shop.dpv.de
sso.guj.de
static.stern.de
*.spotlight.stage.shop.dpv.de
*.intpress.dev.shop.dpv.de
static.stern.de
static.stern.de
stage.serviceportal.dpv.de
shop.geo.de
address.api.dpv.de
cms.serviceportal.aws.dpv.de
mitarbeitershop.dpv.de
dev.serviceportal.dpv.de
*.motorpresse.stage.shop.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
api.dpv.de
shop.geo.de
*.cicero.stage.shop.dpv.de
serviceportal.dpv.de
static.stern.de
dpv.de
static.stern.de
static.stern.de
pres.api.dpv.de
*.food-magazine.dev.shop.dpv.de
static.stern.de
*.alpin.dev.shop.dpv.de
sfbws.guj.de
*.eltern.stage.shop.dpv.de
www.stage.stern.de
wmtipp.dpv.de
*.intpress.stage.shop.dpv.de
static.stern.de
*.schoener-wohnen.stage.shop.dpv.de
*.meinabo.dev.shop.dpv.de
dpv.de
static.stern.de
*.computec.dev.shop.dpv.de
static.stern.de
shop.stern.de
serviceportal.dpv.de
*.barbara.dev.shop.dpv.de
*.aboshop-stern.dev.shop.dpv.de
static.stern.de
static.stern.de
static.stern.de
dev.api.dpv.de
*.eltern.stage.shop.dpv.de
*.geo.stage.shop.dpv.de
*.capital.stage.shop.dpv.de
www.guj.digital
*.inspiringnetwork.stage.shop.dpv.de
*.cicero.dev.shop.dpv.de
*.aboshop-stern.stage.shop.dpv.de
view.service.dpv.de
stiwa.dpv.de
*.11freunde.stage.shop.dpv.de
static.stern.de
serviceportal.dpv.de
stiwa.dpv.de
akamai-san49.exacttarget.com
*.inspiringnetwork.stage.shop.dpv.de
dpv.de
www.stage.stern.de
admin.shop.dpv.de
shop.geo.de
*.dogs-magazin.dev.shop.dpv.de
*.meinabo.dev.shop.dpv.de
shop.dpv.de
www.stage.stern.de
*.vgn.stage.shop.dpv.de
static.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
click.service.dpv.de
serviceportal.dpv.de
static.stern.de
static.stern.de
mitarbeitershop.dpv.de
www.guj.digital
shop.geo.de
admin.shop.dpv.de
san-18-s50.tlsprovisioning.exacttarget.com
dpv.de
*.abenteuer-reisen.dev.shop.dpv.de
www.guj.digital
cloud.service.dpv.de
*.egmont.stage.shop.dpv.de
*.stern.dev.shop.dpv.de
*.cicero.stage.shop.dpv.de
*.monopol.stage.shop.dpv.de
akamai-san49.exacttarget.com
static.stern.de
*.aboshop-stern.stage.shop.dpv.de
*.dogs-magazin.stage.shop.dpv.de
www.guj.digital
static.stern.de
*.eltern.dev.shop.dpv.de
sso.guj.de
static.stern.de
*.spotlight.stage.shop.dpv.de
*.intpress.dev.shop.dpv.de
static.stern.de
static.stern.de
stage.serviceportal.dpv.de
shop.geo.de
address.api.dpv.de
cms.serviceportal.aws.dpv.de
mitarbeitershop.dpv.de
dev.serviceportal.dpv.de
*.motorpresse.stage.shop.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
api.dpv.de
shop.geo.de
*.cicero.stage.shop.dpv.de
serviceportal.dpv.de
static.stern.de
dpv.de
static.stern.de
static.stern.de
pres.api.dpv.de
*.food-magazine.dev.shop.dpv.de
static.stern.de
*.alpin.dev.shop.dpv.de
sfbws.guj.de
*.eltern.stage.shop.dpv.de
www.stage.stern.de
wmtipp.dpv.de
*.intpress.stage.shop.dpv.de
static.stern.de
*.schoener-wohnen.stage.shop.dpv.de
*.meinabo.dev.shop.dpv.de
dpv.de
static.stern.de
*.computec.dev.shop.dpv.de
static.stern.de
shop.stern.de
serviceportal.dpv.de
*.barbara.dev.shop.dpv.de
Certificate
The complete raw certificate details for address.api.dpv.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEYzCCA0ugAwIBAgIQBk02IBz30ljB03xluL6/ITANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyNjAwMDAwMFoXDTI0MDYyMzIzNTk1OVowHTEb MBkGA1UEAxMSYWRkcmVzcy5hcGkuZHB2LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvnroBPPjr9jZ1qcO/UxpWJTswOGrDz2IQ0UCJY57tLHDqNcq m7c99b54j0ZnP800IuFl6kNSbx8bwN/BGQSbRgafO3mAzMRVgLEuLf1E5tRFXUDm MRmWccX+fbUCfAwr4gNFkWWINTRp6b2Cz4nC91xO/41tTaWVx0sDgHkq1CYLznjs oov26YR/U97x6XNYH1E6YwFVo79KaINK+MPZlZHnixrj9gK5JdV5+mezDW6OPOQj +d+tywV5IjrIL0ygHkX56rGomuXsJX7B3xb2ih/4Ox0blx/OE6z/GwlAXXStUEHv kB65LdC6et31vj7eOxGVp4nHlEK0I1L4vsR+pwIDAQABo4IBfjCCAXowHwYDVR0j BBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFG09mtxtFCdCq+mk h7VuHhNoBUzmMB0GA1UdEQQWMBSCEmFkZHJlc3MuYXBpLmRwdi5kZTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2Vy MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAMfgukavSZT2WzZJmfYm7+ZAmadq3rf4NCw7d4k9cxByyfkcNO9j2VBM YkRsOTv7/Os7d93J8od2AJzTYOkdXgJQ51yoYGWOQ90pQRyYD58mT5jR/SDP60lf zR9qcSxmoZk1jrQfmlnOKZqAilEvGUL+/1k70yNkeMOft8UVJt3EZhZFjz8xK7tv CwCn8tfU7w9eB/aq57/QiC2Bzz7YgwmTmuDfBe8iRXkX1bV1wLdvv8giwoXbhx+N AOvaUYe04b/LTkc0GOcc5Xsokgg2Xc9n/iT9jYPJcPBeYp1CDcKZAlToXgDGkjIl gKXgAt/2OOwAaKMV5Q5s6JNAp0WWq7o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnroBPPjr9jZ1qcO/Uxp WJTswOGrDz2IQ0UCJY57tLHDqNcqm7c99b54j0ZnP800IuFl6kNSbx8bwN/BGQSb RgafO3mAzMRVgLEuLf1E5tRFXUDmMRmWccX+fbUCfAwr4gNFkWWINTRp6b2Cz4nC 91xO/41tTaWVx0sDgHkq1CYLznjsoov26YR/U97x6XNYH1E6YwFVo79KaINK+MPZ lZHnixrj9gK5JdV5+mezDW6OPOQj+d+tywV5IjrIL0ygHkX56rGomuXsJX7B3xb2 ih/4Ox0blx/OE6z/GwlAXXStUEHvkB65LdC6et31vj7eOxGVp4nHlEK0I1L4vsR+ pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8376272627201652898165386812128673569 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'address.api.dpv.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24045885311558279337975554232453577170755583406514944712581807506659254316942431175755045590081943193253965331741632494240409922881715014998135870970418245480047895699915675780872914363957280038971724526642165870876794996377945852961841873419617793484190412901138141803194169359922584153154905306074416769322988653608683676562018622212395843530445402699243360553474375335016537955548952601854603270122318077360970749103336111491421247590188820878316063842083999062175938890812187698833786660493913880088926246360693572184334835778413194431269864742545508318415653154774846921463526201700930382783219227871012771364519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d3d9adc6d142742abe9a487b56e1e1368054ce6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'address.api.dpv.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c7e0ba46af4994f65b364999f626efe64099a76adeb7f8342c3b77893d731072c9f91c34ef63d9504c62446c393bfbfceb3b77ddc9f28776009cd360e91d5e0250e75ca860658e43dd29411c980f9f264f98d1fd20cfeb495fcd1f6a712c66a199358eb41f9a59ce299a808a512f1942feff593bd3236478c39fb7c51526ddc46616458f3f312bbb6f0b00a7f2d7d4ef0f5e07f6aae7bfd0882d81cf3ed88309939ae0df05ef22457917d5b575c0b76fbfc822c285db871f8d00ebda5187b4e1bfcb4e473418e71ce57b289208365dcf67fe24fd8d83c970f05e629d420dc2990254e85e00c692322580a5e002dff638ec0068a315e50e6ce89340a74596abba