beyond.idg.de
Issued by Amazon
About this certificate
This digital certificate with serial number 06:c7:ac:73:1c:bd:81:3c:31:26:69:f9:a5:35:a4:c3 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=beyond.idg.de
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:c7:ac:73:1c:bd:81:3c:31:26:69:f9:a5:35:a4:c3Serial Number (int): 9012132744143120713739549439004353731
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e0:a2:f3:6f:1e:a3:9d:8a:3d:19:2f:d2:8d:97:74:46:27:96:f7:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 51:4a:45:be:97:b1:1f:3e:43:22:96:dc:7d:95:ad:20:a1:b1:2a:59
Fingerprint (sha256): 20:d2:ee:9d:ce:f3:75:d7:89:5e:85:56:a7:2a:b8:55:43:f4:6e:b2:e9:1f:31:7e:b8:06:90:c6:5b:60:58:75
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate beyond.idg.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for beyond.idg.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beyond.idg.de
www.beyond.idg.de
cf.multisite.idg.zone
www.beyond.idg.de
cf.multisite.idg.zone
Other certificates including the domain name idg.de
(limited to 100 certificates)
cp.idg.de
beta.idg.de
cloud.idg.de
*.idg.de
webcast.idg.de
webcast.idg.de
*.idg.de
*.idg.de
w.idg.de
www.mobile-enterprise-day.de
w.idg.de
idg.de
10jahre.cio.de
cloud.idg.de
computerworld.idg.de
cloud.idg.de
10jahre.cio.de
*.idg.de
amazon.idg.de
adserver.idg.de
beyond.idg.de
cmp2.channelpartner.de
s.idg.de
beyond.idg.de
syndication.contimate.idg.de
tap.idg.de
w.idg.de
beyond.idg.de
beyond.idg.de
10jahre.cio.de
w.idg.de
tap.idg.de
cmp.idg.de
computerworld.idg.de
*.idg.de
adserver.idg.de
cmp2.channelpartner.de
beta.idg.de
cloud.idg.de
amazon.idg.de
tap.idg.de
webcast.idg.de
docs.idg.de
w.idg.de
citrix.idg.de
cmp2.channelpartner.de
tap.idg.de
access.idg.de
idg.de
idg.de
cmp2.channelpartner.de
amazon.idg.de
beyond.idg.de
tap.idg.de
idg.de
beyond.idg.de
idg.de
*.idg.de
cmp.idg.de
w.idg.de
tap.idg.de
computerworld.idg.de
beyond.idg.de
w.idg.de
w.idg.de
10jahre.cio.de
webcast.idg.de
10jahre.cio.de
cmp.idg.de
10jahre.cio.de
webcast.idg.de
tap.idg.de
webcast.idg.de
*.idg.de
w.idg.de
beyond.idg.de
*.idg.de
adserver.idg.de
computerworld.idg.de
computerworld.idg.de
syndication.idg.de
cloud.idg.de
syndication.idg.de
w.idg.de
webcast.idg.de
w.idg.de
cmp2.channelpartner.de
10jahre.cio.de
w.idg.de
syndication.idg.de
beta.idg.de
adserver.idg.de
10jahre.cio.de
webcast.idg.de
beta.idg.de
w.idg.de
w.idg.de
w.idg.de
webcast.idg.de
webcast.idg.de
beta.idg.de
cloud.idg.de
*.idg.de
webcast.idg.de
webcast.idg.de
*.idg.de
*.idg.de
w.idg.de
www.mobile-enterprise-day.de
w.idg.de
idg.de
10jahre.cio.de
cloud.idg.de
computerworld.idg.de
cloud.idg.de
10jahre.cio.de
*.idg.de
amazon.idg.de
adserver.idg.de
beyond.idg.de
cmp2.channelpartner.de
s.idg.de
beyond.idg.de
syndication.contimate.idg.de
tap.idg.de
w.idg.de
beyond.idg.de
beyond.idg.de
10jahre.cio.de
w.idg.de
tap.idg.de
cmp.idg.de
computerworld.idg.de
*.idg.de
adserver.idg.de
cmp2.channelpartner.de
beta.idg.de
cloud.idg.de
amazon.idg.de
tap.idg.de
webcast.idg.de
docs.idg.de
w.idg.de
citrix.idg.de
cmp2.channelpartner.de
tap.idg.de
access.idg.de
idg.de
idg.de
cmp2.channelpartner.de
amazon.idg.de
beyond.idg.de
tap.idg.de
idg.de
beyond.idg.de
idg.de
*.idg.de
cmp.idg.de
w.idg.de
tap.idg.de
computerworld.idg.de
beyond.idg.de
w.idg.de
w.idg.de
10jahre.cio.de
webcast.idg.de
10jahre.cio.de
cmp.idg.de
10jahre.cio.de
webcast.idg.de
tap.idg.de
webcast.idg.de
*.idg.de
w.idg.de
beyond.idg.de
*.idg.de
adserver.idg.de
computerworld.idg.de
computerworld.idg.de
syndication.idg.de
cloud.idg.de
syndication.idg.de
w.idg.de
webcast.idg.de
w.idg.de
cmp2.channelpartner.de
10jahre.cio.de
w.idg.de
syndication.idg.de
beta.idg.de
adserver.idg.de
10jahre.cio.de
webcast.idg.de
beta.idg.de
w.idg.de
w.idg.de
w.idg.de
webcast.idg.de
webcast.idg.de
Certificate
The complete raw certificate details for beyond.idg.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIQBsescxy9gTwxJmn5pTWkwzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMTMwMDAwMDBaFw0yMDA0MTMx MjAwMDBaMBgxFjAUBgNVBAMTDWJleW9uZC5pZGcuZGUwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDaIGw7zarsig5eihNngnKP7scQwGhRQSjM9X1UCVKu Ak/cQg+mZuxxnxFnUsywBesnF+l1EryozH1cCEtwg9CEoMS/wCVjK/txIeABe0KW 4FcoawFV3dtV+6XrORmGhB2S0aQw2F2QvalEgAELgTpbea9B41XY9PqEXxBxexQ9 mF50HhEHj9K86Xx/fO/yXtzEP0yXfN3jv+lNAEkNe3YtauAFoZUw3d69DSVaoxad Zt0c4S05yOOd/9dDxysetnayfzbAoC95BYmHBX5Xka2t0lBGuzf6lGqnOlPRxBPn 9Mx64iyY67ykhUBlYjJNkjKP7VlqJcnY5/ymIi2tqSFdAgMBAAGjggKkMIICoDAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU4KLzbx6j nYo9GS/SjZd0RieW9zAwQgYDVR0RBDswOYINYmV5b25kLmlkZy5kZYIRd3d3LmJl eW9uZC5pZGcuZGWCFWNmLm11bHRpc2l0ZS5pZGcuem9uZTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAg BgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3Nj YTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFpdIGunwAABAMASDBG AiEAygILo3NLaq09wXOXYG13BiE/fcE1YWywgOV839WH/BcCIQCcxS94l3IyMFM9 gpcKBCtky2gFuRm+FCD2luHANdYpFgB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1 YMG06v9eoIMPAAABaXSBsAoAAAQDAEcwRQIgYPk/twczQrYAbz3zxAyeXRCtvRBi dupcL+B0zV8GoFUCIQD5seNKZqZLq+JzMIE/6HJseuiltFZgWyoOby0jyhO68jAN BgkqhkiG9w0BAQsFAAOCAQEAg0kfvzJIy42/vbZ0l6JY5HsXYYOMm+IRKBL19i71 VJRE+tTD5AIjgA6G1T7H4psCiJ4OBpdzqYIOGTwqWwD7zdNDLAzYQu1cOM+BBrYV bNXHXNjgjqG9j+AjCWVflKbH7/bnSnrVziDxmbKq+xJkGJWvb1kv8QRtwjhwAcjJ tTgAEncNTfHtDJrldjyjatDMZx0rk33kRnQeaohHrSFU9u/9jIC7RFXVfhTmx4TH 8kX9pEURxIXGyx4hgO4m0JsgoJnfEh+0oz/EUn7WjXJN2AT7DwwrzPuZXrIqYZtc sJHltZOzxpi//J2ETis6E/hrPwyYMHBbcoU61MKXGLgZeA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iBsO82q7IoOXooTZ4Jy j+7HEMBoUUEozPV9VAlSrgJP3EIPpmbscZ8RZ1LMsAXrJxfpdRK8qMx9XAhLcIPQ hKDEv8AlYyv7cSHgAXtCluBXKGsBVd3bVful6zkZhoQdktGkMNhdkL2pRIABC4E6 W3mvQeNV2PT6hF8QcXsUPZhedB4RB4/SvOl8f3zv8l7cxD9Ml3zd47/pTQBJDXt2 LWrgBaGVMN3evQ0lWqMWnWbdHOEtOcjjnf/XQ8crHrZ2sn82wKAveQWJhwV+V5Gt rdJQRrs3+pRqpzpT0cQT5/TMeuIsmOu8pIVAZWIyTZIyj+1ZaiXJ2Of8piItrakh XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9012132744143120713739549439004353731 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beyond.idg.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27535938755021566467041426755666969968570761971653797000209821085545285726062476058107922703172987000030980788003732867239851994584940943641450518697448334894290947042529259811734445185264581562076201478767596997077366179924368825445544612774964496310644585709922001204145243170650572444768862302555730964788764619785616385742554675239679505459519350626734237417073557722213900149505257956522351220814358172700131488878718534773370320694039070090682398488367943056344583068833198129510050656039101663320624114016196728178959842173598686110607242552356974073263258002160627617301280840502259095624873473272970033570141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0a2f36f1ea39d8a3d192fd28d9774462796f730 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyond.idg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyond.idg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.multisite.idg.zone' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001697481ae9f0000040300483046022100ca020ba3734b6aad3dc17397606d7706213f7dc135616cb080e57cdfd587fc170221009cc52f7897723230533d82970a042b64cb6805b919be1420f696e1c035d629160076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001697481b00a0000040300473045022060f93fb7073342b6006f3df3c40c9e5d10adbd106276ea5c2fe074cd5f06a055022100f9b1e34a66a64babe27330813fe8726c7ae8a5b456605b2a0e6f2d23ca13baf2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0083491fbf3248cb8dbfbdb67497a258e47b1761838c9be2112812f5f62ef5549444fad4c3e40223800e86d53ec7e29b02889e0e069773a9820e193c2a5b00fbcdd3432c0cd842ed5c38cf8106b6156cd5c75cd8e08ea1bd8fe02309655f94a6c7eff6e74a7ad5ce20f199b2aafb12641895af6f592ff1046dc2387001c8c9b5380012770d4df1ed0c9ae5763ca36ad0cc671d2b937de446741e6a8847ad2154f6effd8c80bb4455d57e14e6c784c7f245fda44511c485c6cb1e2180ee26d09b20a099df121fb4a33fc4527ed68d724dd804fb0f0c2bccfb995eb22a619b5cb091e5b593b3c698bffc9d844e2b3a13f86b3f0c9830705b72853ad4c29718b81978