it.bienparabien.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:e1:a7:6b:04:88:07:85:45:e2:bb:f8:d1:c4:c8:cf was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=it.bienparabien.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:e1:a7:6b:04:88:07:85:45:e2:bb:f8:d1:c4:c8:cfSerial Number (int): 14463942392239083266473459721290696911
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3a:89:df:18:1e:2d:7c:9d:4d:3f:2e:39:66:c0:19:b6:0d:4e:7c:97
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 34:db:d5:81:54:56:c0:3c:84:59:61:a4:a3:db:87:66:88:f9:d7:7b
Fingerprint (sha256): 20:dc:4e:a0:e7:07:23:d4:61:fc:37:eb:c2:cc:07:ea:bd:b8:7b:72:d5:b1:53:ea:e6:cb:e7:43:eb:a4:ea:51
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate it.bienparabien.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for it.bienparabien.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
it.bienparabien.com
www.it.bienparabien.com
www.it.bienparabien.com
Other certificates including the domain name bienparabien.com
(limited to 100 certificates)
tym.share.app-staging.c-rayon.com
amborjo.com
hillstarmedia.com
ivenfe.cc
scoring.bienparabien.com
www.status.bienparabien.com
www.mysolace.app
www.pspkdevtest.net.au
www.botls.app
notes.andymatuschak.org
insent.ai
bienparabien.com
www.joeyyang.com
isys.cc
tst.bienparabien.com
seils.com.au
account.bienparabien.com
blog.bienparabien.com
www.mryu.menu
simulador.bienparabien.com
cburg.galander.berlin
spotter.soinlabs.net
blog.bienparabien.com
it.bienparabien.com
liquidez.bienparabien.com
www.belezafresca.com
www.kdmservices.in
www.appricode.co
api.facturacion.bienparabien.com
thetiburondon.com
www.pantaurelawan.com
status.bienparabien.com
www.nsjtt.org
*.bienparabien.com
www.matjaz.dev
nrm.bienparabien.com
myautodebits.ca
creditos.bienparabien.com
tst-originacion.bienparabien.com
www.neonotes.app
bienparabien.com
servicios.bienparabien.com
www.karlitekniksupompalari.com
soc.bienparabien.com
subscribe.insighttimer.com
soc.bienparabien.com
mailing.bienparabien.com
mailing.bienparabien.com
tst-originacion.bienparabien.com
agorapacific.com
liquidez.bienparabien.com
neuralup-app.com
www.bienparabien.com
www.bienparabien.com
valija.bienparabien.com
www.okoplay.com
api-ad.bienparabien.com
www.restaurantefutu.es
villaluronorte.com.ar
admin.kiey.com
satisfaccion.bienparabien.com
*.bienparabien.com
*.bienparabien.com
www.iceberg-technology.com
www.thehabitguru.com
nrm.bienparabien.com
ll.myroomabroad.com
valijav2.bienparabien.com
yals.bienparabien.com
njhomes.info
www.nsjtt.org
static.bienparabien.com
tst-originacion.bienparabien.com
tym.share.app-staging.c-rayon.com
portmarnockden.com
promotores.bienparabien.com
*.bienparabien.com
www.bienparabien.com
tesoreria.bienparabien.com
www.bamboosalon.ca
mates.tentafy.com
valija.bienparabien.com
neu.report
www.pixelboxapp.com
blog.bienparabien.com
promotores.bienparabien.com
preview.ivyukraine.com
tst.bienparabien.com
www.bienparabien.com
link.metro-fs.com
petit.cocain.blue
kuronlyric.jp
status.bienparabien.com
ulink.goshop.my
tst.bienparabien.com
swiftlab.co.uk
www.urbancapital.in
symmetry.la
www.pantaurelawan.com
dreamitdesigns.net
amborjo.com
hillstarmedia.com
ivenfe.cc
scoring.bienparabien.com
www.status.bienparabien.com
www.mysolace.app
www.pspkdevtest.net.au
www.botls.app
notes.andymatuschak.org
insent.ai
bienparabien.com
www.joeyyang.com
isys.cc
tst.bienparabien.com
seils.com.au
account.bienparabien.com
blog.bienparabien.com
www.mryu.menu
simulador.bienparabien.com
cburg.galander.berlin
spotter.soinlabs.net
blog.bienparabien.com
it.bienparabien.com
liquidez.bienparabien.com
www.belezafresca.com
www.kdmservices.in
www.appricode.co
api.facturacion.bienparabien.com
thetiburondon.com
www.pantaurelawan.com
status.bienparabien.com
www.nsjtt.org
*.bienparabien.com
www.matjaz.dev
nrm.bienparabien.com
myautodebits.ca
creditos.bienparabien.com
tst-originacion.bienparabien.com
www.neonotes.app
bienparabien.com
servicios.bienparabien.com
www.karlitekniksupompalari.com
soc.bienparabien.com
subscribe.insighttimer.com
soc.bienparabien.com
mailing.bienparabien.com
mailing.bienparabien.com
tst-originacion.bienparabien.com
agorapacific.com
liquidez.bienparabien.com
neuralup-app.com
www.bienparabien.com
www.bienparabien.com
valija.bienparabien.com
www.okoplay.com
api-ad.bienparabien.com
www.restaurantefutu.es
villaluronorte.com.ar
admin.kiey.com
satisfaccion.bienparabien.com
*.bienparabien.com
*.bienparabien.com
www.iceberg-technology.com
www.thehabitguru.com
nrm.bienparabien.com
ll.myroomabroad.com
valijav2.bienparabien.com
yals.bienparabien.com
njhomes.info
www.nsjtt.org
static.bienparabien.com
tst-originacion.bienparabien.com
tym.share.app-staging.c-rayon.com
portmarnockden.com
promotores.bienparabien.com
*.bienparabien.com
www.bienparabien.com
tesoreria.bienparabien.com
www.bamboosalon.ca
mates.tentafy.com
valija.bienparabien.com
neu.report
www.pixelboxapp.com
blog.bienparabien.com
promotores.bienparabien.com
preview.ivyukraine.com
tst.bienparabien.com
www.bienparabien.com
link.metro-fs.com
petit.cocain.blue
kuronlyric.jp
status.bienparabien.com
ulink.goshop.my
tst.bienparabien.com
swiftlab.co.uk
www.urbancapital.in
symmetry.la
www.pantaurelawan.com
dreamitdesigns.net
Certificate
The complete raw certificate details for it.bienparabien.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElTCCA32gAwIBAgIQCuGnawSIB4VF4rv40cTIzzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjIwMDAwMDBaFw0yMDA5MjIx MjAwMDBaMB4xHDAaBgNVBAMTE2l0LmJpZW5wYXJhYmllbi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcD7BkOoEhzZ1VFGZg3uiT3MBcrXs4iUo/ WGmBbqMfvMUbvETKyqya0sMxsXzM6lTziGWhDfj523vTiAMWvNL62bru1ji44AEv eYkL5/nsurFrKi6FI4K1bJcOk8CoHowfSzjxmsiULOgRE92rrnHTzSuCLCLsebbU WGueDyr2SHeFdFDb2wioEV0qKpOlPeBDLWJwa2BajSwifNy8kw9d/uY2yXEBsmXK C1yJchnVJ2rVyk0dl+i1BW78ztQQNg08Qfs+a0MlWENHaaJdYkIDq3FeHHbgUcAN Mrj2Q4bfsamK4rnbX7qnFngj80gvskDFjvEY5vO28iFTt/4ehsK7AgMBAAGjggGl MIIBoTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU OonfGB4tfJ1NPy45ZsAZtg1OfJcwNwYDVR0RBDAwLoITaXQuYmllbnBhcmFiaWVu LmNvbYIXd3d3Lml0LmJpZW5wYXJhYmllbi5jb20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0g BBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEACb1ElK9Gc1vp2D+uyaOkcBxYOAa7vC0x9tVqr/JdcRh9gFK2Xbzu Kktvqg42yssG/cfryCVxdiD63rpsU18+bz5IF07IAlLghE406z+m7NT3Te0UqjlV oqULxHFj/02sCGsp3GTn4LEYz8ugIymGnRsE7pWn6kZ0qB5RlMRor++aGqHxJWGb WlN9VvRqencSqvo02sILk9q0YIXDbRUMAj697UzqAA2A758NmW+76tLkbIpXtHk1 MmJsElXbqZytxm20jHSZ0fz+sgYFijuHVKUvgYJco496bAz9sSuxeI7Csd8OEY5T vzVCWoQ0nD0PvvP8YibfM3EE8ikRJ3TQNQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA+wZDqBIc2dVRRmYN7o k9zAXK17OIlKP1hpgW6jH7zFG7xEysqsmtLDMbF8zOpU84hloQ34+dt704gDFrzS +tm67tY4uOABL3mJC+f57LqxayouhSOCtWyXDpPAqB6MH0s48ZrIlCzoERPdq65x 080rgiwi7Hm21Fhrng8q9kh3hXRQ29sIqBFdKiqTpT3gQy1icGtgWo0sInzcvJMP Xf7mNslxAbJlygtciXIZ1Sdq1cpNHZfotQVu/M7UEDYNPEH7PmtDJVhDR2miXWJC A6txXhx24FHADTK49kOG37GpiuK521+6pxZ4I/NIL7JAxY7xGObztvIhU7f+HobC uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14463942392239083266473459721290696911 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it.bienparabien.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19700912123430659924573618479815408674197024871338919948448213747006643635718816349764861971313558444251699269938026759372593190932718014033770142226383300978637607044024291587476734632935003584733447941016703730248161871358315466238192862604232281300692358803628033884570126196816452216583963110440275129005421105491554348504293677347637044110415036556581690975058950493443208277951054983303906770900597867689303033174763857124378583772975789724365457514882086854377010141956213252384996886571774985002852129639426361235025148095519530355204566829069209442461522986039895947108837738800739352459119157056414402659003 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a89df181e2d7c9d4d3f2e3966c019b60d4e7c97 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.bienparabien.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.bienparabien.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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