default.bluetree-qa.co.uk
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0d:0a:97:09:04:c6:b9:50:e8:35:6f:0b:cf:72:d7:29 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=default.bluetree-qa.co.uk
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:0a:97:09:04:c6:b9:50:e8:35:6f:0b:cf:72:d7:29Serial Number (int): 17334950272171051136488186843476711209
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a1:e7:f6:d8:ce:1b:7e:13:99:be:23:aa:cb:30:7d:ff:f7:c2:92:3b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): d0:64:49:45:da:ad:a4:f2:18:51:10:40:b8:f1:1c:d1:bf:8b:62:8f
Fingerprint (sha256): 21:cc:1c:e4:8a:7d:8d:42:03:f0:d3:d0:55:ef:ea:ed:bd:f5:fe:5a:f5:40:63:a2:d2:d7:44:ba:f6:33:f9:b8
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate default.bluetree-qa.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for default.bluetree-qa.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
default.bluetree-qa.co.uk
Other certificates including the domain name bluetree-qa.co.uk
(limited to 100 certificates)
product-api.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
route1print.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
instantprint.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
params-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
r1-connect-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
default.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
default.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
route1print.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
instantprint.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
params-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
r1-connect-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
default.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
default.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
Certificate
The complete raw certificate details for default.bluetree-qa.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcTCCA1mgAwIBAgIQDQqXCQTGuVDoNW8Lz3LXKTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIwMTAwMDAwMFoXDTIzMTIzMTIzNTk1OVowJDEi MCAGA1UEAxMZZGVmYXVsdC5ibHVldHJlZS1xYS5jby51azCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJuLTgVO1fH2xFKyeU8rBPIEvxLvJLXHDbZvMVyB keSn4h5UtcSpmXhMOHDsO/aR/DgKZAGAHhe0WDz5fEmy8wh8H6B/pwBMLlC34zwR 0yTvXyn8j/r7Pq5cn/gNHjAmwF3pT/+kJ2LjuevxsWvPwH/kPrKVpKQTQGX2JSTn q/GmnRPW9+Kkps7kraY6cpnRwZMM0B+NWRO9u1/fvJWjQVCby+lLHqUCRDwf7+GW 8c9w8EnUPvJ03kAslF2xC64ywt1Avqi76ukCl6eb3QRP4Ec5tS1erFqdnkTOdI6M cxE6wR+bX79aqWIDKNIAuviz2Rp9TwVztK743qzSKyNLH20CAwEAAaOCAYUwggGB MB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBSh5/bY zht+E5m+I6rLMH3/98KSOzAkBgNVHREEHTAbghlkZWZhdWx0LmJsdWV0cmVlLXFh LmNvLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250 cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1 c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0 LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAUy/KOrlQZ63RxPWnVkXnksg1bbj7HY98ZCD4 9dFvnuMAbIJVPWCk2QjfbIYW00qr9VqLh5LKX3QL0GGxnRSwQ+VwJAPjo5Q6ZtQ1 aIUGIL9YPKGKV3EZ/WobGUo9qLGEgtOsOSSVwX8os2DYXIzXOqGopk8SdwXMgUcg nQXbkAOW9TU7RLieSJ7fj3rG/OvxzLVg17C2zUiH4iVy72ShZW4X8gJtyaCry5/l 8MvUU5KFVs4A/NySHPswMzRKb8uMtfYfGr4wTdazZzLgGMbY20pt8r4/1Em+c29d lSEPfxWgAQfdmylMN7plZz4g84ZGUtdnh3r0kneRybd1kQKMDw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4tOBU7V8fbEUrJ5TysE 8gS/Eu8ktccNtm8xXIGR5KfiHlS1xKmZeEw4cOw79pH8OApkAYAeF7RYPPl8SbLz CHwfoH+nAEwuULfjPBHTJO9fKfyP+vs+rlyf+A0eMCbAXelP/6QnYuO56/Gxa8/A f+Q+spWkpBNAZfYlJOer8aadE9b34qSmzuStpjpymdHBkwzQH41ZE727X9+8laNB UJvL6UsepQJEPB/v4Zbxz3DwSdQ+8nTeQCyUXbELrjLC3UC+qLvq6QKXp5vdBE/g Rzm1LV6sWp2eRM50joxzETrBH5tfv1qpYgMo0gC6+LPZGn1PBXO0rvjerNIrI0sf bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17334950272171051136488186843476711209 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'default.bluetree-qa.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19635631011333756392608137539160358086539660747395675761917038026149830080292420746644962139518779349295009800076338789429303725636595073741414177593714069201967022621573698297766892360198539384006225355044279480888830233850032811531841643193392082743307021165769098207900386064186443742908750636914720994788169897703277024504505558260512047402292777908403625220866778119068684605710533170109767089449261721387779217855844611793273034223147429060666287994578536851816154090565546438586643022060941318680380233073391083694047974819885301309717110096660602701078982540905521947980435587732459807662274980229995526037357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1e7f6d8ce1b7e1399be23aacb307dfff7c2923b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.bluetree-qa.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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