sonarqube.dt.foundation.snr.dsm.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:16:61:84:4f:5e:73:c8:27:ad:93:85:eb:a6:b7:e4 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sonarqube.dt.foundation.snr.dsm.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:16:61:84:4f:5e:73:c8:27:ad:93:85:eb:a6:b7:e4Serial Number (int): 20054628344074011963591945919257819108
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 91:6c:3a:55:7a:f1:7b:ff:bc:4d:85:85:8b:21:ed:04:32:da:a1:8f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 60:ef:ff:6d:d0:54:96:7e:1a:4b:a8:59:92:65:69:bf:11:37:a4:16
Fingerprint (sha256): 23:e9:97:17:96:32:d6:78:ea:e6:1a:83:01:eb:68:89:bb:a7:b0:d4:82:e0:8e:d7:59:84:3d:72:e1:3b:04:59
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate sonarqube.dt.foundation.snr.dsm.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sonarqube.dt.foundation.snr.dsm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sonarqube.dt.foundation.snr.dsm.com
Other certificates including the domain name dsm.com
(limited to 100 certificates)
wcm.qa.dsm.com
www.dsm.com
www.dsm.com
nutritionportal.dsm.com
emea-access.dsm.com
test.cgi.dsm.com
dsm-wd.dsm.com
www.dsm.com
*.eightfold.ai
dsmintegrationcloudqa.dsm.com
technicaldocuments.dsm.com
dsm.CRMQA.dsm.com
wcm.test.dsm.com
newsletter.dsm.com
engineerconnect.dsm.com
www.dsm.com
amec-web-ext.dsm.com
www.rfq-dmsc.dsm.com
virtualweb.dsm.com
apac-access.dsm.com
jaedtest.dsm.com
*.eightfold.ai
technicaldocuments.dsm.com
www-qa.dsm.com
virtuadeskchina.dsm.com
testproxy.dsm.com
dsm.com
topview.dsm.com
b2b.dsm.com
technicaldocuments.dsm.com
dsmintegrationcloud.dsm.com
emea-access.dsm.com
technicaldocuments.dsm.com
virtualweb.dsm.com
tb.analytics.dsm.com
delvo-analytics.dsm.com
dsm.com
mytoolbox.dsm.com
Shanghaida.dsm.com
www.dsm.com
dsm.CRM.dsm.com
webshop.dsm.com
meerbuschda.dsm.com
dsmintegrationcloudqa.dsm.com
dsm.com
testreplace.dsm.com
webservice-qa.dsm.com
testreplace.dsm.com
virtuadesk.dsm.com
mysupport.dsm.com
testev.dsm.com
dsm.com
LWPVPN.DSM.COM
engineerconnect.dsm.com
webservice-qa.dsm.com
*.eightfold.ai
lsrp.dsm.com
ftebudgeting-test.dsm.com
demo12.dsm.com
api-onpremise.dsm.com
*.dsm.com
wcm.dsm.com
insights4.dsm.com
join.dsm.com
webconf.dsm.com
ra.dsm.com
webservice-dev.dsm.com
wcm.qa.dsm.com
ftebudgeting.dsm.com
api-onpremise.dsm.com
testdsm.dsm.com
*.eightfold.ai
dsm-wda.dsm.com
idm.dsm.com
ultracalculator.dsm.com
testSAN1.dsm.com
sonarqube.dt.foundation.snr.dsm.com
virtualweb.dsm.com
dsm.com
*.eightfold.ai
notifyiris.dsm.com
teamroom.dsm.com
sbc802.dsm.com
webshop.dsm.com
myotherhostname.dsm.com
myotherhostname.dsm.com
virtualweb.dsm.com
*.eightfold.ai
brains.dsm.com
brains.dsm.com
test.dsm.com
newsletter.dsm.com
virtualweb.dsm.com
dsm.com
delvo-analytics.dsm.com
mysupport.dsm.com
webshop.dsm.com
*.eightfold.ai
buildserver.qa.dsm.com
depmdac.dsm.com
www.dsm.com
www.dsm.com
nutritionportal.dsm.com
emea-access.dsm.com
test.cgi.dsm.com
dsm-wd.dsm.com
www.dsm.com
*.eightfold.ai
dsmintegrationcloudqa.dsm.com
technicaldocuments.dsm.com
dsm.CRMQA.dsm.com
wcm.test.dsm.com
newsletter.dsm.com
engineerconnect.dsm.com
www.dsm.com
amec-web-ext.dsm.com
www.rfq-dmsc.dsm.com
virtualweb.dsm.com
apac-access.dsm.com
jaedtest.dsm.com
*.eightfold.ai
technicaldocuments.dsm.com
www-qa.dsm.com
virtuadeskchina.dsm.com
testproxy.dsm.com
dsm.com
topview.dsm.com
b2b.dsm.com
technicaldocuments.dsm.com
dsmintegrationcloud.dsm.com
emea-access.dsm.com
technicaldocuments.dsm.com
virtualweb.dsm.com
tb.analytics.dsm.com
delvo-analytics.dsm.com
dsm.com
mytoolbox.dsm.com
Shanghaida.dsm.com
www.dsm.com
dsm.CRM.dsm.com
webshop.dsm.com
meerbuschda.dsm.com
dsmintegrationcloudqa.dsm.com
dsm.com
testreplace.dsm.com
webservice-qa.dsm.com
testreplace.dsm.com
virtuadesk.dsm.com
mysupport.dsm.com
testev.dsm.com
dsm.com
LWPVPN.DSM.COM
engineerconnect.dsm.com
webservice-qa.dsm.com
*.eightfold.ai
lsrp.dsm.com
ftebudgeting-test.dsm.com
demo12.dsm.com
api-onpremise.dsm.com
*.dsm.com
wcm.dsm.com
insights4.dsm.com
join.dsm.com
webconf.dsm.com
ra.dsm.com
webservice-dev.dsm.com
wcm.qa.dsm.com
ftebudgeting.dsm.com
api-onpremise.dsm.com
testdsm.dsm.com
*.eightfold.ai
dsm-wda.dsm.com
idm.dsm.com
ultracalculator.dsm.com
testSAN1.dsm.com
sonarqube.dt.foundation.snr.dsm.com
virtualweb.dsm.com
dsm.com
*.eightfold.ai
notifyiris.dsm.com
teamroom.dsm.com
sbc802.dsm.com
webshop.dsm.com
myotherhostname.dsm.com
myotherhostname.dsm.com
virtualweb.dsm.com
*.eightfold.ai
brains.dsm.com
brains.dsm.com
test.dsm.com
newsletter.dsm.com
virtualweb.dsm.com
dsm.com
delvo-analytics.dsm.com
mysupport.dsm.com
webshop.dsm.com
*.eightfold.ai
buildserver.qa.dsm.com
depmdac.dsm.com
Certificate
The complete raw certificate details for sonarqube.dt.foundation.snr.dsm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQDxZhhE9ec8gnrZOF66a35DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNzAwMDAwMFoXDTI1MDEwNDIzNTk1OVowLjEs MCoGA1UEAxMjc29uYXJxdWJlLmR0LmZvdW5kYXRpb24uc25yLmRzbS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7THtGmFNAd8qDPdZB0QeYbmy TkS/+vj34sr5qyDjNmDzy1YaY+ZGjzQ++QXOJY+c9FJCOhJR/K+o8kPEEyiG43dW L3vrp272gYlEXU4IyEwd4hNunj6gm6rmUuPTTWVdUF8Gb9AahB809gKNCVWFmNVG UnYIzd36rQdZdq9zlmdCuFwu+5MS7KisVwv1KI+gzLSosPqzCcS3J7oM9Z6YyJep rbAPmEUEMRVt3SRpjQH48XXYNdpbnfMgIfdjPEj/LDEyCITgot+0iDqnLwrnpQvC 7nHZcnfEa5jVIr8S8xBElrq4b1zoemdEyAjOphW/ULeD/ioLB2uR0yCFobM7AgMB AAGjggGPMIIBizAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNV HQ4EFgQUkWw6VXrxe/+8TYWFiyHtBDLaoY8wLgYDVR0RBCcwJYIjc29uYXJxdWJl LmR0LmZvdW5kYXRpb24uc25yLmRzbS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNv bS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl49Q0Egci YwAkOamR8bDQy5nTKGLyDTgonHGAceM2c43GE5uMeJLWgoAkM1e8+DuzTnTIfodm 2zUgM3okq8YQCIGCWVOtY6P7YoxSRp2S5qd6ZcSEM1uKU7L/QXjUtf/6U9FbmwAh ThgAzHp06s0Y6nKCKIN0M/G2AJpwFXub4/kqLO7OAJN/ShhEsxeUJEFihrRPftoj qxx9VonmXWhdyZ88JR2qpLgsPMq1GJkaCWMmme0NFv/sRx+tqLAdqVXJgZ82zcup C3dXd+aUvQjCRCl1MApt7X3hSaF5sCkplxGaPtK0p8f/xfxagNKhAq7fnPjokq84 T4fYjiEen7zx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO0x7RphTQHfKgz3WQdE HmG5sk5Ev/r49+LK+asg4zZg88tWGmPmRo80PvkFziWPnPRSQjoSUfyvqPJDxBMo huN3Vi9766du9oGJRF1OCMhMHeITbp4+oJuq5lLj001lXVBfBm/QGoQfNPYCjQlV hZjVRlJ2CM3d+q0HWXavc5ZnQrhcLvuTEuyorFcL9SiPoMy0qLD6swnEtye6DPWe mMiXqa2wD5hFBDEVbd0kaY0B+PF12DXaW53zICH3YzxI/ywxMgiE4KLftIg6py8K 56ULwu5x2XJ3xGuY1SK/EvMQRJa6uG9c6HpnRMgIzqYVv1C3g/4qCwdrkdMghaGz OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20054628344074011963591945919257819108 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sonarqube.dt.foundation.snr.dsm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24354719779247938695148698350151116143271835579455310012192745741587969323871531087827350755260003413435820268360123066376970874645358050072564352985331909745409600641291214560169655327403868772850396053637990256386434612971563243298642216809938860289827329812148192216248759725152819453357449876292528242141947865749852654471089349733056969619755259550546771041857289723494272826734299315143676317816504564037014672792213585992534604897754379188854051484452859307165961504906675763058611805933556981333254688124306169490673826320122506464295764192534501536121895203861067544140268069053359939311783432742805541335867 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 916c3a557af17bffbc4d85858b21ed0432daa18f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonarqube.dt.foundation.snr.dsm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0025e3d43412072263002439a991f1b0d0cb99d32862f20d38289c718071e336738dc6139b8c7892d68280243357bcf83bb34e74c87e8766db3520337a24abc6100881825953ad63a3fb628c52469d92e6a77a65c484335b8a53b2ff4178d4b5fffa53d15b9b00214e1800cc7a74eacd18ea728228837433f1b6009a70157b9be3f92a2ceece00937f4a1844b3179424416286b44f7eda23ab1c7d5689e65d685dc99f3c251daaa4b82c3ccab518991a09632699ed0d16ffec471fada8b01da955c9819f36cdcba90b775777e694bd08c2442975300a6ded7de149a179b0292997119a3ed2b4a7c7ffc5fc5a80d2a102aedf9cf8e892af384f87d88e211e9fbcf1