*.themaven.net
Issued by Amazon
About this certificate
This digital certificate with serial number 09:e9:34:dc:83:63:72:fe:fd:1a:cf:9b:d2:ed:eb:8d was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.themaven.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:e9:34:dc:83:63:72:fe:fd:1a:cf:9b:d2:ed:eb:8dSerial Number (int): 13173929286260763714826397086145964941
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 14:bd:3b:ab:eb:e2:c2:c4:63:44:9e:1d:6d:6f:e4:33:e4:df:5e:8e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): c4:1f:37:9f:26:1c:0e:d9:5b:8e:a3:27:2c:15:ff:1e:c7:9a:5d:df
Fingerprint (sha256): 29:6a:6e:5e:5a:12:4e:06:1d:58:9b:ae:a1:5b:d3:56:97:89:ce:1d:11:fe:bc:2c:a5:66:26:81:1f:99:e6:66
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.themaven.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.themaven.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.themaven.net
Other certificates including the domain name themaven.net
(limited to 100 certificates)
maven.io
*.imgix.net
imgix2.map.fastly.net
*.maven.io
*.prod.themaven.net
dns-vetting1k.map.fastly.net
wiki.themaven.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.prod.themaven.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
themaven.net
*.imgix.net
*.themaven.net
*.imgix.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.themaven.net
saymedia2.map.fastly.net
themaven.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
imgix2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.stage.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
themaven.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
*.test.themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
*.maven.io
*.prod.themaven.net
dns-vetting1k.map.fastly.net
wiki.themaven.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.prod.themaven.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
themaven.net
*.imgix.net
*.themaven.net
*.imgix.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
*.themaven.net
saymedia2.map.fastly.net
themaven.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
imgix2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.stage.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
imgix2.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
themaven.net
saymedia2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
*.imgix.net
*.maven.io
*.themaven.net
imgix2.map.fastly.net
dns-vetting1k.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
imgix2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1k.map.fastly.net
imgix2.map.fastly.net
*.imgix.net
*.test.themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
Certificate
The complete raw certificate details for *.themaven.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEUDCCAzigAwIBAgIQCek03INjcv79Gs+b0u3rjTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNzAyMjQwMDAwMDBaFw0xODAzMjQx MjAwMDBaMBkxFzAVBgNVBAMMDioudGhlbWF2ZW4ubmV0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAna44LjbGDjdeOpXcjgMP7o+8dg8ECBrfxODcRIQ/ FTIWkXRQ+I8vxHjUcpS/38/Tj+s6kximoGH9Dd7+iKLCnLkjD8OctGQS/EYGzadn V+6cgT8GBPKTJ1SUl1DNGeONPvg7ji4/2yX6PN4Ugk9lVjcxa81J5j6q/yJ8I8uW 6OBFGa4LKSlkWCWb8AQl0TbcQKhhybCIdqVBixbC8R99Gi8+UbKXqL3yUwB+CMGL gm3dqWcoacegyvegfew0/i2ABL2U/vpA1GPNypAQTwtE0JC3Fo27GZ0mLjoJet3N +abay8aG5HJzcvEv/jeCiE/Sp6BkwX8XzFtXkmxsNl/NowIDAQABo4IBZTCCAWEw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFBS9O6vr 4sLEY0SeHW1v5DPk316OMBkGA1UdEQQSMBCCDioudGhlbWF2ZW4ubmV0MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAVUYVZ2ygv33PkqR6 bjeTY23Uq4xHPcaWUSKScpVlCXXalgWlXhO/nbkAhQZgS4Mo710+9DNaOkZq6lsh JbdUqbTGi8wB2q0+3g1J4wQAMv5/mSmcEpPNmalcbGJkXVPfUsA45FVg9cP/3pDd EcG06E5ji5epDGAul027kd6VVCR8XMUJC3ZMdrhi9eVBZeVbFZEBTYGreQuh7XbP LcULaXGNl3ZX84k8cG5Ij1S24SXtH1vr5v4qAWh+ZYUZVSJnHw0GvD7P7xHyS1VN EskeynippTj+gFMZQlOdFf+UDRhCKuA5lg9isH7CKqiBhIWxLg0lwFg4OhnpcHwJ WgGfQA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna44LjbGDjdeOpXcjgMP 7o+8dg8ECBrfxODcRIQ/FTIWkXRQ+I8vxHjUcpS/38/Tj+s6kximoGH9Dd7+iKLC nLkjD8OctGQS/EYGzadnV+6cgT8GBPKTJ1SUl1DNGeONPvg7ji4/2yX6PN4Ugk9l Vjcxa81J5j6q/yJ8I8uW6OBFGa4LKSlkWCWb8AQl0TbcQKhhybCIdqVBixbC8R99 Gi8+UbKXqL3yUwB+CMGLgm3dqWcoacegyvegfew0/i2ABL2U/vpA1GPNypAQTwtE 0JC3Fo27GZ0mLjoJet3N+abay8aG5HJzcvEv/jeCiE/Sp6BkwX8XzFtXkmxsNl/N owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13173929286260763714826397086145964941 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.themaven.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19905324694955002571533417530301718702517922000434701881912435360855503002695373835896442349233719684120929764932716638888352701733949226778570920955601874230231381571862769269894396567415473223616018407400410766652556890167215223615707400528476902487135009288767075315901202150318334193442524023309591409841522286194982011757531492340463046145490475350544277050163750001315791746155380166072099579483030783387818747023485535636524855835858090852662404680629008592610058682971109044128189350307383752660516218261126443808667970255193644165108399940023935689805076989329918726010540826867958123112872074866250735406499 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 14bd3babebe2c2c463449e1d6d6fe433e4df5e8e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaven.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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