agtrader.com.au
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:1f:70:3b:bd:b8:94:02:52:79:79:45:2e:38:2c:8d was issued on by Amazon.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=agtrader.com.au
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:1f:70:3b:bd:b8:94:02:52:79:79:45:2e:38:2c:8dSerial Number (int): 13455517523516743874325093233613876365
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fd:06:c3:5a:cf:04:d8:23:11:b6:75:0e:ed:65:3d:4a:78:e7:d9:4f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 47:4e:5d:ad:b7:af:cc:4f:e8:16:e3:3d:2d:be:6c:8b:5d:1c:c2:d5
Fingerprint (sha256): 2d:00:a7:3e:75:03:33:bf:af:ae:04:e0:95:4a:57:44:d9:2e:4b:24:48:83:7e:f5:54:81:c9:5d:d2:fc:ba:97
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate agtrader.com.au
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agtrader.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agtrader.com.au
*.agtrader.com.au
agtrader.co.nz
*.agtrader.co.nz
horsedeals.com.au
*.horsedeals.com.au
f2.com.au
*.f2.com.au
fairfax.com.au
*.fairfax.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
*.dynamic.f2.com.au
*.agtrader.com.au
agtrader.co.nz
*.agtrader.co.nz
horsedeals.com.au
*.horsedeals.com.au
f2.com.au
*.f2.com.au
fairfax.com.au
*.fairfax.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
*.dynamic.f2.com.au
Other certificates including the domain name agtrader.com.au
(limited to 100 certificates)
subscribers.theage.com.au
agtrader.com.au
fairfaxmedia.com.au
subscribers.theage.com.au
fairfaxregional.com.au
subscribers.theage.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
subscribers.theage.com.au
agtrader.com.au
austcommunitymedia.com.au
agtrader.com.au
www.horsedeals.com.au
austcommunitymedia.com.au
agtrader.com.au
fairfax.com.au
fairfaxregional.com.au
subscribers.theage.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
fairfaxregional.com.au
agtrader.com.au
fairfaxregional.com.au
*.agtrader.com.au
subscribers.theage.com.au
subscribers.theage.com.au
agtrader.com.au
fairfaxregional.com.au
fairfax.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
fairfaxmedia.com.au
fairfax.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
agtrader.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
agtrader.com.au
agtrader.com.au
fairfaxmedia.com.au
austcommunitymedia.com.au
subscribers.theage.com.au
*.fairfaxmedia.com.au
subscribers.theage.com.au
*.agtrader.com.au
fairfaxmedia.com.au
agtrader.com.au
fairfaxmedia.com.au
subscribers.theage.com.au
fairfaxregional.com.au
subscribers.theage.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
subscribers.theage.com.au
agtrader.com.au
austcommunitymedia.com.au
agtrader.com.au
www.horsedeals.com.au
austcommunitymedia.com.au
agtrader.com.au
fairfax.com.au
fairfaxregional.com.au
subscribers.theage.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
fairfaxregional.com.au
agtrader.com.au
fairfaxregional.com.au
*.agtrader.com.au
subscribers.theage.com.au
subscribers.theage.com.au
agtrader.com.au
fairfaxregional.com.au
fairfax.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
fairfaxmedia.com.au
fairfax.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
agtrader.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
agtrader.com.au
agtrader.com.au
fairfaxmedia.com.au
austcommunitymedia.com.au
subscribers.theage.com.au
*.fairfaxmedia.com.au
subscribers.theage.com.au
*.agtrader.com.au
fairfaxmedia.com.au
Certificate
The complete raw certificate details for agtrader.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIQCh9wO724lAJSeXlFLjgsjTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjA2MjgwMDAwMDBaFw0xNzA3Mjgx MjAwMDBaMBoxGDAWBgNVBAMTD2FndHJhZGVyLmNvbS5hdTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJo7BnLf2lLKHYEvf9UNUASKTzOKdkphx7b6Czbl GvmJ4H8//3DvUdZr4WlEd7/N6iKSBbZx9ipLzV7aL1dW7SbbMWwLYqLs2S1GvPqH Yj+BvULh+utDxQ+Xaaa4GtqhlylkXLCVC5Mj1T3MTS2e5XEV0z6ztSGYrr8OeCTZ 95FZU7a3srQCjNhlYrm5C24J2Towh96cqBGr1FkZgsxrRbEd9sYz8oPj9Y+FhNkU MWNGuPiQqE7hfevel9fZZY868tC1gv7viXrg+Qc9ywci6UuWgYnlbhmRjLIlRsyS bQQ1v/bU7QLkmTPvLUo5TQYaJNXkS1E9WUQ3BNicFnA9JbsCAwEAAaOCAkEwggI9 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBT9BsNa zwTYIxG2dQ7tZT1KeOfZTzCB9AYDVR0RBIHsMIHpgg9hZ3RyYWRlci5jb20uYXWC ESouYWd0cmFkZXIuY29tLmF1gg5hZ3RyYWRlci5jby5ueoIQKi5hZ3RyYWRlci5j by5ueoIRaG9yc2VkZWFscy5jb20uYXWCEyouaG9yc2VkZWFscy5jb20uYXWCCWYy LmNvbS5hdYILKi5mMi5jb20uYXWCDmZhaXJmYXguY29tLmF1ghAqLmZhaXJmYXgu Y29tLmF1ghNmYWlyZmF4bWVkaWEuY29tLmF1ghUqLmZhaXJmYXhtZWRpYS5jb20u YXWCEyouZHluYW1pYy5mMi5jb20uYXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v Y3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwEwYDVR0gBAwwCjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMA0G CSqGSIb3DQEBCwUAA4IBAQB1M8Fc8nOFyvt//WhQvoBvCFT5P35Vjn1hKv7EaSv4 HdVtIDlJdhKN1uQThkJ5Q2sA9AvvsBQxDBaoIof6GTmpO8WwiETVl2gdRMY8cc4u +XJudAu9o65msvPlIIIXIvYITgpG9Dx6sQoEUq0NeVTZ3RXr0HW/Zj4siK7noQym y47AR7c3zBpBYbzhjnTERFMz1mnOzVBqQFyQ4nhQ458W37EeT86oaWzNc+FTmnF6 1O/RvZzLVaEnIxdHekQ4iDjUNKZJ9SztHMlknMxIJrRPAxesFLN6hrm1k5GjKpy1 cI1uJRd843qL7EX/6yOnnAwgdy5vkKUL3zXfF0axGT7U -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjsGct/aUsodgS9/1Q1Q BIpPM4p2SmHHtvoLNuUa+Yngfz//cO9R1mvhaUR3v83qIpIFtnH2KkvNXtovV1bt JtsxbAtiouzZLUa8+odiP4G9QuH660PFD5dpprga2qGXKWRcsJULkyPVPcxNLZ7l cRXTPrO1IZiuvw54JNn3kVlTtreytAKM2GViubkLbgnZOjCH3pyoEavUWRmCzGtF sR32xjPyg+P1j4WE2RQxY0a4+JCoTuF9696X19lljzry0LWC/u+JeuD5Bz3LByLp S5aBieVuGZGMsiVGzJJtBDW/9tTtAuSZM+8tSjlNBhok1eRLUT1ZRDcE2JwWcD0l uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13455517523516743874325093233613876365 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agtrader.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19469805370942574551359446340174308882866765862437013795967436518123584977939344797690999192060396530624367175019484368825752045956521682751543826027582048175372600724440888012788719887298789422285371493839978739589114449977168231534018572020034857276159041504515854956925090166627404902695684056013932884095784905010098280687704293107454073580626687464662477177883131675687726278340017068888278552492453098696825954217055061349590232829918926879236656692601766468942831341847895934156314892385773312325561990682463975652113695914132136130384972294351335265226439923437957846740446855822795054470105123408549991228859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fd06c35acf04d82311b6750eed653d4a78e7d94f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtrader.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agtrader.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtrader.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agtrader.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsedeals.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horsedeals.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f2.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f2.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfax.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfax.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfaxmedia.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfaxmedia.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamic.f2.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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