api.aotg.movember.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 05:a6:97:6d:87:70:30:51:a4:c4:5a:0d:c1:aa:fd:c4 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.aotg.movember.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:a6:97:6d:87:70:30:51:a4:c4:5a:0d:c1:aa:fd:c4Serial Number (int): 7511132579077330405230495414929259972
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f9:a4:93:44:c7:e5:4a:84:a2:23:70:8d:82:7a:9b:d2:de:77:46:eb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 12:11:ac:02:8c:da:7e:cd:c0:71:59:64:ea:33:22:d1:15:41:bf:78
Fingerprint (sha256): 2d:17:ae:4a:7f:aa:07:d9:f4:19:fd:d1:bf:48:c7:10:28:46:60:50:98:8f:cb:11:10:4a:2c:a7:03:03:81:46
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate api.aotg.movember.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.aotg.movember.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.aotg.movember.com
Other certificates including the domain name movember.com
(limited to 100 certificates)
www.movember.com
ca.shop.movember.com
app.classquest.com.br
api.familyman.test.movember.com
toolkit.movember.com
community.movember.com
us.shop.movember.com
broadcast.movember.com
us.movember.com
cloud.email.movember.com
form.mymoons.mx
staff-auth.dev.movember.com
wonday.co
api.familyman.movember.com
h.ssl.shopify.com
*.movember.com
uat.movember.com
dr.movember.com
selfservice.movember.com
brushly.bullet-mobile.store
mo.movember.co
www.movember.com
cms.familyman.test.movember.com
www.meninmindlearning.movember.com
api.aotg.staging.movember.com
selfservice.movember.com
selfservice.uat.movember.com
shop.ca.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
api.aotg.movember.com
uat.movember.com
dr.movember.com
mo.movember.co
*.staging.movember.com
aotg.test.movember.com
meninmind.test.movember.com
nz.shop.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
truenorth.staging.movember.com
uat.movember.com
selfservice.movember.com
*.uat.movember.com
meninmind.test.movember.com
api.familyman.test.movember.com
mo.movember.co
api.meninmind.movember.com
petetest2.test.movember.com
ca.shop.movember.com
api.meninmind.test.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
truenorth.staging.movember.com
dr.movember.com
api.meninmind.movember.com
api.movember.com
uk.shop.movember.com
mo.movember.co
truenorth.staging.movember.com
*.mrporter.p.uat.movember.com
*.movember.com
truenorthtracker.test.movember.com
t5.mobx.agency
uk.shop.movember.com
awards.movember.com
talent.gravitonweb.com
cms.familyman.test.movember.com
us.shop.movember.com
uat.movember.com
us.shop.movember.com
*.staging.movember.com
mo.movember.co
mo.movember.co
speakeasy.movember.com
pierinasanchez.nyc
api.meninmind.test.movember.com
uat.movember.com
dr.movember.com
ca.shop.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
familyman.test.movember.com
uat.movember.com
uat.movember.com
mo.movember.co
www.movember.com
h.ssl.shopify.com
www.filipmarko.se
nz.shop.movember.com
business.etable.app
api.aotg.movember.com
uk.shop.movember.com
sonarqube.movember.com
uat.movember.com
uk.shop.movember.com
www.movember.com
uat.movember.com
*.demo.movember.com
*.uat.movember.com
aotgadmin.movember.com
dr.movember.com
cms.familyman.test.movember.com
ca.shop.movember.com
app.classquest.com.br
api.familyman.test.movember.com
toolkit.movember.com
community.movember.com
us.shop.movember.com
broadcast.movember.com
us.movember.com
cloud.email.movember.com
form.mymoons.mx
staff-auth.dev.movember.com
wonday.co
api.familyman.movember.com
h.ssl.shopify.com
*.movember.com
uat.movember.com
dr.movember.com
selfservice.movember.com
brushly.bullet-mobile.store
mo.movember.co
www.movember.com
cms.familyman.test.movember.com
www.meninmindlearning.movember.com
api.aotg.staging.movember.com
selfservice.movember.com
selfservice.uat.movember.com
shop.ca.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
api.aotg.movember.com
uat.movember.com
dr.movember.com
mo.movember.co
*.staging.movember.com
aotg.test.movember.com
meninmind.test.movember.com
nz.shop.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
truenorth.staging.movember.com
uat.movember.com
selfservice.movember.com
*.uat.movember.com
meninmind.test.movember.com
api.familyman.test.movember.com
mo.movember.co
api.meninmind.movember.com
petetest2.test.movember.com
ca.shop.movember.com
api.meninmind.test.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
truenorth.staging.movember.com
dr.movember.com
api.meninmind.movember.com
api.movember.com
uk.shop.movember.com
mo.movember.co
truenorth.staging.movember.com
*.mrporter.p.uat.movember.com
*.movember.com
truenorthtracker.test.movember.com
t5.mobx.agency
uk.shop.movember.com
awards.movember.com
talent.gravitonweb.com
cms.familyman.test.movember.com
us.shop.movember.com
uat.movember.com
us.shop.movember.com
*.staging.movember.com
mo.movember.co
mo.movember.co
speakeasy.movember.com
pierinasanchez.nyc
api.meninmind.test.movember.com
uat.movember.com
dr.movember.com
ca.shop.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
familyman.test.movember.com
uat.movember.com
uat.movember.com
mo.movember.co
www.movember.com
h.ssl.shopify.com
www.filipmarko.se
nz.shop.movember.com
business.etable.app
api.aotg.movember.com
uk.shop.movember.com
sonarqube.movember.com
uat.movember.com
uk.shop.movember.com
www.movember.com
uat.movember.com
*.demo.movember.com
*.uat.movember.com
aotgadmin.movember.com
dr.movember.com
cms.familyman.test.movember.com
Certificate
The complete raw certificate details for api.aotg.movember.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIQBaaXbYdwMFGkxFoNwar9xDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIyMjAwMDAwMFoXDTI0MDMyMTIzNTk1OVowIDEe MBwGA1UEAxMVYXBpLmFvdGcubW92ZW1iZXIuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAxOhGlYqgdYHNt70NuwCdONc1TiALWWt/UHl/jSuBVwIt 9pbfUyklUvTZDYpXx9EjWFbnBf3cy82/QeQIbOtmq4t3ffdVzQL7RcufLK6uD01O NXYFfLi+tqVgxbl2dFiyXp7UWuuBk9ODoj9MMSHdgFQFpGHs+fN1HkcZGtmbTCCf +XFWT/C31PrIor/arm10USfAKRtJ3mYwT8vBNmkvjIOMgDmt+6GXDS04K1clGrbG iEBmoJkIrlO1TIrExf/oM6AE+Z6dnYYlZFFnRXzxxgmDeTbSj+49p2kNur78to3F bDL2yLP7j1Pb8iLmL11rP32HY2kTkXxf8U2LvAIoFQIDAQABo4IC8DCCAuwwHwYD VR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFPmkk0TH5UqE oiNwjYJ6m9Led0brMCAGA1UdEQQZMBeCFWFwaS5hb3RnLm1vdmVtYmVyLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29t L3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt MDIuY2VyMAwGA1UdEwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhnf3LbQAAAQDAEgw RgIhAN7E30Fv/ETogPYGT/BHokN6yNYzacrSm7Hsa80ZvVJGAiEA/a7jo0KQtPaw +k0XWefd2SCaaXkQnObVo1gz+f8ur/8AdwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZ KoxrgBB6wXdytQAAAYZ39y2uAAAEAwBIMEYCIQCT4jxVtzATPq4jq8WEM5p51cxr ODiNXQwh+9eO2B91ZAIhAMelxg7U4+vHQT5Hy9AtLRj3DmczE2DlDjgrqOd6ULxx AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGGd/ctdAAABAMA RzBFAiEArC8qILrvZtoPLybYV7iDr+Pv3WMJmSDu9psHqjstHDECIE/eep91fNL+ vyHm5cBWwUO8H/Gl/capifl47KRCmk+QMA0GCSqGSIb3DQEBCwUAA4IBAQC6k87l VY9E3Ohxj9U4I1LWXs5AFFdr+oMul0nU1WzzAnA/7BkM+7xEg6EcgM29oWLVZ8iH JMJt7NUqhWzdG/pS5sUNrOOjiHXCHzQrH4IrB4N+YhW63CxnVRBNaMI/RxcxSHmt sTT+DRU9DwVL+BpVonHlu2hmPKJm621IBLcGX1GynAfJ39Z4+No2fm7Gibvp7qpi vkcHlqqVI26iWK/+F80B3+Gqr5EPSpXGpJIGhAAApAMjNErd81TYNDI/9cRtw2+r wf/2S9XSyTjbjZ3dpRtNEIksp0aig76GekLKmgL+F5jNTZjp/GJlO40M8Yg9XoJR VAAyfsGxnF2q0Xrl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOhGlYqgdYHNt70NuwCd ONc1TiALWWt/UHl/jSuBVwIt9pbfUyklUvTZDYpXx9EjWFbnBf3cy82/QeQIbOtm q4t3ffdVzQL7RcufLK6uD01ONXYFfLi+tqVgxbl2dFiyXp7UWuuBk9ODoj9MMSHd gFQFpGHs+fN1HkcZGtmbTCCf+XFWT/C31PrIor/arm10USfAKRtJ3mYwT8vBNmkv jIOMgDmt+6GXDS04K1clGrbGiEBmoJkIrlO1TIrExf/oM6AE+Z6dnYYlZFFnRXzx xgmDeTbSj+49p2kNur78to3FbDL2yLP7j1Pb8iLmL11rP32HY2kTkXxf8U2LvAIo FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7511132579077330405230495414929259972 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.aotg.movember.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24857247199488224785280086930208332799149182846351894915594018398842825601681789953316140322933430132586094361380222661327411260071541133297403715021297355682779932098970740051064914987377345601581664292139829899392427111055531270405935905257600826290278173895151592816240886186436290205084484232213702762681904238807522258052008812523462933641642359988393189949699240346139526492602465856271743322023932568822127770694160337627010770049633788036447700832215546597116141094596436001893735995093074031123631262730461600827500916319356472835112332596948434068452730327864927426066307670040452956536169548561483340851221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f9a49344c7e54a84a223708d827a9bd2de7746eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aotg.movember.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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