sa2.bookingmotor.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0a:85:40:54:cb:ba:f1:0e:0e:4b:de:84:99:80:cf:8c was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sa2.bookingmotor.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:85:40:54:cb:ba:f1:0e:0e:4b:de:84:99:80:cf:8cSerial Number (int): 13984160232466031254532437291296673676
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 03:bc:b2:ba:7c:40:54:c9:cf:38:87:fe:4d:12:ab:2f:b0:2a:fc:33
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): f0:0e:24:36:53:db:f2:8f:a2:06:96:1f:fb:21:46:65:b9:6a:02:8e
Fingerprint (sha256): 32:da:b1:2a:e2:95:d9:aa:b6:08:4a:a6:ae:97:b8:fe:27:bd:37:fc:19:a3:3b:b5:88:c6:27:0b:d8:d5:2c:76
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate sa2.bookingmotor.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sa2.bookingmotor.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sa2.bookingmotor.com
*.turismosur.es
*.mertravelusa.com
*.tourexplorador.com
*.mundoviajescr.com
*.cbtoursperu.com
*.vacancyrewards.com
*.happytoursrd.com
*.easybook.travel
*.lucarviajes.com
*.turismosur.es
*.mertravelusa.com
*.tourexplorador.com
*.mundoviajescr.com
*.cbtoursperu.com
*.vacancyrewards.com
*.happytoursrd.com
*.easybook.travel
*.lucarviajes.com
Other certificates including the domain name bookingmotor.com
(limited to 100 certificates)
academy.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com
Certificate
The complete raw certificate details for sa2.bookingmotor.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIQCoVAVMu68Q4OS96EmYDPjDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDUyNTAwMDAwMFoXDTI0MDYyMjIzNTk1OVowHzEd MBsGA1UEAxMUc2EyLmJvb2tpbmdtb3Rvci5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc29039uA4odQZqgvRIGPyOmjC6Cr9oGQAXp/AHoDPWwN8 ve+7XA1KBz8LJfOgZlWN+0SgPG1zu/qVcaePm/zjh/QwO6BEjVCkNz9H32YsXxuh opDEWLxB5YvQTIu5TuSsKbWjnpV0yxwqIe3nnKqXlJ0/fWJbmRy7WdqhGEjMud9a 2NWoNFgpYxaJm6GHcjjAyCYkGoTLeUeEKb53nY2QQ0DcAi+JjVkS3BjZca4n/NUc 5MR5ZKvipoGTUOr8GOM5Vu4L+BuT7janXsem/xgau6ZrtyMV6SxsldpMYNbJKaax azi444xEAzvcfcYUr0v1Fidmq0PqfqWMAnnKvXmLAgMBAAGjggI2MIICMjAfBgNV HSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUA7yyunxAVMnP OIf+TRKrL7Aq/DMwgdQGA1UdEQSBzDCByYIUc2EyLmJvb2tpbmdtb3Rvci5jb22C DyoudHVyaXNtb3N1ci5lc4ISKi5tZXJ0cmF2ZWx1c2EuY29tghQqLnRvdXJleHBs b3JhZG9yLmNvbYITKi5tdW5kb3ZpYWplc2NyLmNvbYIRKi5jYnRvdXJzcGVydS5j b22CFCoudmFjYW5jeXJld2FyZHMuY29tghIqLmhhcHB5dG91cnNyZC5jb22CESou ZWFzeWJvb2sudHJhdmVsghEqLmx1Y2FydmlhamVzLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDAT BgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG IWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq aHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1Ud EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AGS+Vu3cAAn8isGzuw/LRWyOTzX5Qi95wE88kF17MLcIQEw0bcvcmJlPQVZo1gSw 1unkNnVHZEnIn21egzMqx0ILwhIa8Uhcs4+I87LA0iHDn6FvZRoCSbxOSjaTGRl1 TPOw4qASVaTzvshyB4KI5NEmTsOGHRFMhm5KFsJRDuJsC4UxE/CfSjJIu6l/baTi Jvk3LA69wIWP6hjpeZ+HsLwXTyeL75ioo0EEOvKCu8CpXXZEohfL0sCAel47f0A+ apFRXfrUU4L3r42msgXOwhs73mJx4PqFw5REErnzr6jDVKDtwONkFn4w3Aa/f/zd IVHE/JqUhMxNleek47sUU9Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NvdN/bgOKHUGaoL0SBj 8jpowugq/aBkAF6fwB6Az1sDfL3vu1wNSgc/CyXzoGZVjftEoDxtc7v6lXGnj5v8 44f0MDugRI1QpDc/R99mLF8boaKQxFi8QeWL0EyLuU7krCm1o56VdMscKiHt55yq l5SdP31iW5kcu1naoRhIzLnfWtjVqDRYKWMWiZuhh3I4wMgmJBqEy3lHhCm+d52N kENA3AIviY1ZEtwY2XGuJ/zVHOTEeWSr4qaBk1Dq/BjjOVbuC/gbk+42p17Hpv8Y Gruma7cjFeksbJXaTGDWySmmsWs4uOOMRAM73H3GFK9L9RYnZqtD6n6ljAJ5yr15 iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13984160232466031254532437291296673676 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sa2.bookingmotor.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27880846138432379808563377933936117423458292509149084870301523109321728755401439829991771651576210234646117319600847585838304730576163778740634875498132836083002847272801066553554372926737845734814484993164559678182530649775553695722376660683576659637498224688602460782550410909419962308722344317631685813281967457231469937160485016290892855244930539763693193216320701297473146954872598957530857669953751874087394312892604378625562888254302576037683320693436028003361530695863389490762013703687768795713790109473284681636743131151158571028207534427091129700812233121414269109766485019151832008942735517177259558271371 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03bcb2ba7c4054c9cf3887fe4d12ab2fb02afc33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa2.bookingmotor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turismosur.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mertravelusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tourexplorador.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundoviajescr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbtoursperu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacancyrewards.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happytoursrd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easybook.travel' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucarviajes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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