amnotify.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:67:1a:db:25:cc:d9:cb:9f:2f:7f:9b:18:7c:f8:5f was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=amnotify.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:67:1a:db:25:cc:d9:cb:9f:2f:7f:9b:18:7c:f8:5fSerial Number (int): 5852263264884631044952333628240361567
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: dc:b6:ff:25:c6:14:16:4c:7c:ef:b3:4e:07:65:c0:c1:57:de:9b:45
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 20:7c:17:40:be:e3:2f:e5:34:09:f0:3b:b6:e2:d6:db:3f:dd:28:5d
Fingerprint (sha256): 38:73:b9:3f:b2:e2:e6:41:c9:b1:5a:35:d5:ae:99:3e:bc:5c:32:15:82:e3:4a:47:38:c9:ac:58:54:40:ce:43
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate amnotify.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for amnotify.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amnotify.com
Other certificates including the domain name amnotify.com
(limited to 100 certificates)
www.cineflow.ai
amborjo.com
staging.figr.ai
auth.wememorize.com
pewdiepie-vs-tseries.today
lec.booksate.com
lightningshare.app
exploration.by-d.art
www.culinarioo.de
lacampagnola.com.au
www.filemark.app
cristianramosfotografia.com
goldentime-assetfriends.com
shadowlightgaming.com
3d-homes-dev.marmac.name
vivacalc.com
australia.amnotify.com
admin.loftyapps.com
www.plantech.group
console.gendocu.com
public.nsjtt.com
www.amnotify.com
citiehoops.com
smartheartcampaign.com
amnotify.com
projectit.enoram.app
dashboard.korea.amnotify.com
www.plantech.group
staging.intrm.app
www.oyeyku.com
lacampagnola.com.au
dd.planmunk.com
elvis.ai
pcdchauffeur.ie
savelocation.app
ms.zipilim.com
logopedielievemutton.be
www.javierquesada.design
api.amnotify.com
trivelapp.com
dswenlinea.com
proofpoint.latamfenix.com
my.abstrakty.com
amnotify.com
clei2021.cr
cyha.jp
scan.watdrinkje.be
arcade.amnotify.com
mi.gramola.app
events.3digiart.de
sni.cloudflaressl.com
gandr.app
my.abstrakty.com
www.xrahmaan.com
amnotify.com
amnotify.com
iot.sitedrive.com
www.papershelf.app
app.nextpay.world
links.staging.sakenomy.jp
www.thelaundryman.in
lok.sh
www.bridgesroyalecommunications.com
resolve.jp
www.masterstkd.ca
china.amnotify.com
bots.dihola.uy
molecs.com
life.ziggu.app
everythingtube.xyz
www.babydiary.ovh
www.babydiary.ovh
mint-ropsten.zksync.dev
nunapetsmart.com
www.doadoodle.app
trivelapp.com
dashboard.china.amnotify.com
www.publiko.ph
*.amnotify.com
dswenlinea.com
lacampagnola.com.au
helicalldn.equiem.mobi
www.inovardirect.com
www.amnotify.com
www.seananderson.co.uk
poistu.raha.fi
memory-f8xn.131119-restock.europe.amnotify.com
njhomes.info
soonspins.com
leonardsamples.com
proxies.amnotify.com
frerestoque.pmw.io
www.kaizenfox.com
www.plataformaproativos.com.br
finalfinal.io
chancedemo.zajno.com
proxies.amnotify.com
amnotify.com
savelocation.app
hearst.madhive.com
amborjo.com
staging.figr.ai
auth.wememorize.com
pewdiepie-vs-tseries.today
lec.booksate.com
lightningshare.app
exploration.by-d.art
www.culinarioo.de
lacampagnola.com.au
www.filemark.app
cristianramosfotografia.com
goldentime-assetfriends.com
shadowlightgaming.com
3d-homes-dev.marmac.name
vivacalc.com
australia.amnotify.com
admin.loftyapps.com
www.plantech.group
console.gendocu.com
public.nsjtt.com
www.amnotify.com
citiehoops.com
smartheartcampaign.com
amnotify.com
projectit.enoram.app
dashboard.korea.amnotify.com
www.plantech.group
staging.intrm.app
www.oyeyku.com
lacampagnola.com.au
dd.planmunk.com
elvis.ai
pcdchauffeur.ie
savelocation.app
ms.zipilim.com
logopedielievemutton.be
www.javierquesada.design
api.amnotify.com
trivelapp.com
dswenlinea.com
proofpoint.latamfenix.com
my.abstrakty.com
amnotify.com
clei2021.cr
cyha.jp
scan.watdrinkje.be
arcade.amnotify.com
mi.gramola.app
events.3digiart.de
sni.cloudflaressl.com
gandr.app
my.abstrakty.com
www.xrahmaan.com
amnotify.com
amnotify.com
iot.sitedrive.com
www.papershelf.app
app.nextpay.world
links.staging.sakenomy.jp
www.thelaundryman.in
lok.sh
www.bridgesroyalecommunications.com
resolve.jp
www.masterstkd.ca
china.amnotify.com
bots.dihola.uy
molecs.com
life.ziggu.app
everythingtube.xyz
www.babydiary.ovh
www.babydiary.ovh
mint-ropsten.zksync.dev
nunapetsmart.com
www.doadoodle.app
trivelapp.com
dashboard.china.amnotify.com
www.publiko.ph
*.amnotify.com
dswenlinea.com
lacampagnola.com.au
helicalldn.equiem.mobi
www.inovardirect.com
www.amnotify.com
www.seananderson.co.uk
poistu.raha.fi
memory-f8xn.131119-restock.europe.amnotify.com
njhomes.info
soonspins.com
leonardsamples.com
proxies.amnotify.com
frerestoque.pmw.io
www.kaizenfox.com
www.plataformaproativos.com.br
finalfinal.io
chancedemo.zajno.com
proxies.amnotify.com
amnotify.com
savelocation.app
hearst.madhive.com
Certificate
The complete raw certificate details for amnotify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQBGca2yXM2cufL3+bGHz4XzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MjUwMDAwMDBaFw0xOTEwMjUx MjAwMDBaMBcxFTATBgNVBAMTDGFtbm90aWZ5LmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKbqeh8sAmNMgdjCEdNtfWenZTyAIb5pWHppmJuXGi5J soL2nzGqGSx2MUjIG8H6hOmqimNSWfm2+LrUCu7UpxAZewKQmNy1eDNehF+o7n+B GCrg65eVTeQkX4h3LaagacNiOvtFE4r6EIw5WX6P/ajoeK+O/m/5YoVecT9w0sdV LEitsiXXS85IM6HPjZhmOb+UHkndEivc9xlnPIq+qCnTIkLeiLCu/HoTieaos8ym AGA2U5kyqRxmOP3jMxZXrdKefuMgsM/CEYt8wcjMfL5opXxGSVojwBTU5zSFjqD1 kYjT1z7mYFX7smQdYtKnHLJ1NrIuisH7N7CEe5aajscCAwEAAaOCAncwggJzMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTctv8lxhQW THzvs04HZcDBV96bRTAXBgNVHREEEDAOggxhbW5vdGlmeS5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQEgfEA 7wB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZhFL61QAAAQD AEcwRQIhAPTC0YwMVcCxIGk2624VlANoiszLT/9FWC2lB/D/qWnfAiBk2cGNQ5nX mly2V6HRlXvAW7ZGXMDDW0pSDoFFjGV3nAB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2 /0q1YMG06v9eoIMPAAABZhFL7DMAAAQDAEYwRAIgdX751oIqqSpinfmOd43Jooe2 /AGSoOuNWKFjWEO4qtcCIEeCBfZo4+3QX6uFxWS3eQfGm1xaWXRPspL3o9ksTrnw MA0GCSqGSIb3DQEBCwUAA4IBAQBc1F5fVDbk3bO5SxWyEasTkLViD7HJ/omhhQJr QJjAN/lDp7IRRjnFSdnznWcMcyZeCErOlGr8kBwbJ6R4JpsSTavK6hVbiIONThAZ E/FFr8pRiwenaylRX8meSMdMvn+hF6bVVGr4oX8nOxce/2iJ+IeW1XBr1jZnrDhQ amE1IO8eZCXeaD0MImKQ+3g2+JrE28bZX3L8LIl8b2dMPG1Om+MVF3rNmxNjxOP/ CIickuZkMh/4exG4PRLVQE/LktG+Qre4/nYzW8lN3oQjhrr3smgCnfXl4dyiYdVi vqx+N/yqY6HAZuWLGSCcwD9oerHISK5aCSAg0Fzk0T4tF+eD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApup6HywCY0yB2MIR0219 Z6dlPIAhvmlYemmYm5caLkmygvafMaoZLHYxSMgbwfqE6aqKY1JZ+bb4utQK7tSn EBl7ApCY3LV4M16EX6juf4EYKuDrl5VN5CRfiHctpqBpw2I6+0UTivoQjDlZfo/9 qOh4r47+b/lihV5xP3DSx1UsSK2yJddLzkgzoc+NmGY5v5QeSd0SK9z3GWc8ir6o KdMiQt6IsK78ehOJ5qizzKYAYDZTmTKpHGY4/eMzFlet0p5+4yCwz8IRi3zByMx8 vmilfEZJWiPAFNTnNIWOoPWRiNPXPuZgVfuyZB1i0qccsnU2si6Kwfs3sIR7lpqO xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5852263264884631044952333628240361567 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amnotify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21071183561275751218139036501662227406384108734015470777188217630624665060080170080284355621068610543923003863896328991020687451744141356102339873760625773873497725218637477081401393924134196178318858772516001298289790799723820307062675711085494023738894140380381793856531927178969589869376728893370219772898683817035584943610807521044333264062089431012492029361980898349461441566901971316727960046045261611287759117710584466583727974973510642636652396523907043019547238604291468389698832045719730387740018458213857284315672727666084162134147551429984463087839700970423244395396123896005740996598694023786170978832071 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dcb6ff25c614164c7cefb34e0765c0c157de9b45 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amnotify.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166114beb540000040300473045022100f4c2d18c0c55c0b1206936eb6e159403688acccb4fff45582da507f0ffa969df022064d9c18d4399d79a5cb657a1d1957bc05bb6465cc0c35b4a520e81458c65779c0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166114bec3300000403004630440220757ef9d6822aa92a629df98e778dc9a287b6fc0192a0eb8d58a1635843b8aad70220478205f668e3edd05fab85c564b77907c69b5c5a59744fb292f7a3d92c4eb9f0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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