*.voxpopme.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0e:d3:a2:c9:c1:9c:f2:b1:81:c6:f6:ad:38:0f:c0:43 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.voxpopme.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:d3:a2:c9:c1:9c:f2:b1:81:c6:f6:ad:38:0f:c0:43Serial Number (int): 19708068313276473198507238142413619267
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2d:00:76:64:e3:17:fb:ad:2a:6d:62:21:cf:75:85:54:ec:34:89:30
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 16:4b:4c:9e:0d:21:61:b7:94:68:a9:3f:8f:13:84:37:2b:e2:3a:10
Fingerprint (sha256): 38:dc:d9:c5:71:59:55:41:8c:b9:8a:9c:5a:50:f8:bd:c6:26:66:95:71:dd:3f:a3:60:5f:e2:a0:fa:b3:8b:96
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.voxpopme.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.voxpopme.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.voxpopme.com
Other certificates including the domain name voxpopme.com
(limited to 100 certificates)
resources.voxpopme.com
web-stage.voxpopme.com
*.stage-eu.voxpopme.com
voxpopme.com
blog.voxpopme.com
content.voxpopme.com
qna.fi
opinions.voxpopme.com
site.voxpopme.com
work.idenfit.com
bomrelmohan.com.np
*.voxpopme.com
developer.voxpopme.com
site-test2.voxpopme.com
developer.voxpopme.com
content.voxpopme.com
resources.voxpopme.com
*.voxpopme.com
blog.voxpopme.com
www.metrogroup.team
*.stage-eu.voxpopme.com
site.voxpopme.com
*.voxpopme.com
voxpopme.com
voxpopme.com
smartrider.urbanmania.app
nvor.net
zendesk.translationexchange.com
*.voxpopme.com
*.voxpopme.com
zendesk.translationexchange.com
content.voxpopme.com
blog.voxpopme.com
app.tpcm-usa.com
*.voxpopme.com
content.voxpopme.com
*.voxpopme.com
webprofy.uz
www.bravespetits.com
*.voxpopme.systems
courthousebuys.com
unfoldingstories.app
survey.voxpopme.com
*.eu.voxpopme.com
is.voxpopme.com
www.giftofcrafttoronto.ca
voxpopme.com
api.voxpopme.com
blog.voxpopme.com
*.voxpopme.systems
www.netanel.io
*.voxpopme.com
*.voxpopme.com
*.eu.voxpopme.com
resources.voxpopme.com
www.jgds.org
dashboard.voxpopme.com
blog.voxpopme.com
content-staging.voxpopme.com
*.voxpopme.com
*.stage-eu.voxpopme.com
resources.voxpopme.com
content.voxpopme.com
voxpopme.com
api.voxpopme.com
survey.voxpopme.com
voxpopme.com
*.voxpopme.com
bez-dzieci.pl
blog.voxpopme.com
*.voxpopme.systems
resources.voxpopme.com
*.stage-eu.voxpopme.com
*.voxpopme.com
opinions.voxpopme.com
content.voxpopme.com
is.voxpopme.com
voxpopme.com
opinions.voxpopme.com
voxpopme.com
*.eu.voxpopme.com
web-stage.voxpopme.com
bundy.me
resources.voxpopme.com
opinions.voxpopme.com
*.voxpopme.com
*.voxpopme.systems
signin.statusfy.com
content.voxpopme.com
blog.voxpopme.com
dev.ylboisestate.app
site-test.voxpopme.com
content.voxpopme.com
www.urbancivic.in
juniperfencing.co.uk
site-test.voxpopme.com
*.utility.voxpopme.com
www.tinichats.com
content.voxpopme.com
web-stage.voxpopme.com
web-stage.voxpopme.com
*.stage-eu.voxpopme.com
voxpopme.com
blog.voxpopme.com
content.voxpopme.com
qna.fi
opinions.voxpopme.com
site.voxpopme.com
work.idenfit.com
bomrelmohan.com.np
*.voxpopme.com
developer.voxpopme.com
site-test2.voxpopme.com
developer.voxpopme.com
content.voxpopme.com
resources.voxpopme.com
*.voxpopme.com
blog.voxpopme.com
www.metrogroup.team
*.stage-eu.voxpopme.com
site.voxpopme.com
*.voxpopme.com
voxpopme.com
voxpopme.com
smartrider.urbanmania.app
nvor.net
zendesk.translationexchange.com
*.voxpopme.com
*.voxpopme.com
zendesk.translationexchange.com
content.voxpopme.com
blog.voxpopme.com
app.tpcm-usa.com
*.voxpopme.com
content.voxpopme.com
*.voxpopme.com
webprofy.uz
www.bravespetits.com
*.voxpopme.systems
courthousebuys.com
unfoldingstories.app
survey.voxpopme.com
*.eu.voxpopme.com
is.voxpopme.com
www.giftofcrafttoronto.ca
voxpopme.com
api.voxpopme.com
blog.voxpopme.com
*.voxpopme.systems
www.netanel.io
*.voxpopme.com
*.voxpopme.com
*.eu.voxpopme.com
resources.voxpopme.com
www.jgds.org
dashboard.voxpopme.com
blog.voxpopme.com
content-staging.voxpopme.com
*.voxpopme.com
*.stage-eu.voxpopme.com
resources.voxpopme.com
content.voxpopme.com
voxpopme.com
api.voxpopme.com
survey.voxpopme.com
voxpopme.com
*.voxpopme.com
bez-dzieci.pl
blog.voxpopme.com
*.voxpopme.systems
resources.voxpopme.com
*.stage-eu.voxpopme.com
*.voxpopme.com
opinions.voxpopme.com
content.voxpopme.com
is.voxpopme.com
voxpopme.com
opinions.voxpopme.com
voxpopme.com
*.eu.voxpopme.com
web-stage.voxpopme.com
bundy.me
resources.voxpopme.com
opinions.voxpopme.com
*.voxpopme.com
*.voxpopme.systems
signin.statusfy.com
content.voxpopme.com
blog.voxpopme.com
dev.ylboisestate.app
site-test.voxpopme.com
content.voxpopme.com
www.urbancivic.in
juniperfencing.co.uk
site-test.voxpopme.com
*.utility.voxpopme.com
www.tinichats.com
content.voxpopme.com
web-stage.voxpopme.com
Certificate
The complete raw certificate details for *.voxpopme.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIQDtOiycGc8rGBxvatOA/AQzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIyMDAwMDAwMFoXDTIzMTEwMjIzNTk1OVowGTEX MBUGA1UEAwwOKi52b3hwb3BtZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCp4u77QFciOBvdnlujfPzTKmv0D2cupXZU8fp32EfD0pcKj7XS3mSP oCs3QxZtKIiWaZv/eXDW4fgJAkbXzW87ss2YbU0V6Cx7KIHN8/tATQkCaswQOtmu 9oXFfVrVXdVFQvjNvZeF4PnXKmCZodkZqBMkVj6wWxyFYjZLM/DBFYCmqViW2Er7 LhgxkB66NLKmQZ/tUNZ5NXGdAQoIaAosXwiDf6D7Bz5J7ov7V1hvaX5iJwdRk5DW RKgCCRsoiYn0ncTyyL+l1gyPnI62vPQmSuUf81el0EGsZ320HaMRnYhy0/ZLk9My k79IGVDSjZPSQ0rr3shmsOq/dG6JeYbpAgMBAAGjggLmMIIC4jAfBgNVHSMEGDAW gBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQULQB2ZOMX+60qbWIhz3WF VOw0iTAwGQYDVR0RBBIwEIIOKi52b3hwb3BtZS5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYD VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMB Af8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDoPtDaPvUGNTLnVyi8 iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYZwe2/XAAAEAwBHMEUCIBfwAb4/Kzntg1zl mrrKTjAIXozfD7VSOp3T7D+J2rXUAiEAjPRGwJmp/W20UqetB7GhBykLYu9dS2tb BKraKqstWWkAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYZw e3AnAAAEAwBHMEUCIQCCDuDrYfyXbuLcAyAGpsMubBWqfsKQLcyTXE0EyiqSTAIg LIwRdLM8POy4wQ69o/2FCCacSlNtVPEMZtuoMfDVJewAdQC3Pvsk35xNunXyOcW6 WPRsXfxCz3qfNcSeHQmBJe20mQAAAYZwe2/7AAAEAwBGMEQCIFL7woM12DMRb+Mf 996Myo6WSc+Hbg8ziMqJz3YnGpo/AiB2VyBVI+2LzKbf8PhAb8XcHpsjrxbeb2wF Z3l8V2WtnDANBgkqhkiG9w0BAQsFAAOCAQEAAeaJFWzxhRuGmQkcsrvxVQAuwVZ5 1w6EkBF4Xw9l0eWFx7jcvQ7H0p6GkzZTeqTf34e+XV/iiVqO9q9hywSg6EDI+JN7 fNN3zQ3lU8zgx2b6Lfboa9izx/deGIrqmuXtw5FJ8A4mpf1i1aJAelDLAOszdUMl AW9GoeZ8Xeu5gCiHx7SFGUmmKdspcOI2XwP1gKrDPYlF/Xz35Volz1a8BT4EzKlS cuf/m6AeCYzsl1hUZxcdOmaA7wBTZOS4ZGxebscK5G9c2clpXC0sg34AH5uDZp4b oY/yh4+7egq9bKHsR9SI6mOd7RMkJHo/ptx3ytgJhY730hzDFlRGW8H8kQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLu+0BXIjgb3Z5bo3z8 0ypr9A9nLqV2VPH6d9hHw9KXCo+10t5kj6ArN0MWbSiIlmmb/3lw1uH4CQJG181v O7LNmG1NFegseyiBzfP7QE0JAmrMEDrZrvaFxX1a1V3VRUL4zb2XheD51ypgmaHZ GagTJFY+sFschWI2SzPwwRWApqlYlthK+y4YMZAeujSypkGf7VDWeTVxnQEKCGgK LF8Ig3+g+wc+Se6L+1dYb2l+YicHUZOQ1kSoAgkbKImJ9J3E8si/pdYMj5yOtrz0 JkrlH/NXpdBBrGd9tB2jEZ2IctP2S5PTMpO/SBlQ0o2T0kNK697IZrDqv3RuiXmG 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19708068313276473198507238142413619267 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.voxpopme.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21446178629372343810884377999475634431394016233503424604745874858321867384873976883428112511580440152251189790631348842073186176359642718625922849217674368162556979329437956432133963226399245734895286485255399669961662730084929532794617399839039698350440608112045760968027645796193162945009604343702173383027767754572389417841899443337849148945715510347720990788721082988200647314091655149316557446670400754288459818146711406971900643025893583243351103456046633610569380261322553775898186776286058515258887563545484290538177264100227326856660516786647596618134564459528099468531002549342566609600647416855267594831593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d007664e317fbad2a6d6221cf758554ec348930 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voxpopme.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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