*.beta.inrix.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:cb:4d:bb:67:5e:e4:56:12:d7:c6:d9:43:2a:fe:ff was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.beta.inrix.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:cb:4d:bb:67:5e:e4:56:12:d7:c6:d9:43:2a:fe:ffSerial Number (int): 11689436821759441663854095456459751167
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d7:55:6b:d3:13:18:49:6b:8a:c7:ae:16:25:e6:df:36:d8:35:59:4a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 35:c2:65:a5:d7:f3:7d:a9:66:39:c4:83:a0:93:f1:a0:c9:8f:2e:53
Fingerprint (sha256): 39:3d:1c:6a:c5:23:c6:cc:1a:b5:9f:74:d9:8d:3e:0e:11:c1:46:02:33:b7:14:51:99:33:da:99:64:f9:2a:89
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.beta.inrix.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.beta.inrix.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.beta.inrix.com
Other certificates including the domain name inrix.com
(limited to 100 certificates)
tts-eu.inrix.com
xfer.inrix.com
partner.inrix.com
*.mobile.inrix.com
www2.inrix.com
www.parkme.com
*.qa.inrix.com
fusion.inrix.com
*.mobile.inrix.com
*.stg.inrix.com
*.qa.inrix.com
partner.inrix.com
*.api.inrix.com
Base.inrix.com
api.iq.inrix.com
*.inrix.com
*.inrix.com
base-beta.inrix.com
*.api.inrix.com
*.beta.inrix.com
tfs.inrix.com
*.beta.inrix.com
www.parkme.com
*.beta.inrix.com
www2.inrix.com
*.stg.inrix.com
marketing.inrix.com
*.beta.inrix.com
*.api.inrix.com
fusion.inrix.com
exchange.inrix.com
*.api.inrix.com
www.parkme.com
*.inrix.com
email.inrix.com
xfer.inrix.com
inrix.com
inrix.com
*.beta.inrix.com
fusion.inrix.com
fordapi.inrix.com
www.parkme.com
*.beta.inrix.com
fusion.inrix.com
*.qa.inrix.com
*.inrix.com
analytics.inrix.com
tpegconnectbeu.inrix.com
fusion.inrix.com
*.beta.inrix.com
*.qa.inrix.com
tpegconnectbna.inrix.com
partner.inrix.com
*.beta.inrix.com
inrix.com
marketing.inrix.com
*.mobile.inrix.com
*.demo.inrix.com
eu-tpeg.inrix.com
*.beta.inrix.com
*.inrix.com
api.iq.inrix.com
www.parkme.com
www.parkme.com
*.qa.inrix.com
tts-eu.inrix.com
*.beta.inrix.com
marketing.inrix.com
fordapi.inrix.com
*.inrix.com
www.parkme.com
www.parkme.com
www.parkme.com
*.inrix.com
email.inrix.com
*.demo.inrix.com
Base.inrix.com
*.inrix.com
*.stg.inrix.com
*.beta.inrix.com
inrix.com
www.parkme.com
bugs.inrix.com
parkme.com
www.inrix.com
www.parkme.com
ha.inrix.com
api.mobile.inrix.com
Base.inrix.com
www.parkme.com
api.mobile.inrix.com
bugs.inrix.com
*.inrix.com
www2.inrix.com
exchange.inrix.com
*.beta.inrix.com
*.beta.inrix.com
*.stg.inrix.com
*.stg.inrix.com
*.inrix.com
xfer.inrix.com
partner.inrix.com
*.mobile.inrix.com
www2.inrix.com
www.parkme.com
*.qa.inrix.com
fusion.inrix.com
*.mobile.inrix.com
*.stg.inrix.com
*.qa.inrix.com
partner.inrix.com
*.api.inrix.com
Base.inrix.com
api.iq.inrix.com
*.inrix.com
*.inrix.com
base-beta.inrix.com
*.api.inrix.com
*.beta.inrix.com
tfs.inrix.com
*.beta.inrix.com
www.parkme.com
*.beta.inrix.com
www2.inrix.com
*.stg.inrix.com
marketing.inrix.com
*.beta.inrix.com
*.api.inrix.com
fusion.inrix.com
exchange.inrix.com
*.api.inrix.com
www.parkme.com
*.inrix.com
email.inrix.com
xfer.inrix.com
inrix.com
inrix.com
*.beta.inrix.com
fusion.inrix.com
fordapi.inrix.com
www.parkme.com
*.beta.inrix.com
fusion.inrix.com
*.qa.inrix.com
*.inrix.com
analytics.inrix.com
tpegconnectbeu.inrix.com
fusion.inrix.com
*.beta.inrix.com
*.qa.inrix.com
tpegconnectbna.inrix.com
partner.inrix.com
*.beta.inrix.com
inrix.com
marketing.inrix.com
*.mobile.inrix.com
*.demo.inrix.com
eu-tpeg.inrix.com
*.beta.inrix.com
*.inrix.com
api.iq.inrix.com
www.parkme.com
www.parkme.com
*.qa.inrix.com
tts-eu.inrix.com
*.beta.inrix.com
marketing.inrix.com
fordapi.inrix.com
*.inrix.com
www.parkme.com
www.parkme.com
www.parkme.com
*.inrix.com
email.inrix.com
*.demo.inrix.com
Base.inrix.com
*.inrix.com
*.stg.inrix.com
*.beta.inrix.com
inrix.com
www.parkme.com
bugs.inrix.com
parkme.com
www.inrix.com
www.parkme.com
ha.inrix.com
api.mobile.inrix.com
Base.inrix.com
www.parkme.com
api.mobile.inrix.com
bugs.inrix.com
*.inrix.com
www2.inrix.com
exchange.inrix.com
*.beta.inrix.com
*.beta.inrix.com
*.stg.inrix.com
*.stg.inrix.com
*.inrix.com
Certificate
The complete raw certificate details for *.beta.inrix.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIQCMtNu2de5FYS18bZQyr+/zANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MTMwMDAwMDBaFw0yMTA1MTMx MjAwMDBaMBsxGTAXBgNVBAMMECouYmV0YS5pbnJpeC5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDLI5+rJUodkDXucamsABoZNCleO+96CLsmSrhD PLZHzziQx3sGCFKcDUB3fdWFlQuKIDk/2+kWdrZ+PEqkx+uiyhUjv9jpB/e8fMIF j2nvGJaUhb/2XMdiDeHC/Fk9AdcJ8WZAnKQ1WtajKpUp4BOV0XH5FYZW+SU3CfeT 7Nff1AjnrrggQoxpVznxy3e5tAnEz17J35nf0dUL2moNimKlyE4ke4Gn26ZL7J4I FehqJvrVp3BN10YSlfr2r3JMAYSgKnMcHOsI/OMh3cECkXE/Jz+1KWhef+r9W4QS V8zWwql8gZtN/D8AeVw2ytRJLORoZ1AOmf3DU6sgyH4OhjKFAgMBAAGjggJ9MIIC eTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU11Vr 0xMYSWuKx64WJebfNtg1WUowGwYDVR0RBBQwEoIQKi5iZXRhLmlucml4LmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBQYKKwYBBAHWeQIE AgSB9gSB8wDxAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFx dKAKzQAABAMARzBFAiAPaxe8gK31wsT8p4FTZ6NtkhTRFh8J57ZTnqa0cAa8iAIh ANn2BVLlFYQN3cwFrPt+67GascJQpIJG6ieLtpdOoiKeAHcAXNxDkv7mq0VEsV6a 1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFxdKALFwAABAMASDBGAiEAiYODeIMGaDS2 JwbastBnMR4EnrArkzsHh3Zgi/3dkmMCIQDNzWt+p23M7MXX+/aOhmjo8bwdPqwt VJ61uQXw3i1ogzANBgkqhkiG9w0BAQsFAAOCAQEAW/Ulv1d7UvAPT3KTGCMH4I5z 2RwxMqo1laJxEBNIhlFJml9+HXyWPGrZYmdUqIkCOUZBh9BZSkqsmNxjoFi+me0E y090DQrwGJKVyjAn6Htzn7Unw5xiX92DNcoeACYGh0didUw9SCoPaVL7m4xRYBtX kxDI2AzTHsjRcsRMlLYS7SuVwuS9AfmjZdrhL9v9YM64cMmtwi9DI0ZRtpFIl827 M2Q/qSmlIH6q2OTvoSM5nU+sDWS8ibl5aEtez6WYNDSP1I53nkH+K35OXbiJwrLs YtOSu12CYOSSxZY1tT87P5vzfN4eHWgTKjM8aT1boAcd77ma9pcFZbWIJOg/pA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyOfqyVKHZA17nGprAAa GTQpXjvvegi7Jkq4Qzy2R884kMd7BghSnA1Ad33VhZULiiA5P9vpFna2fjxKpMfr osoVI7/Y6Qf3vHzCBY9p7xiWlIW/9lzHYg3hwvxZPQHXCfFmQJykNVrWoyqVKeAT ldFx+RWGVvklNwn3k+zX39QI5664IEKMaVc58ct3ubQJxM9eyd+Z39HVC9pqDYpi pchOJHuBp9umS+yeCBXoaib61adwTddGEpX69q9yTAGEoCpzHBzrCPzjId3BApFx Pyc/tSloXn/q/VuEElfM1sKpfIGbTfw/AHlcNsrUSSzkaGdQDpn9w1OrIMh+DoYy hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11689436821759441663854095456459751167 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.beta.inrix.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25643942611876638423135874948959980477541925965533524494596164709280258233308120011267564058679213691577041090268428960632306061506738040825370550728505700287142951312779051893154109237858068363725600826656867927836486710392979546028824620367313898816972131567637439902681411648709104525363080261684645694321589068028345107155625462281874151988120900370228436338097108224030830284778153951827888936336313264504050942400972793119454215632695093229566145946278187361683663385115675904747353348150463114112717943438919674282182499830947390570848703703436981640464497755012646607281364637199004084781176716308927274693253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7556bd31318496b8ac7ae1625e6df36d835594a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.inrix.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017174a00acd000004030047304502200f6b17bc80adf5c2c4fca7815367a36d9214d1161f09e7b6539ea6b47006bc88022100d9f60552e515840dddcc05acfb7eebb19ab1c250a48246ea278bb6974ea2229e0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017174a00b1700000403004830460221008983837883066834b62706dab2d067311e049eb02b933b078776608bfddd9263022100cdcd6b7ea76dccecc5d7fbf68e8668e8f1bc1d3eac2d549eb5b905f0de2d6883 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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