www.tiempometa.com
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 0e:8d:79:bb:73:cc:7b:cd:2e:8d:e4:74:22:1c:10:80 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tiempometa.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:8d:79:bb:73:cc:7b:cd:2e:8d:e4:74:22:1c:10:80Serial Number (int): 19343774821108646568499110253178916992
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fe:f2:4f:f6:e3:92:46:f7:50:52:62:58:75:63:92:6e:c4:78:d9:bd
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 4b:4f:52:c9:8c:5c:5d:87:fc:9e:52:c5:b9:33:f6:3a:db:4a:4e:f5
Fingerprint (sha256): 3a:c4:21:87:4d:3e:bb:af:d0:f5:50:e2:f7:aa:ff:3e:6a:2e:b1:69:9f:9a:9f:52:5c:00:44:84:d9:2d:f4:6b
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate www.tiempometa.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tiempometa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.tiempometa.com
tiempometa.com
tiempometa.com
Other certificates including the domain name tiempometa.com
(limited to 100 certificates)
thelittlesafari.com
casetools.app
rewatchin.com
old.progettochearia.it
www.tiempometa.com
wamiagro.com
www.tiempometa.com
www.salupro.com
www.leastcount.com
owlgrid.com
www.undiscovered.app
www.tiempometa.com
omninautics.net
www.tiempometa.com
we-24.com
modelhouse.tech
aatransportersltd.com
switchdz.com
www.tiempometa.com
casetools.app
app.openlawdocs.com.au
www.cendocs.com
admin.casimir.in
www.tiempometa.com
beta.sugarbird.app
opencall.spotlight.fined.io
www.tiempometa.com
app.kards.fr
www.partypooper.am
www.salupro.com
pi.university
www.tiempometa.com
guessfair.com
kaiboom.app
jumpthetok.app
superadmin.chbg.ca
tiempometa.com
access.optculture.com
premium.lovely.app
blissnector.com
portal.tactilebrain.com
bi-you-salon.com
superadmin.chbg.ca
evnetwork-beta.noodoe.com
saraandsamir.com
virtualapp.tiempometa.com
gestion.taxiar.com.ar
dev.123games.app
demo.sunmooncloud.com
app.openlawdocs.com.au
www.pasokon.club
gestion.taxiar.com.ar
owlgrid.com
www.vetliveveteriner.com
admin.queuer.dev
www.tiempometa.com
evnetwork-beta.noodoe.com
www.tiempometa.com
modelhouse.tech
bnb.ciphernutz.com
kaiboom.app
tiempometa.com
noitadaa.com
beta.sugarbird.app
switchdz.com
virtualapp.tiempometa.com
login.acpl.befitgroup.co.in
demo.sunmooncloud.com
ca.udghosh.org.in
premium.lovely.app
noitadaa.com
casetools.app
rewatchin.com
old.progettochearia.it
www.tiempometa.com
wamiagro.com
www.tiempometa.com
www.salupro.com
www.leastcount.com
owlgrid.com
www.undiscovered.app
www.tiempometa.com
omninautics.net
www.tiempometa.com
we-24.com
modelhouse.tech
aatransportersltd.com
switchdz.com
www.tiempometa.com
casetools.app
app.openlawdocs.com.au
www.cendocs.com
admin.casimir.in
www.tiempometa.com
beta.sugarbird.app
opencall.spotlight.fined.io
www.tiempometa.com
app.kards.fr
www.partypooper.am
www.salupro.com
pi.university
www.tiempometa.com
guessfair.com
kaiboom.app
jumpthetok.app
superadmin.chbg.ca
tiempometa.com
access.optculture.com
premium.lovely.app
blissnector.com
portal.tactilebrain.com
bi-you-salon.com
superadmin.chbg.ca
evnetwork-beta.noodoe.com
saraandsamir.com
virtualapp.tiempometa.com
gestion.taxiar.com.ar
dev.123games.app
demo.sunmooncloud.com
app.openlawdocs.com.au
www.pasokon.club
gestion.taxiar.com.ar
owlgrid.com
www.vetliveveteriner.com
admin.queuer.dev
www.tiempometa.com
evnetwork-beta.noodoe.com
www.tiempometa.com
modelhouse.tech
bnb.ciphernutz.com
kaiboom.app
tiempometa.com
noitadaa.com
beta.sugarbird.app
switchdz.com
virtualapp.tiempometa.com
login.acpl.befitgroup.co.in
demo.sunmooncloud.com
ca.udghosh.org.in
premium.lovely.app
noitadaa.com
Certificate
The complete raw certificate details for www.tiempometa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIQDo15u3PMe80ujeR0IhwQgDANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xODEyMTUwMDAwMDBaFw0xOTEyMTYxMjAwMDBaMB0xGzAZBgNVBAMTEnd3dy50 aWVtcG9tZXRhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO1u 6wCWYQCoRR5MQT1pSScoqRKDB2M12vLnSqEry2T6zbQMTCPTjqGSEhQDm9PFC2vV EtnsNlBdPpHU8l/KX0p0+BoLgMCBfT9fi54rdN62WG0Km9cmTnDaHXYHMBy6mSF3 6YJ2sw6eI/eWzYYwag3AGm72i4bMuDDIezVh0yGTuYCLCXkNTW/zmgruooh6f/Ep p3pmdr0qjcvagTJtoKp5uLCH1FhysOZaJgdhP7GzLiz/f5dRcyN8sb3GhBTpj3Vh d/bkTv2YdCXD1FzNYEvAhaGXm61YO+tgbRk6rWFC9c3u+Z8XcfgsSra4PfSweaX9 wxRfp6kX+AiKDJPb5DcCAwEAAaOCArowggK2MB8GA1UdIwQYMBaAFFPKF1n8a8AD IS8aruSqqByCVtp1MB0GA1UdDgQWBBT+8k/245JG91BSYlh1Y5JuxHjZvTAtBgNV HREEJjAkghJ3d3cudGllbXBvbWV0YS5jb22CDnRpZW1wb21ldGEuY29tMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0f BDcwNTAzoDGgL4YtaHR0cDovL2NkcC5yYXBpZHNzbC5jb20vUmFwaWRTU0xSU0FD QTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEW HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsGAQUF BwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20w PQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNT TFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ7MjzXEAAAQD AEcwRQIhAIimFQE4dPjmVOsjPiqW13hF0XFpuQx3cuyPvKknnmW7AiAunX4WGUHZ w0VJpADytFoDiEm/ia2ZtoWzW/Wu8JqJ1wB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2 /0q1YMG06v9eoIMPAAABZ7Mjzk8AAAQDAEcwRQIgINkxDZeYxqwGyRtzLu8TtLim dJh6a9qpw/6Md9gLsQICIQC85GUg6I46F8YzzNztoyDubbliV1UvSyup4iTFE8/T xDANBgkqhkiG9w0BAQsFAAOCAQEAjs0GYhxncQLHhHR1NkqoTRJILDYardy9CCgy ZxMbtg8iTL0UxGIMlaC129aF802UQ2RZSa/B8lNNiIjHG2Yr4R/2/xzTUO4EVTJv gBkQgai5IRO69nv6POGDkOXt1+QPLEoi0V5srbX85TkNHonJWh7FtJFQPp8WAagx o/VC7nfL/3A+5v//TH52yPjEE4j5O8+wzozsm7NdCqZPNP5vctHqvE2R+W6wn6Ig Lfs/vb8Xl2T4HGW+SF2u3JmXDL6X4e+QjtQGV/g19rszs186R4Ye9Gcx2UBlu40j aH0wwUdgG56pkJNPZQpj3pzmJUTW1zt/aiY8jqn4yLgO6zkujA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W7rAJZhAKhFHkxBPWlJ JyipEoMHYzXa8udKoSvLZPrNtAxMI9OOoZISFAOb08ULa9US2ew2UF0+kdTyX8pf SnT4GguAwIF9P1+Lnit03rZYbQqb1yZOcNoddgcwHLqZIXfpgnazDp4j95bNhjBq DcAabvaLhsy4MMh7NWHTIZO5gIsJeQ1Nb/OaCu6iiHp/8SmnemZ2vSqNy9qBMm2g qnm4sIfUWHKw5lomB2E/sbMuLP9/l1FzI3yxvcaEFOmPdWF39uRO/Zh0JcPUXM1g S8CFoZebrVg762BtGTqtYUL1ze75nxdx+CxKtrg99LB5pf3DFF+nqRf4CIoMk9vk NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19343774821108646568499110253178916992 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tiempometa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29973173970302720713425532243498970035074571939382507220088119881160590043883289003582522554714042433664335148010420420700017884292768892830950965769963247519295719469121991331291605148129157915198195346921097512480184415512617422972804436552956753320481147897059352047034752833981893936712359132373081001642777193477552660147264138169108295121275714767121268850584083764752287209356123316806715073273102371772105286396788415926496339941483986045976531906887692524349805927510427631605537659962251893870761560132660921961128009307671235408641625232143031711224593302343773828944786498377997300708431797251627605025847 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fef24ff6e39246f7505262587563926ec478d9bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiempometa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempometa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167b323cd71000004030047304502210088a615013874f8e654eb233e2a96d77845d17169b90c7772ec8fbca9279e65bb02202e9d7e161941d9c34549a400f2b45a038849bf89ad99b685b35bf5aef09a89d70076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167b323ce4f0000040300473045022020d9310d9798c6ac06c91b732eef13b4b8a674987a6bdaa9c3fe8c77d80bb102022100bce46520e88e3a17c633ccdceda320ee6db96257552f4b2ba9e224c513cfd3c4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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