web-master.outreach-staging.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:74:0e:ad:de:2e:96:77:b3:9a:d5:57:03:c5:21:4b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web-master.outreach-staging.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:74:0e:ad:de:2e:96:77:b3:9a:d5:57:03:c5:21:4b
Serial Number (int): 8577972139268094664566463346554249547
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d1:e2:a2:ef:31:64:84:bc:3c:f5:19:8d:18:52:2e:c0:37:95:1e:91
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3e:2c:38:e7:ae:29:5e:37:c6:c9:37:a6:fb:35:93:22:91:b8:31:71
Fingerprint (sha256): 3e:97:02:0c:e7:ce:93:fd:ef:00:89:28:77:01:eb:40:66:90:75:a0:c0:76:a4:7f:f5:d7:de:31:eb:83:0a:73

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate web-master.outreach-staging.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web-master.outreach-staging.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web-master.outreach-staging.com

Other certificates including the domain name outreach-staging.com

(limited to 100 certificates)
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
cdn.outreach-staging.com
carspa.app
summit.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
staging1c.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
marketplace.outreach-staging.com
id.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
vanity.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
id.outreach-staging.com
deploytestservice-staging1a.outreach-staging.com
web.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
login-master.outreach-staging.com
www.sppetroleum.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
telefork.staging1a.outreach-staging.com
controlplane.outreach-staging.com
storage.outreach-staging.com
staging2.outreach-staging.com
login-master.outreach-staging.com
outlook.outreach-staging.com
staging1c.outreach-staging.com
id.outreach-staging.com
staging1c.outreach-staging.com
staging1c.outreach-staging.com
staging2b.oats.outreach-staging.com
deploytestservice-ngb-ss2-us-east-2.outreach-staging.com
keycloak.outreach-staging.com
deploytestservice-canary-ngb-ss2-us-east-2.outreach-staging.com
sidebar.outreach-staging.com
europeapp.wingchan.net
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
round1.io
staging1a.outreach-staging.com
plan-master-orca.outreach-staging.com
deploytestservice-staging1c.outreach-staging.com
deploytestservice-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-gs-us-east-2.outreach-staging.com
staging1a.outreach-staging.com
staging1c.outreach-staging.com
staging1c.outreach-staging.com
deploytestservice-stable-ngb-ss2-us-east-2.outreach-staging.com
deploytestservice-ngb-ss2-us-east-2.outreach-staging.com
id.us-east-2.outreach-staging.com
deploytestservice-stable-staging2b.outreach-staging.com
oidctester.outreach-staging.com
accounts.outreach-staging.com
developers.outreach-staging.com
rolling.vi.outreach-staging.com
summit.outreach-staging.com
deploytestservice-stable-ngb-gs-us-east-2.outreach-staging.com
staging1a.outreach-staging.com
unleash.outreach-staging.com
staging1a.outreach-staging.com
developers.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
deploytestservice-canary-ngb-ops1-us-west-2.outreach-staging.com
www.lifebits.app
deploytestservice-canary-staging1a.outreach-staging.com
cdn.outreach-staging.com
id.outreach-staging.com
deploytestservice-stable-ngb-ops1-us-west-2.outreach-staging.com
id.outreach-staging.com
controlplane.outreach-staging.com
www.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com
id.outreach-staging.com
staging1a.outreach-staging.com
api.outreach-staging.com
staging1c.outreach-staging.com
outlook.outreach-staging.com
staging1a.outreach-staging.com
deploytestservice-stable-staging1a.outreach-staging.com
staging1a.outreach-staging.com
plan-staging.outreach-staging.com
deploytestservice-ngb-gs-us-east-2.outreach-staging.com
developer-master.outreach-staging.com
web-master.outreach-staging.com
deploytestservice-canary-ngb-gs-us-east-2.outreach-staging.com
www.outreach-staging.com
uat.panel.elfedu.pl
www.penelopepennybooks.com
staging1a.outreach-staging.com
developer.outreach-staging.com
id.us-east-2.outreach-staging.com
kaia-slack.staging1a.outreach-staging.com
api2.outreach-staging.com
accounts.outreach-staging.com
web.outreach-staging.com

Certificate

The complete raw certificate details for web-master.outreach-staging.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgIQBnQOrd4ulnezmtVXA8UhSzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDIyNDAwMDAwMFoXDTI0MDExNjIzNTk1OVowKjEo
MCYGA1UEAxMfd2ViLW1hc3Rlci5vdXRyZWFjaC1zdGFnaW5nLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBANAaDRpmhZhPqy2CZZJ1vtzmYfQkdAD8
tqVHANuNc0T3U5IsSQR7Ha7Jb3913nE0ZOWNz4FZxYjeADM9N9eVAcVX6AQrGH3F
anTZOfEyN774RUwfavAekPpO5CBC8glANSSDNpw7RlrAwLRylXOSGTiTV4hYthnq
pQymJS/ee3G1zqT8+vBAesY6K0alN8mlcV61htg9KLfyeelDno2D1P0r807Ha1id
R6HkDvuLlBPvyPk2Eypct4T72vo9TXoFSWeW4DVWT2NLceCbxe6z1oNljR2TaQy2
/oFLYsxN7NDghLoioYeozyzPHnjepvkeKImy6EtPPR5edwElWQbnn6sCAwEAAaOC
AvgwggL0MB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQW
BBTR4qLvMWSEvDz1GY0YUi7AN5UekTAqBgNVHREEIzAhgh93ZWItbWFzdGVyLm91
dHJlYWNoLXN0YWdpbmcuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5y
Mm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJt
MDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAx
LmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/m
Z0xaOnQAAAGGgipS7gAABAMARzBFAiEAw+BGkY6uLzAJBq++vfkEOvfHULraUb8W
7rC2MZk1uEICIHVHLTl41n3r8OJxx6rAqPPw/OwPHc/l5KnF03sD4+YXAHcAc9me
iRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGGgipTIAAABAMASDBGAiEA
s0MYKkO6o06jdCpWjpRgmPMTwm6ODrB/b9Wz8v1puEUCIQCMjhssvm/4aemUEoae
9SB1hkNJF8M6Nh5lD3G+fLWmHgB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABhoIqUuQAAAQDAEYwRAIgQEcJ2uPdPwNFVw4q97hbO4NS3x3Kw5V4
HlySyFByIYsCIFkvfRqjeTQTelclAcTjx4A6zNIaFS0LCSxhgYSZ4etjMA0GCSqG
SIb3DQEBCwUAA4IBAQAg9UTRJUMz5AA/AJ97k1J9kGg6oFIYsjAoS87QJ+6X91Xu
4HEIPbO++bCn8Avof7EyGGS0q80lci58KreX92TGhdla3E1IniU9fyYc5nvZ21Uv
LFgcLZOYIxASZthdNusT2HWbaY1y/6arp9aFP7n9Q86wR5rA9rUKsQrkegsTcGZr
vEd81YSyvrtHNv9hKM7/YJ3YTEw071Z9yEXHKAd+jSToZbIZ1NettzhU2XOjW49+
iiYhtuSm9Pn4f/soeLxuJwlldDGzQ/LSbd9K6oK7jbbrf6doAvhDpNv24O1J6nRN
TV86erLNlLiOb1lbfAuX/wmUPfecKX9SXaRktsxH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BoNGmaFmE+rLYJlknW+
3OZh9CR0APy2pUcA241zRPdTkixJBHsdrslvf3XecTRk5Y3PgVnFiN4AMz0315UB
xVfoBCsYfcVqdNk58TI3vvhFTB9q8B6Q+k7kIELyCUA1JIM2nDtGWsDAtHKVc5IZ
OJNXiFi2GeqlDKYlL957cbXOpPz68EB6xjorRqU3yaVxXrWG2D0ot/J56UOejYPU
/SvzTsdrWJ1HoeQO+4uUE+/I+TYTKly3hPva+j1NegVJZ5bgNVZPY0tx4JvF7rPW
g2WNHZNpDLb+gUtizE3s0OCEuiKhh6jPLM8eeN6m+R4oibLoS089Hl53ASVZBuef
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8577972139268094664566463346554249547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web-master.outreach-staging.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26270413750603440618769312689706658990524562279976066987919902491979989876522262230690003253433928598067876707583072287272686633013123043591073685813353832191411978706003844720283589454942466487457814779220296745907470579460996837742316639591631500338825712583512307776496851591401818379969989893134320572434078673010246796033702400798251321010858055218630158476151833033633180147713836038853569131095885698390431205168534481128071723521290201519897609358285676226184453181572503951227719781745718884768170895309405290481464431614117313423364580922110431139211531927007648375458633173790368085709298955060603966169003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1e2a2ef316484bc3cf5198d18522ec037951e91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-master.outreach-staging.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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