pay.schibsted.dk
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0d:69:11:5b:db:98:92:e6:d3:18:6f:de:d7:fa:b2:08 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pay.schibsted.dk
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:69:11:5b:db:98:92:e6:d3:18:6f:de:d7:fa:b2:08Serial Number (int): 17825507194037781724121782365005197832
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 4a:74:5a:21:82:22:ba:f8:ca:e5:a4:03:2a:e1:23:a0:48:d5:25:32
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c8:99:5b:42:d1:91:5b:c8:f0:fe:cd:fb:e1:46:03:33:12:8d:37:69
Fingerprint (sha256): 45:a0:72:d2:dc:32:6e:12:c8:30:30:cc:aa:64:3d:54:61:5e:88:91:c6:cf:fd:b5:d3:8f:6a:67:19:68:ce:09
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate pay.schibsted.dk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pay.schibsted.dk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pay.schibsted.dk
*.pay.schibsted.dk
*.pay.schibsted.dk
Other certificates including the domain name schibsted.dk
(limited to 100 certificates)
*.schibsted.dk
session-service.login.schibsted.dk
login.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
www.schibsted.com
selfservice.login.schibsted.dk
*.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
selfservice.login.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
selfservice.login.schibsted.dk
privacysettings.schibsted.dk
login.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
www.schibsted.com
id.privacysettings.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
*.schibsted.dk
login.schibsted.dk
*.schibsted.dk
ambassador.login.schibsted.dk
session-service.login.schibsted.dk
pay.schibsted.dk
session-service.login.schibsted.dk
*.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
dev.pay.schibsted.dk
*.schibsted.dk
www.schibsted.com
login.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
privacysettings.schibsted.dk
selfservice.login.schibsted.dk
*.schibsted.dk
www.schibsted.com
login.schibsted.com
*.schibsted.dk
*.schibsted.dk
ambassador.login.schibsted.dk
*.schibsted.dk
dev.pay.schibsted.dk
ambassador.login.schibsted.dk
ambassador.login.schibsted.dk
session-service.login.schibsted.dk
id.privacysettings.schibsted.dk
login.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
pay.schibsted.dk
pre.pay.schibsted.dk
session-service.login.schibsted.dk
session-service.login.schibsted.dk
login.schibsted.com
*.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
privacysettings.schibsted.dk
privacysettings.schibsted.dk
id.privacysettings.schibsted.dk
*.schibsted.dk
*.schibsted.dk
session-service.login.schibsted.dk
selfservice.login.schibsted.dk
session-service.login.schibsted.dk
login.schibsted.dk
dev.pay.schibsted.dk
*.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
selfservice.login.schibsted.dk
selfservice.login.schibsted.dk
*.schibsted.dk
www.schibsted.com
ambassador.login.schibsted.dk
login.schibsted.dk
*.schibsted.dk
login.schibsted.com
login.schibsted.dk
www.schibsted.com
session-service.login.schibsted.dk
*.schibsted.dk
login.schibsted.dk
*.login.schibsted.dk
session-service.login.schibsted.dk
ambassador.login.schibsted.dk
pay.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
*.schibsted.dk
pay.schibsted.dk
login.schibsted.dk
session-service.login.schibsted.dk
login.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
www.schibsted.com
selfservice.login.schibsted.dk
*.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
selfservice.login.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
selfservice.login.schibsted.dk
privacysettings.schibsted.dk
login.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
www.schibsted.com
id.privacysettings.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
*.schibsted.dk
login.schibsted.dk
*.schibsted.dk
ambassador.login.schibsted.dk
session-service.login.schibsted.dk
pay.schibsted.dk
session-service.login.schibsted.dk
*.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
dev.pay.schibsted.dk
*.schibsted.dk
www.schibsted.com
login.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
privacysettings.schibsted.dk
selfservice.login.schibsted.dk
*.schibsted.dk
www.schibsted.com
login.schibsted.com
*.schibsted.dk
*.schibsted.dk
ambassador.login.schibsted.dk
*.schibsted.dk
dev.pay.schibsted.dk
ambassador.login.schibsted.dk
ambassador.login.schibsted.dk
session-service.login.schibsted.dk
id.privacysettings.schibsted.dk
login.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
pay.schibsted.dk
pre.pay.schibsted.dk
session-service.login.schibsted.dk
session-service.login.schibsted.dk
login.schibsted.com
*.schibsted.dk
*.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
privacysettings.schibsted.dk
privacysettings.schibsted.dk
id.privacysettings.schibsted.dk
*.schibsted.dk
*.schibsted.dk
session-service.login.schibsted.dk
selfservice.login.schibsted.dk
session-service.login.schibsted.dk
login.schibsted.dk
dev.pay.schibsted.dk
*.schibsted.dk
login.schibsted.dk
ambassador.login.schibsted.dk
selfservice.login.schibsted.dk
selfservice.login.schibsted.dk
*.schibsted.dk
www.schibsted.com
ambassador.login.schibsted.dk
login.schibsted.dk
*.schibsted.dk
login.schibsted.com
login.schibsted.dk
www.schibsted.com
session-service.login.schibsted.dk
*.schibsted.dk
login.schibsted.dk
*.login.schibsted.dk
session-service.login.schibsted.dk
ambassador.login.schibsted.dk
pay.schibsted.dk
selfservice.login.schibsted.dk
ambassador.login.schibsted.dk
*.schibsted.dk
pay.schibsted.dk
login.schibsted.dk
Certificate
The complete raw certificate details for pay.schibsted.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgIQDWkRW9uYkubTGG/e1/qyCDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDYxMzAwMDAwMFoXDTI0MDcxMTIzNTk1OVowGzEZ MBcGA1UEAxMQcGF5LnNjaGlic3RlZC5kazCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKHzWpS6ahX0XhIYpk+7Ry9Ntwa1HZzzNoyOOLMp77+Eav+TMlgH sVu5jPmd15eg/t3Py4gTSjvB1QZnHFM98OH0z99ZGqlMMQbVjBiJuPHHf/heeKdo DXecnQXuZv0nC2TetFeq2yNey4GU/qn4k4hdjw0c4z0O/9dMZJP4UgtdPygKGz/I niCFRs0fnFCPzkTZ0BxzM8y93Ow5cVh6uUArcD+zVPvFRFSMTktKBulC2OnH207E 5gr/1avL/r8u1SCneF0JWrI+BHrbwn0j05YedG4EIlAKhWzMByPEMpVdeq1gyD8/ uFED5pdCGlm0RCZ1sA87w3M+vxhI1tWbk50CAwEAAaOCAZAwggGMMB8GA1UdIwQY MBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRKdFohgiK6+MrlpAMq 4SOgSNUlMjAvBgNVHREEKDAmghBwYXkuc2NoaWJzdGVkLmRrghIqLnBheS5zY2hp YnN0ZWQuZGswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpv bnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1 c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLT4vHi7SXdM0nZtHEq3Lv+CGW8TaEzZDM 9YYNUJhqmH2MsLnccfNG6F7zanNb7v4Wa9bkRMEwD3XY8fdpOJL2OxivNmO551Sw DdYD3d6mhh/Cmb2YA4e1SmDkNC406A4eUTyTaqXwvg35nu5ng9RS8U4275OoXBe+ 1jia/THByn8LsusaDK5yCdHRu0RpMXyl3Sxf1Ybro5JpnOjN7nHjwxqN1Imwu7c1 PEB7hiFCC9/jxaRCGli7e6InCW3t0TY9PBWfgR7WLifr4Ee12NJVMfM0Y+E3ReHy 6nIn5IygNxYSqObjHAPre/E46gb3216wbnDBvAyGeP4jjUG+JkGE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofNalLpqFfReEhimT7tH L023BrUdnPM2jI44synvv4Rq/5MyWAexW7mM+Z3Xl6D+3c/LiBNKO8HVBmccUz3w 4fTP31kaqUwxBtWMGIm48cd/+F54p2gNd5ydBe5m/ScLZN60V6rbI17LgZT+qfiT iF2PDRzjPQ7/10xkk/hSC10/KAobP8ieIIVGzR+cUI/ORNnQHHMzzL3c7DlxWHq5 QCtwP7NU+8VEVIxOS0oG6ULY6cfbTsTmCv/Vq8v+vy7VIKd4XQlasj4EetvCfSPT lh50bgQiUAqFbMwHI8QylV16rWDIPz+4UQPml0IaWbREJnWwDzvDcz6/GEjW1ZuT nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17825507194037781724121782365005197832 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pay.schibsted.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20444369346596215943859373372474929219435498572517101280137096790241080517206850374796752028572050308813732998982370244255060057647896951243349354281720975753160491711200825202471375206534808828009304435017037901311003642659233230737785611636808694375618759050823145337842480407401650599878086349257969601351534045972393357477769402162187619384007068321840851480949688348257039003252115963050641124815356865197499295610981624197945325483788507020266908472055174024199831062694079915082170306758134040333268710372616243614599216699029882930546171339425793054115330092910118447201082255981787033718867861705216996643741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a745a218222baf8cae5a4032ae123a048d52532 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.schibsted.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pay.schibsted.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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