flugy.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0f:44:05:f1:5b:cb:2c:8d:b3:91:ee:05:c9:5b:b1:bc was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=flugy.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:44:05:f1:5b:cb:2c:8d:b3:91:ee:05:c9:5b:b1:bcSerial Number (int): 20291616657598048801534375981829829052
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e7:71:b7:dc:fe:8b:a9:58:81:e0:e8:26:44:fc:f2:30:83:21:98:4a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 30:c7:79:a8:86:ff:c6:c0:1c:ed:2c:88:10:eb:0e:90:3a:cc:41:69
Fingerprint (sha256): 46:45:99:d7:0e:1b:70:15:4b:91:4f:81:76:dc:a4:97:7c:38:59:29:40:39:64:fe:c6:82:bb:ce:53:74:14:35
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate flugy.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flugy.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flugy.com
*.flugy.com
*.flugy.com
Other certificates including the domain name flugy.com
(limited to 100 certificates)
api.beta.flugy.com
chemineescesar.ru
api.staging.flugy.com
www.finly.net
realmswriter.com
www.flugy.com
my-sale.online
manojkolhe.com
auth.coinvert.me
www.johnnyspizzaky.com
artisedastextiles.com
staging.flugy.com
dconic.com
www.manbropharma.com
api.dev.flugy.com
api.beta.flugy.com
chatroom7.cf
tokka.ipon.biz
www.piiq.app
localify.world
zilina.info
soufiane.co
www.swsround.ru
chabibnurochman.com
tls.automattic.com
shotdb.baobabapi.com
tls.automattic.com
www.newslab.dev
beta.flugy.com
dharanetworks.com
smartlearning-editor.leam.ae
motorista.2gomobility.com
flugy.com
dconic.com
zilina.info
hazrif.beecomm.co.il
tenis-jarocin.com.pl
localify.world
api.flugy.com
l.beerlogger.co
admin.flugy.com
tokka.ipon.biz
merchant.antwallet.ca
jellyplaces.com
athlyts.app
api.staging.flugy.com
www.payment.esk.ng
catalyst2021.com
blog.flugy.com
tls.automattic.com
www.payment.esk.ng
client.melonseed.media
blog.flugy.com
hazrif.beecomm.co.il
auth.coinvert.me
doodle.wiki
delilunch.be
beta.flugy.com
admin.spiffyventures.com
resources.leolh.com
www.firepixels.app
api.staging.flugy.com
flugy.com
assets.dev.flugy.com
resources.leolh.com
motorista.2gomobility.com
app.staging.retorio.com
www.lesamourai.space
zoecomputers.com
app.staging.retorio.com
onlyleaks.tv
www.boto.ninja
smartlearning-editor.leam.ae
api.flugy.com
api.flugy.com
www.flugy.com
www.johnnyspizzaky.com
api.dev.flugy.com
www.finly.net
www.lesamourai.space
www.myproplist.com
cc-staging.donr.ai
api.beta.flugy.com
io9k.cc
tt2.m.tooldesk.app
www.qusic.app
api.beta.flugy.com
flugy.com
tenis-jarocin.com.pl
flugy.com
www.flugy.com
dev.flugy.com
test.flugy.com
dharanetworks.com
fjdevesa.com
www.athlyts.app
*.two.flugy.com
api.dev.flugy.com
api.flugy.com
api.staging.flugy.com
chemineescesar.ru
api.staging.flugy.com
www.finly.net
realmswriter.com
www.flugy.com
my-sale.online
manojkolhe.com
auth.coinvert.me
www.johnnyspizzaky.com
artisedastextiles.com
staging.flugy.com
dconic.com
www.manbropharma.com
api.dev.flugy.com
api.beta.flugy.com
chatroom7.cf
tokka.ipon.biz
www.piiq.app
localify.world
zilina.info
soufiane.co
www.swsround.ru
chabibnurochman.com
tls.automattic.com
shotdb.baobabapi.com
tls.automattic.com
www.newslab.dev
beta.flugy.com
dharanetworks.com
smartlearning-editor.leam.ae
motorista.2gomobility.com
flugy.com
dconic.com
zilina.info
hazrif.beecomm.co.il
tenis-jarocin.com.pl
localify.world
api.flugy.com
l.beerlogger.co
admin.flugy.com
tokka.ipon.biz
merchant.antwallet.ca
jellyplaces.com
athlyts.app
api.staging.flugy.com
www.payment.esk.ng
catalyst2021.com
blog.flugy.com
tls.automattic.com
www.payment.esk.ng
client.melonseed.media
blog.flugy.com
hazrif.beecomm.co.il
auth.coinvert.me
doodle.wiki
delilunch.be
beta.flugy.com
admin.spiffyventures.com
resources.leolh.com
www.firepixels.app
api.staging.flugy.com
flugy.com
assets.dev.flugy.com
resources.leolh.com
motorista.2gomobility.com
app.staging.retorio.com
www.lesamourai.space
zoecomputers.com
app.staging.retorio.com
onlyleaks.tv
www.boto.ninja
smartlearning-editor.leam.ae
api.flugy.com
api.flugy.com
www.flugy.com
www.johnnyspizzaky.com
api.dev.flugy.com
www.finly.net
www.lesamourai.space
www.myproplist.com
cc-staging.donr.ai
api.beta.flugy.com
io9k.cc
tt2.m.tooldesk.app
www.qusic.app
api.beta.flugy.com
flugy.com
tenis-jarocin.com.pl
flugy.com
www.flugy.com
dev.flugy.com
test.flugy.com
dharanetworks.com
fjdevesa.com
www.athlyts.app
*.two.flugy.com
api.dev.flugy.com
api.flugy.com
api.staging.flugy.com
Certificate
The complete raw certificate details for flugy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIQD0QF8VvLLI2zke4FyVuxvDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDExMDAwMDAwMFoXDTI1MDIwODIzNTk1OVowFDES MBAGA1UEAxMJZmx1Z3kuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qCMa+VhmGCIa83Amzx93YDJQOmdvju+tRw5pcHAyQ6uombjbZLQWl7c6U6R uqqO5c1+412WMHWRSpt/ex3mg8+bMCVkEwj1AlGrvR8UOUy1G1g6Bn9yEBaIahAq YpsbpAgE3qQs9kN9sgeTUrs2VosL21F2v2r3cIh52EEMFY+9UoNazCRUIoQkBMft ejv9vy1D2jVBp2tNAkzeX5jbtBN2UBGY/JAXEA3FHW3UOnTsKsxHIGxwpdg+xzQ0 oc/WWeePUJa5rss7VkZd11LDYwBa/0stMBODde6vFEtKEuo5BY6W2gCaAN1mj64H 5H9dagp8RJkhpc7PEUv6YblwZQIDAQABo4IC8DCCAuwwHwYDVR0jBBgwFoAUVdkY X9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFOdxt9z+i6lYgeDoJkT88jCDIZhK MCEGA1UdEQQaMBiCCWZsdWd5LmNvbYILKi5mbHVneS5jb20wEwYDVR0gBAwwCjAI BgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpv bnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB hiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG Kmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNV HRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwBOdaMnXJoQwzhb bNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYzxWuL9AAAEAwBIMEYCIQCeEgzbk/N9 LNRT1kBZ9MAiitgxdcHCyZGPyNOBZdjZ9wIhAL04LH8aXxeq8Hban+noKnxH8DH4 x5LRXiAn3p2hES6pAHcAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgA AAGM8VrjMQAABAMASDBGAiEAjVm4iByIpf0JN/7WuBRYoQw61/fFX4yxJZRqgiaU J9ECIQCvi/9lyqe2aaoh2UO4A1mFu7l0Ouj/Fqk3AsRsVy3ABwB1AObSMWNAd4zB EEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjPFa410AAAQDAEYwRAIgGA9GPVmM OfYyVagXhf4qZLUEQ6tItwfW7P0O2AAT96ECIGY0wmKk5Silhz9kKEMsus3bsovI SbOLg6SsgRYE7xc4MA0GCSqGSIb3DQEBCwUAA4IBAQC0QSLUVq4co0kTjIZoq+2D 5xRwzwGZSBfhrzQEVu74dPHUoT0rkbM1Rny15J2BnNssgB5Dq04Xbrhy1XF6ErYD x/97QoWDsx4E7TWMxC2hrNnHhgP1mCdeVP1qrdSJ/vFi7vNHjvLFJVtxTRttbgWF q1EJO/34o9FlA7JsC3loGfkn3spI9DRYMTBdzmuPv12S2SJa+bVq5OlKXHpt6lrm gjqjo/ilR8fInT5lWQ1Kdn92Mx5zeZKRNGZ48gYDfn7fBIqRBXaNTJtPBqYNL5j3 HKeG2QK7MTciW5LO2RMQkpDtOhZMCSVmCT9xVHm6U8bC0lmi2Ob80S0DGaf2TrXF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qCMa+VhmGCIa83Amzx9 3YDJQOmdvju+tRw5pcHAyQ6uombjbZLQWl7c6U6RuqqO5c1+412WMHWRSpt/ex3m g8+bMCVkEwj1AlGrvR8UOUy1G1g6Bn9yEBaIahAqYpsbpAgE3qQs9kN9sgeTUrs2 VosL21F2v2r3cIh52EEMFY+9UoNazCRUIoQkBMftejv9vy1D2jVBp2tNAkzeX5jb tBN2UBGY/JAXEA3FHW3UOnTsKsxHIGxwpdg+xzQ0oc/WWeePUJa5rss7VkZd11LD YwBa/0stMBODde6vFEtKEuo5BY6W2gCaAN1mj64H5H9dagp8RJkhpc7PEUv6Yblw ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20291616657598048801534375981829829052 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flugy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26589213469441153486026620172966616327286653632199560099431649982979580103714605953551196409625769563558615988962721507526009503046861153460805142523815337053079658115737310407088744039505371053949192011552751648969767248845843317650945330475006819670015502712868975180733717592314084082207343863006196705578193699516238806095617979155304797805023665550433143879564069307535150822361780544091733251120580675081613662216313783878447525210062437945498894454713706740949101540518804469874884133745142271895248658871970973298382707381529085795941947474442273850050264307715172353441080794929763448780956675365377320513637 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e771b7dcfe8ba95881e0e82644fcf2308321984a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flugy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flugy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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