*.test5.singapore.swig.gy
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0f:b5:49:31:d4:f4:28:20:03:ba:b4:7d:9b:df:c7:34 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.test5.singapore.swig.gy
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:b5:49:31:d4:f4:28:20:03:ba:b4:7d:9b:df:c7:34Serial Number (int): 20879710232155561132549590784948553524
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6d:1e:b6:64:eb:94:62:f2:d5:bc:dd:c0:ed:dc:d3:66:0a:4a:de:62
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): ea:1c:7d:78:63:a9:f4:e7:e5:93:7c:aa:15:e9:4e:84:6c:a3:e6:65
Fingerprint (sha256): 46:b5:64:81:99:c3:f7:bd:4c:ed:11:4f:8b:0d:a5:33:15:23:63:3d:cc:bf:23:dc:56:ef:a3:27:c2:8f:c9:46
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.test5.singapore.swig.gy
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test5.singapore.swig.gy
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.test5.singapore.swig.gy
*.test5.singapore-a.swig.gy
*.test5.singapore-b.swig.gy
*.test5.singapore-c.swig.gy
*.test5.singapore-a.swig.gy
*.test5.singapore-b.swig.gy
*.test5.singapore-c.swig.gy
Other certificates including the domain name swig.gy
(limited to 100 certificates)
*.foodgrowth.singapore.swig.gy
*.eh5.singapore.swig.gy
swig.gy
*.satyam0212.singapore.swig.gy
*.ozonedlm23.singapore.swig.gy
*.mobi.singapore.swig.gy
*.restest04.singapore.swig.gy
*.hptest1.singapore.swig.gy
*.dashserv01.singapore.swig.gy
*.ozonedebug.singapore.swig.gy
*.env062.in-west.swig.gy
*.hitl1.singapore.swig.gy
*.dcpod.singapore.swig.gy
*.ordernew.singapore.swig.gy
*.loyaltyen.singapore.swig.gy
*.eh4.singapore.swig.gy
*.swigcenter.singapore.swig.gy
*.ozonem1.singapore.swig.gy
*.ozonedlm22.singapore.swig.gy
*.mob.singapore.swig.gy
*.ddbtest212.singapore.swig.gy
*.mob1.singapore.swig.gy
*.shuttleu1.singapore.swig.gy
*.gpprom1.singapore.swig.gy
*.test5.singapore.swig.gy
*.swig.gy
*.restest05.singapore.swig.gy
swig.gy
*.eh6.singapore.swig.gy
*.qgpsanity.singapore.swig.gy
*.minis.singapore.swig.gy
*.ozonedlm3.singapore.swig.gy
*.hptestdapp.singapore.swig.gy
*.licap.singapore.swig.gy
*.growth.singapore.swig.gy
swig.gy
*.singapore.swig.gy
*.test4.singapore.swig.gy
swig.gy
*.growthx2.singapore.swig.gy
*.test6.singapore.swig.gy
*.testenv1.singapore.swig.gy
*.daran.singapore.swig.gy
*.restest02.in-west.swig.gy
*.d1.ext.singapore.swig.gy
*.moblzn.singapore.swig.gy
*.meate2e.singapore.swig.gy
*.fleetcap.singapore.swig.gy
*.shuttleu71.in-west.swig.gy
*.ozonedlm2.singapore.swig.gy
*.shuttleu71.singapore.swig.gy
*.cap1.singapore.swig.gy
*.test.singapore.swig.gy
swig.gy
*.env053.in-west.swig.gy
swig.gy
*.foodcash.singapore.swig.gy
*.foodfix5.singapore.swig.gy
*.moblz.singapore.swig.gy
*.ozonenew.singapore.swig.gy
*.pric.singapore.swig.gy
*.naradtest.singapore.swig.gy
*.surge.singapore.swig.gy
www.swig.gy
*.ext.singapore.swig.gy
swig.gy
*.eh5.singapore.swig.gy
swig.gy
*.satyam0212.singapore.swig.gy
*.ozonedlm23.singapore.swig.gy
*.mobi.singapore.swig.gy
*.restest04.singapore.swig.gy
*.hptest1.singapore.swig.gy
*.dashserv01.singapore.swig.gy
*.ozonedebug.singapore.swig.gy
*.env062.in-west.swig.gy
*.hitl1.singapore.swig.gy
*.dcpod.singapore.swig.gy
*.ordernew.singapore.swig.gy
*.loyaltyen.singapore.swig.gy
*.eh4.singapore.swig.gy
*.swigcenter.singapore.swig.gy
*.ozonem1.singapore.swig.gy
*.ozonedlm22.singapore.swig.gy
*.mob.singapore.swig.gy
*.ddbtest212.singapore.swig.gy
*.mob1.singapore.swig.gy
*.shuttleu1.singapore.swig.gy
*.gpprom1.singapore.swig.gy
*.test5.singapore.swig.gy
*.swig.gy
*.restest05.singapore.swig.gy
swig.gy
*.eh6.singapore.swig.gy
*.qgpsanity.singapore.swig.gy
*.minis.singapore.swig.gy
*.ozonedlm3.singapore.swig.gy
*.hptestdapp.singapore.swig.gy
*.licap.singapore.swig.gy
*.growth.singapore.swig.gy
swig.gy
*.singapore.swig.gy
*.test4.singapore.swig.gy
swig.gy
*.growthx2.singapore.swig.gy
*.test6.singapore.swig.gy
*.testenv1.singapore.swig.gy
*.daran.singapore.swig.gy
*.restest02.in-west.swig.gy
*.d1.ext.singapore.swig.gy
*.moblzn.singapore.swig.gy
*.meate2e.singapore.swig.gy
*.fleetcap.singapore.swig.gy
*.shuttleu71.in-west.swig.gy
*.ozonedlm2.singapore.swig.gy
*.shuttleu71.singapore.swig.gy
*.cap1.singapore.swig.gy
*.test.singapore.swig.gy
swig.gy
*.env053.in-west.swig.gy
swig.gy
*.foodcash.singapore.swig.gy
*.foodfix5.singapore.swig.gy
*.moblz.singapore.swig.gy
*.ozonenew.singapore.swig.gy
*.pric.singapore.swig.gy
*.naradtest.singapore.swig.gy
*.surge.singapore.swig.gy
www.swig.gy
*.ext.singapore.swig.gy
swig.gy
Certificate
The complete raw certificate details for *.test5.singapore.swig.gy in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEyDCCA7CgAwIBAgIQD7VJMdT0KCADurR9m9/HNDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwNTAwMDAwMFoXDTI1MDEwMjIzNTk1OVowJDEi MCAGA1UEAwwZKi50ZXN0NS5zaW5nYXBvcmUuc3dpZy5neTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAPGcJRmZHmp5Qo1mmgNCd+b47xXqH6aHjKn57Wrh 34A2Bn3eOcbxL2QJBbVC4Ll3cXiGaaO9QFrjPY2bSdCgcp0exCq59I8AtdUvmIJF 8NtVg6kWmlbR2kH5X27fe4x6WqRP8ce8D94c5Y3vC2MUU7Oojqr2zQJk2OorNKGT OxfoHLridcsWu0rj/ng1zrw2+JKhnU+jEwcVk1Eg780fjAHtgm63WrLnZU7a2srB IWx8wdP8criP7CkE1P515HNEVQrKMFzMtuXX1xJ6M9VqL4RJSUkSgGdX3C/j8miP gf/q8yxPTndPsAAlm/vxvylhAFINXBl1FdcI6Kz7fykm0TcCAwEAAaOCAdwwggHY MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBRtHrZk 65Ri8tW83cDt3NNmCkreYjB7BgNVHREEdDByghkqLnRlc3Q1LnNpbmdhcG9yZS5z d2lnLmd5ghsqLnRlc3Q1LnNpbmdhcG9yZS1hLnN3aWcuZ3mCGyoudGVzdDUuc2lu Z2Fwb3JlLWIuc3dpZy5neYIbKi50ZXN0NS5zaW5nYXBvcmUtYy5zd2lnLmd5MBMG A1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5y Mm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAt BggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYG CCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0w My5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEArUV9d2zXdVSWsr6FYOIUE6aJFhul4irHTufKBA4wtBWneO2E e0bMkth0G2MzD7Sju0stBN90L989AWoqyYr2CBa5pyJ4yg6zTrJY6F8q1l2Q3Lei L90s9g0E8Z0k+SJT6j2TSeRn5STJ3p7N/BWelxbicFADKwq4dwCwWiVsuPT23mZ7 b1Gs7kYIga5nxlXrcXhs3dC9xfWKI72vo83d/6KEzPOAil0DX4AuND3Sq8PgLgSF qltHLHNzMmRZoyR1Q/8ExbbkdB7sXXEHdxhP9F4Hufbzzgsl5fLrwPdpgLnZRFGG TKzQ40B+TGlEFcxYrL24gLX53vJh1g9b7TIOnw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZwlGZkeanlCjWaaA0J3 5vjvFeofpoeMqfntauHfgDYGfd45xvEvZAkFtULguXdxeIZpo71AWuM9jZtJ0KBy nR7EKrn0jwC11S+YgkXw21WDqRaaVtHaQflfbt97jHpapE/xx7wP3hzlje8LYxRT s6iOqvbNAmTY6is0oZM7F+gcuuJ1yxa7SuP+eDXOvDb4kqGdT6MTBxWTUSDvzR+M Ae2CbrdasudlTtraysEhbHzB0/xyuI/sKQTU/nXkc0RVCsowXMy25dfXEnoz1Wov hElJSRKAZ1fcL+PyaI+B/+rzLE9Od0+wACWb+/G/KWEAUg1cGXUV1wjorPt/KSbR NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20879710232155561132549590784948553524 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test5.singapore.swig.gy' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30500429427534725636411628506138286045663310791382475545334476877712073986646795971603975488806762772458060771062930754520891722609725718967462615312913223398499404558642187961727087648908894644810751196937489792656474194506512692452470199833361797213953773695544851453979114667104743953695141885784821246329994375171017347019331485149009435595402556962468827955442942046662126728703405988207472936324786835148550375892619277204542536052516754046479248173824235063048340885322101064769460332818040949381389228374568929999121359816566113849979141695674435852339106638453279779360693181222764919538416161972779265478967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d1eb664eb9462f2d5bcddc0eddcd3660a4ade62 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test5.singapore.swig.gy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test5.singapore-a.swig.gy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test5.singapore-b.swig.gy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test5.singapore-c.swig.gy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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