carfilmapp.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:98:2b:57:93:ca:e5:dd:9c:4f:99:da:35:6b:6b:8c was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=carfilmapp.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:98:2b:57:93:ca:e5:dd:9c:4f:99:da:35:6b:6b:8cSerial Number (int): 15411616158334049133522401465207581580
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ac:bb:d6:2b:d7:f5:03:18:48:df:fa:a2:8a:3e:cf:aa:43:98:ec:29
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 41:a1:62:ca:27:13:36:9b:41:b6:9a:b3:63:c2:d1:8b:eb:5d:c3:71
Fingerprint (sha256): 46:df:76:69:36:80:fc:7b:4e:ba:a7:70:0e:a6:45:cb:3d:b4:70:27:f0:25:c2:e1:2e:c1:9d:94:41:57:fa:54
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate carfilmapp.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for carfilmapp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
carfilmapp.com
*.carfilmapp.com
*.carfilmapp.com
Other certificates including the domain name carfilmapp.com
(limited to 100 certificates)
support.combativewingchun.com
carfilmapp.com
subscriptions.mitustudio.ca
support.hadisoufan.com
support.carfilmapp.com
support.combativewingchun.com
support.wooplugs.com
subscriptions.ezarmskeeper.com
help.wardhelp.co.za
support.carfilmapp.com
carfilmapp.com
my.amigoz.pro
subscriptions.scyllatechnologies.com
subscriptions.scyllatechnologies.com
vidbud.com
support.combativewingchun.com
subscriptions.scyllatechnologies.com
subscriptions.jollywagger.com
subscriptions.smarthomeassurance.com
carfilmapp.com
member.nomadinternet.com
subscriptions.scyllatechnologies.com
support.combativewingchun.com
support.combativewingchun.com
subscriptions.agri-companies.live
carfilmapp.com
billing.docnowmd.com
support.lifeforceharmonizer.com
support.primedomain.net
support.combativewingchun.com
subscriptions.entice-design.com
support.carfilmapp.com
support.carfilmapp.com
carfilmapp.com
subscriptions.artchiv.ist
support.carfilmapp.com
support.tracthai.com
subscriptions.scyllatechnologies.com
carfilmapp.com
customer.smartweb.net.au
support.carfilmapp.com
support.solbox.it
support.combativewingchun.com
support.catprep.com
subscriptions.scyllatechnologies.com
subscriptions.smarthomeassurance.com
subscriptions.scyllatechnologies.com
suscripciones.g-logistica.com
support.combativewingchun.com
subscriptions.docmosquito.com
support.carfilmapp.com
vidbud.com
subscriptions.drsofa.com
subscriptions.scyllatechnologies.com
subscriptions.inboxignite.com
support.lifeforceharmonizer.com
service.myamax.com
support.carfilmapp.com
support.lifeforceharmonizer.com
subscriptions.scyllatechnologies.com
basicsubscription.360privacy.com
support.combativewingchun.com
support.carfilmapp.com
subscriptions.techcompanyinc.net
support.combativewingchun.com
subscriptions.scyllatechnologies.com
support.catprep.com
subscribe.strong.supplies
support.lucidsystems.io
billing.datastrive.com
billing.xcc.co.za
support.carfilmapp.com
helpdesk.autorabit.com
subscriptions.trezi.com
subscriptions.drsofa.com
support.carfilmapp.com
subscriptions.breatheasyfilters.ca
subscriptions.scyllatechnologies.com
support.combativewingchun.com
carfilmapp.com
subscriptions.arubaitoindia.com
subscriptions.agri-companies.live
account.timeandmaterial.com
subscriptions.bpaccountingsolutions.com
subscriptions.scyllatechnologies.com
support.carfilmapp.com
carfilmapp.com
subscriptions.mitustudio.ca
support.hadisoufan.com
support.carfilmapp.com
support.combativewingchun.com
support.wooplugs.com
subscriptions.ezarmskeeper.com
help.wardhelp.co.za
support.carfilmapp.com
carfilmapp.com
my.amigoz.pro
subscriptions.scyllatechnologies.com
subscriptions.scyllatechnologies.com
vidbud.com
support.combativewingchun.com
subscriptions.scyllatechnologies.com
subscriptions.jollywagger.com
subscriptions.smarthomeassurance.com
carfilmapp.com
member.nomadinternet.com
subscriptions.scyllatechnologies.com
support.combativewingchun.com
support.combativewingchun.com
subscriptions.agri-companies.live
carfilmapp.com
billing.docnowmd.com
support.lifeforceharmonizer.com
support.primedomain.net
support.combativewingchun.com
subscriptions.entice-design.com
support.carfilmapp.com
support.carfilmapp.com
carfilmapp.com
subscriptions.artchiv.ist
support.carfilmapp.com
support.tracthai.com
subscriptions.scyllatechnologies.com
carfilmapp.com
customer.smartweb.net.au
support.carfilmapp.com
support.solbox.it
support.combativewingchun.com
support.catprep.com
subscriptions.scyllatechnologies.com
subscriptions.smarthomeassurance.com
subscriptions.scyllatechnologies.com
suscripciones.g-logistica.com
support.combativewingchun.com
subscriptions.docmosquito.com
support.carfilmapp.com
vidbud.com
subscriptions.drsofa.com
subscriptions.scyllatechnologies.com
subscriptions.inboxignite.com
support.lifeforceharmonizer.com
service.myamax.com
support.carfilmapp.com
support.lifeforceharmonizer.com
subscriptions.scyllatechnologies.com
basicsubscription.360privacy.com
support.combativewingchun.com
support.carfilmapp.com
subscriptions.techcompanyinc.net
support.combativewingchun.com
subscriptions.scyllatechnologies.com
support.catprep.com
subscribe.strong.supplies
support.lucidsystems.io
billing.datastrive.com
billing.xcc.co.za
support.carfilmapp.com
helpdesk.autorabit.com
subscriptions.trezi.com
subscriptions.drsofa.com
support.carfilmapp.com
subscriptions.breatheasyfilters.ca
subscriptions.scyllatechnologies.com
support.combativewingchun.com
carfilmapp.com
subscriptions.arubaitoindia.com
subscriptions.agri-companies.live
account.timeandmaterial.com
subscriptions.bpaccountingsolutions.com
subscriptions.scyllatechnologies.com
support.carfilmapp.com
Certificate
The complete raw certificate details for carfilmapp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEbzCCA1egAwIBAgIQC5grV5PK5d2cT5naNWtrjDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA0MTMwMDAwMDBaFw0xOTA1MTMx MjAwMDBaMBkxFzAVBgNVBAMTDmNhcmZpbG1hcHAuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAwrN0PY7E5ZCPllS6AVKXT0rFOLsVZblQK7wkANvL /48dzOMCwadsu5a1ecDlmjKwjNXpj8fOTK/nKeHf3TnWKRu6H4YD1lnhBwT1g7zS r+YgLddq+3EQey3jKcb1+XXrjDdMAFqZHTvLVfHQcIGSHLhBg3WLLRpSbI4MMBP+ 7HiYv9iza+iLJ/xLDn2kJtHUuTRLihVS6zyjhFVymzTY+Om45vLe9pzgNpzBc2qn xn4PzHFX+nwc8ZaE6Ri2iibZe33IgfqMHVQJl5yFs5A/t7k3+QahA6Us4SG5XEdl a66bnXVf7b6wTXiGlQyc+/SN3KlrwkSBPePJiDN1lASyeQIDAQABo4IBhDCCAYAw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFKy71ivX 9QMYSN/6ooo+z6pDmOwpMCsGA1UdEQQkMCKCDmNhcmZpbG1hcHAuY29tghAqLmNh cmZpbG1hcHAuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAEC MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAw DQYJKoZIhvcNAQELBQADggEBABKmnoFsUXKN2Y5ylwU6kDJyqRCDe5cMzy0AoHD7 HgoJS4kxj1Ru0fztCEdCG1rZxwVg7JSH3SzYUbmzYJZ262K8adOKEaH2EHEhLRIc 1PWS6gx41IkjQeNWh8mAvAxmOW7rbmZsrhQ24BtUbbRgUImxTJ7eOOX6hAfnqZtP YI94gLbHFxL5qhEIN9yRcAAUKTwf2c5nHmVVcwO4Sye6VN96gnfvTezZbO124foD 9+FV+CboRw5hsMcCkBvZyw9ctf47xwJ3bT3HYi9NRPy3Dc/1KeDZu0FAAO1Apns8 2MruOyJ4jciehRerB41YIM88GMBne550kzsfqj0DZJctrAU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrN0PY7E5ZCPllS6AVKX T0rFOLsVZblQK7wkANvL/48dzOMCwadsu5a1ecDlmjKwjNXpj8fOTK/nKeHf3TnW KRu6H4YD1lnhBwT1g7zSr+YgLddq+3EQey3jKcb1+XXrjDdMAFqZHTvLVfHQcIGS HLhBg3WLLRpSbI4MMBP+7HiYv9iza+iLJ/xLDn2kJtHUuTRLihVS6zyjhFVymzTY +Om45vLe9pzgNpzBc2qnxn4PzHFX+nwc8ZaE6Ri2iibZe33IgfqMHVQJl5yFs5A/ t7k3+QahA6Us4SG5XEdla66bnXVf7b6wTXiGlQyc+/SN3KlrwkSBPePJiDN1lASy eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15411616158334049133522401465207581580 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carfilmapp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24578723260665280659726987395191509044604419197538342802308056110573588199854848540841411278757717499644209733912253819797179283254439831904468802016527322903697545917586274013679037673108389951624209765006464475472141116299348560615471914010103646506497892233171138403858206443418732693513758064572376301601644946514175761830309131817579332525292245306594829628293073652754547761310404214453598454724450299816890161080988240759326606561270081579042976259234990514138253702382530832429525421542066752029797726650931053473846261060842505172888351001328430178662065074889209930335999558108386640375375878967165756682873 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acbbd62bd7f5031848dffaa28a3ecfaa4398ec29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carfilmapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carfilmapp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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