csa-assessment.crossover.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:57:d4:26:03:99:ac:5b:7d:cb:ed:fd:30:8e:91:28 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=csa-assessment.crossover.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:57:d4:26:03:99:ac:5b:7d:cb:ed:fd:30:8e:91:28Serial Number (int): 8431400684022409551898139017427718440
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ec:32:b6:cf:f0:3b:4d:8a:28:a9:f6:80:e4:33:4e:83:4c:f2:a8:2c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d8:7d:76:bd:54:3f:b5:7e:11:9a:9d:13:18:96:cd:bd:ef:e2:83:ee
Fingerprint (sha256): 48:8c:7f:65:1c:5e:ac:5f:2c:3b:ab:5c:75:14:31:8b:db:d4:5f:dd:bc:68:a7:58:97:45:59:da:8f:f0:41:a2
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate csa-assessment.crossover.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for csa-assessment.crossover.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
csa-assessment.crossover.com
stage.csa-assessment.crossover.com
stage.csa-assessment.crossover.com
Other certificates including the domain name crossover.com
(limited to 100 certificates)
www.crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
support.engineyard.com
www.crossover.com
cs.crossover.com
crossover.com
status.biznessapps.com
san-7-s11.tlsprovisioning.exacttarget.com
www.crossover.com
*.chat.crossover.com
support.versata.com
classichelp.kayako.com
san-7-s11.tlsprovisioning.exacttarget.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
blog.crossover.com
support.engineyard.com
groove.ehlinks.com
groove.simondata.com
cs.crossover.com
crossover.com
cs.crossover.com
*.crossover.com
support.crossover.com
crossover.com
crossover.com
www.crossover.com
groove.robinpowered.com
www.crossover.com
get.crossover.com
crossover.com
support.infinio.com
crossover.com
groove.swivl.com
groove.lyric.com
www.crossover.com
groove.kiva.org
crossover.com
crossover.com
crossover.com
*.chat.crossover.com
groove.ehlinks.com
*.crossover.com
support.engineyard.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
classichelp.kayako.com
groove.jebbit.com
*.crossover.com
groove.jebbit.com
classichelp.kayako.com
supportsurvey.versata.com
groove.adpearance.com
support.engineyard.com
crossover.com
crossover.com
api-qa.crossover.com
www.crossover.com
groove.cloudleaf.io
supportsurvey.zephyrtel.com
*.crossover.com
blog.crossover.com
www.crossover.com
crossover.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
classichelp.kayako.com
supportsurvey.cardinal-mark.com
*.crossover.com
cs.crossover.com
groove.kiva.org
san-7-s11.tlsprovisioning.exacttarget.com
www.pre-prod-1.crossover.com
status.biznessapps.com
crossover.com
groove.trustarc.com
cs.crossover.com
support.cardinal-mark.com
crossover.com
csa-assessment.crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
www.crossover.com
branded.grooveapp.com
groove.g2.com
groove.uber.com
crossover.com
centralsupporttest.crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
support.engineyard.com
pre-prod-1.crossover.com
blog.crossover.com
*.crossover.com
crossover.com
cs.crossover.com
support.engineyard.com
www.crossover.com
crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
support.engineyard.com
www.crossover.com
cs.crossover.com
crossover.com
status.biznessapps.com
san-7-s11.tlsprovisioning.exacttarget.com
www.crossover.com
*.chat.crossover.com
support.versata.com
classichelp.kayako.com
san-7-s11.tlsprovisioning.exacttarget.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
blog.crossover.com
support.engineyard.com
groove.ehlinks.com
groove.simondata.com
cs.crossover.com
crossover.com
cs.crossover.com
*.crossover.com
support.crossover.com
crossover.com
crossover.com
www.crossover.com
groove.robinpowered.com
www.crossover.com
get.crossover.com
crossover.com
support.infinio.com
crossover.com
groove.swivl.com
groove.lyric.com
www.crossover.com
groove.kiva.org
crossover.com
crossover.com
crossover.com
*.chat.crossover.com
groove.ehlinks.com
*.crossover.com
support.engineyard.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
classichelp.kayako.com
groove.jebbit.com
*.crossover.com
groove.jebbit.com
classichelp.kayako.com
supportsurvey.versata.com
groove.adpearance.com
support.engineyard.com
crossover.com
crossover.com
api-qa.crossover.com
www.crossover.com
groove.cloudleaf.io
supportsurvey.zephyrtel.com
*.crossover.com
blog.crossover.com
www.crossover.com
crossover.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
classichelp.kayako.com
supportsurvey.cardinal-mark.com
*.crossover.com
cs.crossover.com
groove.kiva.org
san-7-s11.tlsprovisioning.exacttarget.com
www.pre-prod-1.crossover.com
status.biznessapps.com
crossover.com
groove.trustarc.com
cs.crossover.com
support.cardinal-mark.com
crossover.com
csa-assessment.crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
www.crossover.com
branded.grooveapp.com
groove.g2.com
groove.uber.com
crossover.com
centralsupporttest.crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
support.engineyard.com
pre-prod-1.crossover.com
blog.crossover.com
*.crossover.com
crossover.com
cs.crossover.com
support.engineyard.com
www.crossover.com
crossover.com
san-7-s11.tlsprovisioning.exacttarget.com
crossover.com
Certificate
The complete raw certificate details for csa-assessment.crossover.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEsjCCA5qgAwIBAgIQBlfUJgOZrFt9y+39MI6RKDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMTAwMDAwMDBaFw0yMTAzMTAx MjAwMDBaMCcxJTAjBgNVBAMTHGNzYS1hc3Nlc3NtZW50LmNyb3Nzb3Zlci5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHovoI6qgUpUE0D0MhBPU rYgFLemQ3jwOqPfvlhNFiinnQSEo71gRlk5+tY7JfEghtH7g6WVa3YDoGu65dXlZ oniandRQw/CHrVH+JwDRm9e0ZYVs0nmPGE8joQgsaWPjAvTVNk4EcIebvYhiPbzx LTzlPGNy6oA2TWdxl15C7R90OoV6zW/IK8BbKAKcyIp+e31TaueelYS14dJ+mqus 188Pqe85w+pVnI4Es6zJ+/GHvfcgu2WSGUxPlNFb6NbjREeNyPgeDKjJKHvQlZ1T kax8InDaE+GWVOrW9Vgtlj/zBJiUnALx5DaP9jFaS6WIagpebvl+pzV2L7BnkQ2h AgMBAAGjggG5MIIBtTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd BgNVHQ4EFgQU7DK2z/A7TYooqfaA5DNOg0zyqCwwSwYDVR0RBEQwQoIcY3NhLWFz c2Vzc21lbnQuY3Jvc3NvdmVyLmNvbYIic3RhZ2UuY3NhLWFzc2Vzc21lbnQuY3Jv c3NvdmVyLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFeGQiQm6UfdY/ +OCRSIQFTyM7l9L2u7A8d1XerJzfgj6XVe6Z88UU0rRk2sUdezB+tdKop5itzITi e/01S26X6B+Gpp3lf9BdpQALzaIBFjt3OOWDgF+4CxVYBaETGZlXcEhJBcEug5Sh 5d8yPwBUzVVqfx30TdEQo9iO3+7GqgEgeS3xdruVFp7zSMZK4uSgQ5kLMuSD+CD1 cVL+dywRxnfJINxWwzkCGxPuXBeg3oSWEeavu9yYNsD7yap9an1L7wINVkYGUca+ YjNiq6EBsi43aBAxo4k2gdX2Ce4ePGgXw/XgAy3k8+YV4AKqo78yw4pk6F9P0ylz ss0uHmu4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh6L6COqoFKVBNA9DIQT 1K2IBS3pkN48Dqj375YTRYop50EhKO9YEZZOfrWOyXxIIbR+4OllWt2A6BruuXV5 WaJ4mp3UUMPwh61R/icA0ZvXtGWFbNJ5jxhPI6EILGlj4wL01TZOBHCHm72IYj28 8S085TxjcuqANk1ncZdeQu0fdDqFes1vyCvAWygCnMiKfnt9U2rnnpWEteHSfpqr rNfPD6nvOcPqVZyOBLOsyfvxh733ILtlkhlMT5TRW+jW40RHjcj4HgyoySh70JWd U5GsfCJw2hPhllTq1vVYLZY/8wSYlJwC8eQ2j/YxWkuliGoKXm75fqc1di+wZ5EN oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8431400684022409551898139017427718440 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csa-assessment.crossover.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21475574890169539067737167333438430187441149954871813874963244331587849637253706687380493839672149931763154556699387365346791205620801006336234033084047001001262519391779226683214150885818206037102197663013353430563740471794374463573664960164524958531682363625820377116430897083879376234739571782137618070225177642456417830405828198131158677803663268370656747964087106039624075076542600999480128072121315837814660327103974884652057867943309965526109081257455323395802047691697187747008233791369275765524297634405990604406820115833836165000039266630183660579194461071349097807899866945774700851381345846080620339465633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec32b6cff03b4d8a28a9f680e4334e834cf2a82c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa-assessment.crossover.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.csa-assessment.crossover.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0005786422426e947dd63ff8e0914884054f233b97d2f6bbb03c7755deac9cdf823e9755ee99f3c514d2b464dac51d7b307eb5d2a8a798adcc84e27bfd354b6e97e81f86a69de57fd05da5000bcda201163b7738e583805fb80b155805a11319995770484905c12e8394a1e5df323f0054cd556a7f1df44dd110a3d88edfeec6aa0120792df176bb95169ef348c64ae2e4a043990b32e483f820f57152fe772c11c677c920dc56c339021b13ee5c17a0de849611e6afbbdc9836c0fbc9aa7d6a7d4bef020d56460651c6be623362aba101b22e37681031a3893681d5f609ee1e3c6817c3f5e0032de4f3e615e002aaa3bf32c38a64e85f4fd32973b2cd2e1e6bb8