mi.ftd.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 07:a0:51:b5:c3:ff:b9:0c:7f:ed:54:c2:90:85:b8:18 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mi.ftd.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:a0:51:b5:c3:ff:b9:0c:7f:ed:54:c2:90:85:b8:18Serial Number (int): 10137020743994021265583368810130683928
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 02:1d:19:75:96:64:cd:58:fa:e6:d7:53:a4:4b:fb:7d:0e:93:fb:5a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): ec:60:b1:11:2e:7d:77:4b:ef:32:55:7b:7e:f0:6e:82:13:89:96:b4
Fingerprint (sha256): 49:6b:de:a0:0b:2d:b8:c2:28:f2:23:35:46:ea:02:f1:c6:cf:e5:06:ad:b1:8f:c9:15:e9:c4:d6:c2:e5:54:a3
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate mi.ftd.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mi.ftd.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mi.ftd.com
Other certificates including the domain name ftd.com
(limited to 100 certificates)
testreminders.ftd.com
ftd-proxy.dca.ftd.com
d.eml.ftd.com
www.ftd.com
ordering.ftd.com
www.ftd.com
www.ftd.com
incapsula.com
e.eml.ftd.com
mobile.ftd.com
www.ftd.com
status.igdn.macrometa.io
se.eml.ftd.com
gcp-wildcard-san.gcp.ftdi.com
webcentral.florists.ftd.com
www.skava.com
www.ftd.com
mobile.ftd.com
gcp-wildcard-san.gcp.ftdi.com
reminders.ftd.com
www.ftd.com
pr.ftd.com
partner.ftdi.com
qa.ftd.com
d.eml.ftd.com
ordering.ftd.com
smetrics.ftd.com
t.ftd.com
www.ftd.com
qa.ftd.com
gcp-origin.ftd.com
www.ftd.com
c55.ftdfloristsonline.com
sli-feed.ftd.com
partnergateway-qa01.ftdi.com
gcp-origin.ftd.com
www.ftd.com
giftsenses.com
m.ftd.com
gcp-origin.ftd.com
flowers.ftd.com
www.ftd.com
smetrics.ftd.com
giftsenses.com
mobile.ftd.com
www.ftd.com
testreminders.ftd.com
www.ftd.com
www.ftd.com
gcp-wildcard-san.gcp.ftdi.com
gcp-nonprod1-dev1-proxy.ftdi.com
testreminders.ftd.com
*.ftd.com
www.ftd.com
mobile.ftd.com
incapsula.com
gcp-wildcard-san.gcp.ftdi.com
gcp-wildcard-san.gcp.ftdi.com
www.ftd.com
incapsula.com
smetrics.ftd.com
ordering.ftd.com
d.eml.ftd.com
*.ftd.com
e.eml.ftd.com
incapsula.com
ordering.qa01.ftd.com
m.ftd.com
jccas.prod.ftd.com
tstage.ftd.com
ordering.ftd.com
c55.ftdfloristsonline.com
incapsula.com
qa01.ftd.com
mi.ftd.com
*.ftd.com
www.ftd.com
c55.ftdfloristsonline.com
giftsenses.com
testreminders.ftd.com
d.eml.ftd.com
ordering.florists.ftd.com
reminders.ftd.com
gcp-origin.ftd.com
mobile.ftd.com
testreminders.ftd.com
*.ftd.com
ordering.ftd.com
smetrics.ftd.com
se.eml.ftd.com
www.ftd.com
tpreprod.ftd.com
gcp-origin.ftd.com
www.ftd.com
reminders.ftd.com
www.ftd.com
testreminders.ftd.com
gcp-prod1-front-end.proflowers.com
mpreprod.ftd.com
www.ftd.com
ftd-proxy.dca.ftd.com
d.eml.ftd.com
www.ftd.com
ordering.ftd.com
www.ftd.com
www.ftd.com
incapsula.com
e.eml.ftd.com
mobile.ftd.com
www.ftd.com
status.igdn.macrometa.io
se.eml.ftd.com
gcp-wildcard-san.gcp.ftdi.com
webcentral.florists.ftd.com
www.skava.com
www.ftd.com
mobile.ftd.com
gcp-wildcard-san.gcp.ftdi.com
reminders.ftd.com
www.ftd.com
pr.ftd.com
partner.ftdi.com
qa.ftd.com
d.eml.ftd.com
ordering.ftd.com
smetrics.ftd.com
t.ftd.com
www.ftd.com
qa.ftd.com
gcp-origin.ftd.com
www.ftd.com
c55.ftdfloristsonline.com
sli-feed.ftd.com
partnergateway-qa01.ftdi.com
gcp-origin.ftd.com
www.ftd.com
giftsenses.com
m.ftd.com
gcp-origin.ftd.com
flowers.ftd.com
www.ftd.com
smetrics.ftd.com
giftsenses.com
mobile.ftd.com
www.ftd.com
testreminders.ftd.com
www.ftd.com
www.ftd.com
gcp-wildcard-san.gcp.ftdi.com
gcp-nonprod1-dev1-proxy.ftdi.com
testreminders.ftd.com
*.ftd.com
www.ftd.com
mobile.ftd.com
incapsula.com
gcp-wildcard-san.gcp.ftdi.com
gcp-wildcard-san.gcp.ftdi.com
www.ftd.com
incapsula.com
smetrics.ftd.com
ordering.ftd.com
d.eml.ftd.com
*.ftd.com
e.eml.ftd.com
incapsula.com
ordering.qa01.ftd.com
m.ftd.com
jccas.prod.ftd.com
tstage.ftd.com
ordering.ftd.com
c55.ftdfloristsonline.com
incapsula.com
qa01.ftd.com
mi.ftd.com
*.ftd.com
www.ftd.com
c55.ftdfloristsonline.com
giftsenses.com
testreminders.ftd.com
d.eml.ftd.com
ordering.florists.ftd.com
reminders.ftd.com
gcp-origin.ftd.com
mobile.ftd.com
testreminders.ftd.com
*.ftd.com
ordering.ftd.com
smetrics.ftd.com
se.eml.ftd.com
www.ftd.com
tpreprod.ftd.com
gcp-origin.ftd.com
www.ftd.com
reminders.ftd.com
www.ftd.com
testreminders.ftd.com
gcp-prod1-front-end.proflowers.com
mpreprod.ftd.com
www.ftd.com
Certificate
The complete raw certificate details for mi.ftd.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIQB6BRtcP/uQx/7VTCkIW4GDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUxNzAwMDAwMFoXDTI0MDYxNDIzNTk1OVowFTET MBEGA1UEAxMKbWkuZnRkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2njp6unCuWoxP4fT4PU1oH+TjT22Pu0NQMrfEj90cxMmdokkXzEbQZgWd6 r7mqoUS3x/G9QR/BRAwnfHRlgaetwLuGNpOcT3vKwqejpAP4Whn0bqYR6eHdPMCD 2+zKX/Ag04ugLgyNx0W2ua7JiyTPBexi0HZQU/PGi5imk3M/EHbzmPUO9AnMZtJa ktbHDt19jvGBUIFFwfuJCaHm+3MoLGJV3/gBwPUcFwVVHVsWLbKae9DxNayf7fh6 BneCbYCeGlQPnYBZMcT9QVl0THQXCV+HEkCa3nGFmxCHFEVFvQk1+s63gA3W1dgo d4SV7SdtOy21J7G2ohVRiNo1NokCAwEAAaOCAuIwggLeMB8GA1UdIwQYMBaAFIG4 DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBQCHRl1lmTNWPrm11OkS/t9DpP7 WjAVBgNVHREEDjAMggptaS5mdGQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov L2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAow CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCC AX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA7s3QZNXbGs7FXLedtM0TojKHRny8 7N7DUUhZRnEftZsAAAGIJ6eNYgAABAMARzBFAiEA/jh3v3vuyB4yEAVJ5wiB9t/a L/+NiPNxf8v2btX0YKwCIAkz0/0C7TWSS5ntKq4C58Py3jKovP+XTZd6PmQUcurO AHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGIJ6eNSwAABAMA RjBEAiAzYub5oQY5xp7yd25eRGCMC31zhpevuOxIUy23P4R0AwIgZOEI3PSALdK9 z/1UHZAGJLYzTr65ujb0Iz5ftp+6eM4AdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GE hTS9pD0wSNf7qwAAAYgnp40fAAAEAwBHMEUCIQDw1SOecv1Fcu3b5u5UiYo9/aGm qcZkSedVlUaK1RIFcwIgVQv7X3Oqtz00wMCObdiEWvkMb3YC/oNB0w2wdYUgbxgw DQYJKoZIhvcNAQELBQADggEBANUtI39Imc1OguaikXxciDFe5+WB1oHz8IT9qr9u spNV6sCALmsCrh04wRQ/EVnEdwQb0WiMJKuQDBAg54lq3NyFzeVPaM1LzGj789LN rr2GJcOnLE7OcVH/kwgEkNVML0OSv93vmw2QYL0cxuTMTy6cdfe5IdF28UqO1KJv 994FlFraM38ZQuIXbXsNvqgPCrOfZylXtMAftdwk02GciPBvQq1iMxdf8h5Yf6IO VTa7F9IFaLDmFhM0UCdxCxLaRD7Bo9NvvgjI0tGnv9ePkDpYuIt9tUebTJA/K/v7 SrbEsG0pEYOMJYvltC5v8KxFogqhBbQFgu2thoIanNnF0Mo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaeOnq6cK5ajE/h9Pg9T Wgf5ONPbY+7Q1Ayt8SP3RzEyZ2iSRfMRtBmBZ3qvuaqhRLfH8b1BH8FEDCd8dGWB p63Au4Y2k5xPe8rCp6OkA/haGfRuphHp4d08wIPb7Mpf8CDTi6AuDI3HRba5rsmL JM8F7GLQdlBT88aLmKaTcz8QdvOY9Q70Ccxm0lqS1scO3X2O8YFQgUXB+4kJoeb7 cygsYlXf+AHA9RwXBVUdWxYtspp70PE1rJ/t+HoGd4JtgJ4aVA+dgFkxxP1BWXRM dBcJX4cSQJrecYWbEIcURUW9CTX6zreADdbV2Ch3hJXtJ207LbUnsbaiFVGI2jU2 iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10137020743994021265583368810130683928 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi.ftd.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23941665128426684966818246101297645941661171635992805645400506708815538067546973872384588019700954089152342854120492212480355716947668254453946130311631832025737761983423699032321386672000184383330275351170781926331111035300315754414741908481024022477731427395873198093027968714026812396644307400272779991668467257218753679491560029645404583519079005420690959289270403253404346667715392307969544873487606935838413331525689501976452933475875558046851678201380122929029055987226958139532987977654385305718680864294440127104764991759618927610633015080962987899222936170666711511494653971830291712720775446966637799224969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 021d19759664cd58fae6d753a44bfb7d0e93fb5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.ftd.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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