cecl-staging.nxtsoft.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:32:b2:9e:2f:60:4a:7b:55:c8:ec:8a:bf:11:1c:70 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cecl-staging.nxtsoft.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:32:b2:9e:2f:60:4a:7b:55:c8:ec:8a:bf:11:1c:70Serial Number (int): 10897061610827399686294710309455207536
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 39:dd:b2:8b:cc:4e:26:cd:2d:df:5d:78:c2:c1:89:f1:cd:2c:42:d7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 47:7c:51:cb:92:11:58:f7:e8:40:6b:77:fb:ff:df:2c:71:cf:9a:a7
Fingerprint (sha256): 4a:c0:94:d8:65:c2:6f:83:51:34:db:ec:3d:51:a4:53:ff:a6:63:a5:91:f3:1b:75:5c:2b:0b:20:d7:9c:5f:b6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate cecl-staging.nxtsoft.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cecl-staging.nxtsoft.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cecl-staging.nxtsoft.com
Other certificates including the domain name nxtsoft.com
(limited to 100 certificates)
blog.nxtsoft.com
donorapplication.integgrity.com
info.nxtsoft.com
donorapplication.integgrity.com
nxtsoft.com
blog.nxtsoft.com
partners.nxtsoft.com
form.consultoriaegn.com.br
faq.nxtsoft.com
nxtsoft.com
donorapplication.integgrity.com
referrals.nxtsoft.com
partners.nxtsoft.com
developer.nxtsoft.com
password-exposure.nxtsoft.com
portal.nxtsoft.com
partners.nxtsoft.com
donorapplication.integgrity.com
donorapplication.integgrity.com
www.nxtsoft.com
nxtsoft.com
*.nxtsoft.com
blog.nxtsoft.com
coc.koreachampionship.co.kr
donorapplication.integgrity.com
www.nxtsoft.com
nxtsoft.com
developer.nxtsoft.com
donorapplication.integgrity.com
info.nxtsoft.com
www.nxtsoft.com
nxtsoft.com
donorapplication.integgrity.com
api.nxtsoft.com
www.nxtsoft.com
referrals.nxtsoft.com
blog.nxtsoft.com
info.nxtsoft.com
cecl-staging.nxtsoft.com
secure.uncappedlte.co.za
ground-control.nxtsoft.com
forms.ook.co
developer.nxtsoft.com
blog.nxtsoft.com
partners.nxtsoft.com
nxtsoft.com
*.nxtsoft.com
form.osseointegration.org
www.nxtsoft.com
donorapplication.integgrity.com
www.nxtsoft.com
*.nxtsoft.com
api.nxtsoft.com
donorapplication.integgrity.com
nxtsoft.com
docs.nxtsoft.com
blog.nxtsoft.com
referrals.nxtsoft.com
docs.nxtsoft.com
blog.nxtsoft.com
info.nxtsoft.com
*.nxtsoft.com
donorapplication.integgrity.com
nxtsoft.com
www.nxtsoft.com
www.nxtsoft.com
itglue.nxtsoft.com
cfm.sustain.do
donorapplication.integgrity.com
nxtsoft.com
info.nxtsoft.com
marketplace.nxtsoft.com
www.nxtsoft.com
www.nxtsoft.com
cfm.sustain.do
nxtsoft.com
donorapplication.integgrity.com
blog.nxtsoft.com
api.nxtsoft.com
portal.nxtsoft.com
nxtsoft.com
cecl-staging.nxtsoft.com
developer.nxtsoft.com
donorapplication.integgrity.com
marketplace.nxtsoft.com
donorapplication.integgrity.com
donorapplication.integgrity.com
api-dev.nxtsoft.com
nxtsoft.com
nxtsoft.com
help.nxtsoft.com
www.nxtsoft.com
www.nxtsoft.com
donorapplication.integgrity.com
defi.nxtsoft.com
community.nxtsoft.com
developer.nxtsoft.com
blog.nxtsoft.com
data-breach.nxtsoft.com
forms.apel.com.ng
donorapplication.integgrity.com
info.nxtsoft.com
donorapplication.integgrity.com
nxtsoft.com
blog.nxtsoft.com
partners.nxtsoft.com
form.consultoriaegn.com.br
faq.nxtsoft.com
nxtsoft.com
donorapplication.integgrity.com
referrals.nxtsoft.com
partners.nxtsoft.com
developer.nxtsoft.com
password-exposure.nxtsoft.com
portal.nxtsoft.com
partners.nxtsoft.com
donorapplication.integgrity.com
donorapplication.integgrity.com
www.nxtsoft.com
nxtsoft.com
*.nxtsoft.com
blog.nxtsoft.com
coc.koreachampionship.co.kr
donorapplication.integgrity.com
www.nxtsoft.com
nxtsoft.com
developer.nxtsoft.com
donorapplication.integgrity.com
info.nxtsoft.com
www.nxtsoft.com
nxtsoft.com
donorapplication.integgrity.com
api.nxtsoft.com
www.nxtsoft.com
referrals.nxtsoft.com
blog.nxtsoft.com
info.nxtsoft.com
cecl-staging.nxtsoft.com
secure.uncappedlte.co.za
ground-control.nxtsoft.com
forms.ook.co
developer.nxtsoft.com
blog.nxtsoft.com
partners.nxtsoft.com
nxtsoft.com
*.nxtsoft.com
form.osseointegration.org
www.nxtsoft.com
donorapplication.integgrity.com
www.nxtsoft.com
*.nxtsoft.com
api.nxtsoft.com
donorapplication.integgrity.com
nxtsoft.com
docs.nxtsoft.com
blog.nxtsoft.com
referrals.nxtsoft.com
docs.nxtsoft.com
blog.nxtsoft.com
info.nxtsoft.com
*.nxtsoft.com
donorapplication.integgrity.com
nxtsoft.com
www.nxtsoft.com
www.nxtsoft.com
itglue.nxtsoft.com
cfm.sustain.do
donorapplication.integgrity.com
nxtsoft.com
info.nxtsoft.com
marketplace.nxtsoft.com
www.nxtsoft.com
www.nxtsoft.com
cfm.sustain.do
nxtsoft.com
donorapplication.integgrity.com
blog.nxtsoft.com
api.nxtsoft.com
portal.nxtsoft.com
nxtsoft.com
cecl-staging.nxtsoft.com
developer.nxtsoft.com
donorapplication.integgrity.com
marketplace.nxtsoft.com
donorapplication.integgrity.com
donorapplication.integgrity.com
api-dev.nxtsoft.com
nxtsoft.com
nxtsoft.com
help.nxtsoft.com
www.nxtsoft.com
www.nxtsoft.com
donorapplication.integgrity.com
defi.nxtsoft.com
community.nxtsoft.com
developer.nxtsoft.com
blog.nxtsoft.com
data-breach.nxtsoft.com
forms.apel.com.ng
Certificate
The complete raw certificate details for cecl-staging.nxtsoft.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEezCCA2OgAwIBAgIQCDKyni9gSntVyOyKvxEccDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAzMTYwMDAwMDBaFw0yMzA0MTQy MzU5NTlaMCMxITAfBgNVBAMTGGNlY2wtc3RhZ2luZy5ueHRzb2Z0LmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALkJrriDsVnlJuRj0cIMuTrb/5Po GsxEDt7HxDNX+xOHpyKh9ihsFAchrULbD7VSMUV5VEPPKja4vKjIUayIKOR64/P/ 1wieebxjcHAv/v85mKen3k5pc7tqZF1kZ9lyucsQG1HxAEXgBfQZMStJxEUS8Zrb TpMrYQCEkuyc2xK0WtScLqGKqW9sWWoCbCGyI2f/ZP6/Q8vQFHZsp+ujkMSKAKZ/ OkYVpQmxUheZtIzOyUCrx/WSuxcvdNiWyqT16uIOivmWT59e0wPAjv0mazE5gxfl fpWxrP+hM66NTnozPmSyqBseHWipZMmLmzV74WdsrzXuZmZZs7HK/toNNC0CAwEA AaOCAYYwggGCMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud DgQWBBQ53bKLzE4mzS3fXXjCwYnxzSxC1zAjBgNVHREEHDAaghhjZWNsLXN0YWdp bmcubnh0c29mdC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAEC ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFi LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFbq1D6FphTN9MtrBgoJqbiE DPwWKd2m3JvWUCyDKlYILo6yvX6TKK+9eH8KsGfbn022en30krPS8Hve3kwF9fDR om93gTRwJLn+M70pe/yfIgfFnNnHwdrpgLIrR9yTInRXhrMkcS2xef6ZX3I5Xh8V nWuTKa1ErkGDEdLmuEB5IlOYUgg/bGgad2uleTjKtZXeEJ6hG0guIsox6/LOyo99 JiEjnm6sbv+jE1wsEzPD8D/ajuvhVzNcghyz9VQHcFm0IXTI6U3fLf3YNfQaZZKU jw4EHPuEGyGZ6TD/2mxoKP/qPTXzDF8DOoJXxqj4jB6APJuuzkCkkImF9GKJ0hE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQmuuIOxWeUm5GPRwgy5 Otv/k+gazEQO3sfEM1f7E4enIqH2KGwUByGtQtsPtVIxRXlUQ88qNri8qMhRrIgo 5Hrj8//XCJ55vGNwcC/+/zmYp6feTmlzu2pkXWRn2XK5yxAbUfEAReAF9BkxK0nE RRLxmttOkythAISS7JzbErRa1JwuoYqpb2xZagJsIbIjZ/9k/r9Dy9AUdmyn66OQ xIoApn86RhWlCbFSF5m0jM7JQKvH9ZK7Fy902JbKpPXq4g6K+ZZPn17TA8CO/SZr MTmDF+V+lbGs/6Ezro1OejM+ZLKoGx4daKlkyYubNXvhZ2yvNe5mZlmzscr+2g00 LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10897061610827399686294710309455207536 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cecl-staging.nxtsoft.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23358861038886249891534676488907766781067325698541401347578415364275911560620189969061831800798017333512102460856611040340763153086496611417967308628957041457015483858807901475760016414747646314799362551772001210623475284151142220058358903733742805292874530114703939815654936407340651098524726435879242193247828267521525964028474485364327803316406825973176530039698700569634560554502235961332578815599448230486513701501562657768199008959093930687093072282546057298299209487350965863420956108231690860003266909869961960214751113665015677489961517642156294140454914471945697394550316004141169789985551334535725837005869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 39ddb28bcc4e26cd2ddf5d78c2c189f1cd2c42d7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecl-staging.nxtsoft.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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