eprocurement.sodic.com
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 01:73:17:70:e0:70:cf:59:cd:16:86:46:4b:48:69:7e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=eprocurement.sodic.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:73:17:70:e0:70:cf:59:cd:16:86:46:4b:48:69:7eSerial Number (int): 1926817572952527714388832704201779582
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: dd:bf:4a:6c:66:a0:59:3b:02:dc:64:2e:c8:86:1f:e0:f4:8e:d2:0a
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 7a:87:3d:22:bf:2f:a5:74:9c:ef:9f:b2:d1:32:7c:57:c1:80:e4:30
Fingerprint (sha256): 50:2d:f9:7f:88:96:19:ee:d4:c2:ec:70:be:b2:ca:46:14:d1:3b:d5:2c:00:a5:14:be:d6:9c:24:52:ee:57:f8
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate eprocurement.sodic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eprocurement.sodic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eprocurement.sodic.com
Other certificates including the domain name sodic.com
(limited to 100 certificates)
servicedesk.oiplans.com
thecube.sodic.com
mail.sodic.com
mail.sodic.com
sodic.com
sodic.com
construction-viewer.sodic.com
thecube.sodic.com
construction-viewer.sodic.com
sodic.com
login.sodic.com
community.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
sodic.com
gosmartapi.sodic.com
mail.sodic.com
construction-viewer.sodic.com
eoi.sodic.com
community.sodic.com
login.sodic.com
thecube.sodic.com
sip.sodic.com
sodic.com
sodic.com
ir.sodic.com
login.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
eprocurement.sodic.com
sodic.com
itservicedesk.sodic.com
strategy.sodic.com
community.sodic.com
construction-viewer.sodic.com
community.sodic.com
eprocurement.sodic.com
sodic.com
integration.sodic.com
sodic.com
construction-viewer.sodic.com
servicedesk.oiplans.com
construction-viewer.sodic.com
servicedesk.oiplans.com
mail.sodic.com
construction-viewer.sodic.com
sodicwebsite.kijamii-dev.com
sodic.com
servicedesk.oiplans.com
sodic.com
sodic.com
login.sodic.com
thecube.sodic.com
sodic.com
sodic.com
imagine.sodic.com
sodic.com
login.sodic.com
eprocurement-prep.sodic.com
community.sodic.com
community.sodic.com
construction-viewer.sodic.com
sodic.com
construction-viewer.sodic.com
login.sodic.com
construction-viewer.sodic.com
sodic.com
plex.signalwarrior.net
community.sodic.com
login.sodic.com
eprocurement-prep.sodic.com
thecube.sodic.com
eoiadmin.sodic.com
sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com
construction-viewer.sodic.com
sodic.com
mail.sodic.com
itservicedesk.sodic.com
strategy.sodic.com
eprocurement.sodic.com
sodic.com
sodic.com
eprocurement.sodic.com
mail.sodic.com
login.sodic.com
gosmartapi.sodic.com
community.sodic.com
eoiadmin.sodic.com
construction-viewer.sodic.com
community.sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com
thecube.sodic.com
mail.sodic.com
mail.sodic.com
sodic.com
sodic.com
construction-viewer.sodic.com
thecube.sodic.com
construction-viewer.sodic.com
sodic.com
login.sodic.com
community.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
sodic.com
gosmartapi.sodic.com
mail.sodic.com
construction-viewer.sodic.com
eoi.sodic.com
community.sodic.com
login.sodic.com
thecube.sodic.com
sip.sodic.com
sodic.com
sodic.com
ir.sodic.com
login.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
eprocurement.sodic.com
sodic.com
itservicedesk.sodic.com
strategy.sodic.com
community.sodic.com
construction-viewer.sodic.com
community.sodic.com
eprocurement.sodic.com
sodic.com
integration.sodic.com
sodic.com
construction-viewer.sodic.com
servicedesk.oiplans.com
construction-viewer.sodic.com
servicedesk.oiplans.com
mail.sodic.com
construction-viewer.sodic.com
sodicwebsite.kijamii-dev.com
sodic.com
servicedesk.oiplans.com
sodic.com
sodic.com
login.sodic.com
thecube.sodic.com
sodic.com
sodic.com
imagine.sodic.com
sodic.com
login.sodic.com
eprocurement-prep.sodic.com
community.sodic.com
community.sodic.com
construction-viewer.sodic.com
sodic.com
construction-viewer.sodic.com
login.sodic.com
construction-viewer.sodic.com
sodic.com
plex.signalwarrior.net
community.sodic.com
login.sodic.com
eprocurement-prep.sodic.com
thecube.sodic.com
eoiadmin.sodic.com
sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com
construction-viewer.sodic.com
sodic.com
mail.sodic.com
itservicedesk.sodic.com
strategy.sodic.com
eprocurement.sodic.com
sodic.com
sodic.com
eprocurement.sodic.com
mail.sodic.com
login.sodic.com
gosmartapi.sodic.com
community.sodic.com
eoiadmin.sodic.com
construction-viewer.sodic.com
community.sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com
Certificate
The complete raw certificate details for eprocurement.sodic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIExjCCA66gAwIBAgIQAXMXcOBwz1nNFoZGS0hpfjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xOTAzMDcwMDAwMDBaFw0yMDAzMDcxMjAwMDBaMCExHzAdBgNVBAMTFmVwcm9j dXJlbWVudC5zb2RpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/BWl/DSsDsvGEgvwK0KV88i4uoEiJYwBLfoGU62hHvOgfoS2U/eUXSVrWC0+7 1HnNlMN9Ov98uDPYr3hXNtYqLU6qciy8tIpqrp2lOYbjaBz3uiGgH01q2evKYt4r 9Vm1nU+mk1zpADJoXh/5UwUAMOC9/kZhFphXCLVrs9/3c/Za+ryH7v3CxHkZy/zf vEQ7uI2ndSjcsLwMMn9SlQolC2XJLnDtQt5luH9NhOCz8MhYf/T+mWpd672EtA1X wypOJ3HPiWGLm10uWv/R4m8U31J02+OrzSJ/AwmCMp6ygEPPfTShdFieGxlyfQDf JobI/zetLaah5JqdHUsm0N75AgMBAAGjggG7MIIBtzAfBgNVHSMEGDAWgBRTyhdZ /GvAAyEvGq7kqqgcglbadTAdBgNVHQ4EFgQU3b9KbGagWTsC3GQuyIYf4PSO0gow IQYDVR0RBBowGIIWZXByb2N1cmVtZW50LnNvZGljLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6Ax oC+GLWh0dHA6Ly9jZHAucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNy bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw JgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD0GCCsGAQUF BzAChjFodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xSU0FDQTIw MTguY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBACirU+Tllrz0UmBLgsuIytnX0VhdlYy9v99Exk/cYDhMbhPVt0N9 JGAEPJHzKve6PeMRQiV3OH68TXaEZm/tI7e0Kbtly1d2GivzZB8JIlVT8qIOohXU GCq6Dmackx/zSOhQFa/rDx0WyBUcc7wxTiZddE2Nzfx6WJaPpG4UFi7RSOMBupwX LqdcjTgdpFwvJXgW5rrjIv6iAzV+JcUyfuopfCLMQ/xmw4jk3uRN/gGeJxCwKDJ4 CQMyuXk09V7CTEULtdGtSS2J0gzYWR1SJdl9erBB1wtmWRNE+0G+40xPZjUaXDWo vCQAp0KG1eM2IFTPgvaLJTDZvFqtATaKYtA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwVpfw0rA7LxhIL8CtCl fPIuLqBIiWMAS36BlOtoR7zoH6EtlP3lF0la1gtPu9R5zZTDfTr/fLgz2K94VzbW Ki1OqnIsvLSKaq6dpTmG42gc97ohoB9NatnrymLeK/VZtZ1PppNc6QAyaF4f+VMF ADDgvf5GYRaYVwi1a7Pf93P2Wvq8h+79wsR5Gcv837xEO7iNp3Uo3LC8DDJ/UpUK JQtlyS5w7ULeZbh/TYTgs/DIWH/0/plqXeu9hLQNV8MqTidxz4lhi5tdLlr/0eJv FN9SdNvjq80ifwMJgjKesoBDz300oXRYnhsZcn0A3yaGyP83rS2moeSanR1LJtDe +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1926817572952527714388832704201779582 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eprocurement.sodic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24114185051980589806484657990729413698959481429949812911864394902355250808102258704286941461315178698779529297072415786655354099026035277686694713653745585221222108611195700139496715039825102361165311538103280974022842431794919529689028938077442339014649131427126077428191874937172084002598180913961059988825796989965737039227636635247728453768318292095461465665380699426988005426021227766981630192600998889186407721901526278924415554493821009362691249854497855367434248577631213156499092651097763511379641614224647173744120361293464939910091210917608682687966991401968255100409421276539002947896950414484820970233593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddbf4a6c66a0593b02dc642ec8861fe0f48ed20a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprocurement.sodic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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