pubmanager-alt.stgapps.verisys.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 01:ad:f7:4e:1a:16:ee:ae:20:09:ad:e6:c8:45:50:df was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=pubmanager-alt.stgapps.verisys.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:ad:f7:4e:1a:16:ee:ae:20:09:ad:e6:c8:45:50:dfSerial Number (int): 2232511295354552886504083113160036575
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: f5:0c:8f:8b:d8:f2:03:de:c6:4c:81:1d:3e:16:1d:28:38:54:8e:a6
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 88:0f:7b:43:fc:29:0b:83:79:46:2b:a0:9a:c0:5f:97:f5:4d:c2:e7
Fingerprint (sha256): 51:b6:e1:32:7d:c2:48:ed:24:90:db:40:eb:e7:73:78:f2:72:ad:24:ac:a3:ba:91:1d:cc:ae:b6:1f:ed:7e:61
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate pubmanager-alt.stgapps.verisys.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pubmanager-alt.stgapps.verisys.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pubmanager-alt.stgapps.verisys.com
Other certificates including the domain name verisys.com
(limited to 100 certificates)
feedback.qualityhosting.de
survey.gradwell.com
*.demo.verisys.com
tls.automattic.com
verisys.com
survey.westernwindowsystems.com
cmap.stgapps.verisys.com
*.corp.verisys.com
supportsurvey.control4.com
surveys.myarg.com
kenexa.verisys.com
surveys.fredmangroup.com
tls.automattic.com
surrogate.omegafamilysurrogates.com
*.verisys.com
*.api.verisys.com
feedback.blackboardinsurance.com
*.apps.verisys.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
beta.verisys.net
*.verisys.com
pubmanager.stgapps.verisys.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
checkmedic-ldh.verisys.com
survey.boomtownroi.com
helpcenter.verisys.com
sftp.verisys.com
helpcenter.verisys.com
feedback.wufoo.com
feedback.blackboardinsurance.com
insights-stage.verisys.com
*.verisys.com
beta.verisys.net
certificates.getfeedback.com
cmap.apps.verisys.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
checkmedic-ldh.sit.verisys.com
forms.comfortkeepers.com
*.verisys.com
enquete.pietervanforeest.nl
supportsurvey.control4.com
*.verisys.com
feedback.liftago.com
*.prod.verisys.com
*.prod.verisys.com
feedback.nanotempertech.com
customdomain.getfeedback.com
survey.faq.rakuten.net
*.dev.verisys.com
sftp.verisys.com
*.dev.verisys.com
survey.faq.rakuten.net
*.verisys.com
*.demo.verisys.com
feedback.icelandair.com
survey.westernwindowsystems.com
dashboard.verisys.net
survey.adstream.com
tls.automattic.com
surveys.fredmangroup.com
sftp.verisys.com
sftp.verisys.com
feedback.auditorservice.com
cm-uw2-dev-chkmdc-app.nsapps.aperturecvo.com
*.verisys.com
surveys.elkay.com
*.corp.verisys.com
www3.verisys.com
survey.faq.rakuten.net
www3.verisys.com
customdomain.getfeedback.com
customerfeedback.surveymonkey.com
feedback.nextdc.com
insights.verisys.com
checkmedic-ldh.dev.verisys.com
feedback.inap.com
feedback.auditorservice.com
pubmanager-alt.stgapps.verisys.com
*.prod.verisys.com
survey.gradwell.com
feedback.nextdc.com
enquete.pietervanforeest.nl
certificates.getfeedback.com
www3.verisys.com
tls.automattic.com
www3.verisys.com
feedback.qualityhosting.de
verisys.com
tls.automattic.com
*.api.verisys.com
*.verisys.com
*.demo.verisys.com
feedback.nanotempertech.com
*.prod.verisys.com
www.verisys.com
getfeedback.wire.com.au
survey.gradwell.com
*.demo.verisys.com
tls.automattic.com
verisys.com
survey.westernwindowsystems.com
cmap.stgapps.verisys.com
*.corp.verisys.com
supportsurvey.control4.com
surveys.myarg.com
kenexa.verisys.com
surveys.fredmangroup.com
tls.automattic.com
surrogate.omegafamilysurrogates.com
*.verisys.com
*.api.verisys.com
feedback.blackboardinsurance.com
*.apps.verisys.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
beta.verisys.net
*.verisys.com
pubmanager.stgapps.verisys.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
checkmedic-ldh.verisys.com
survey.boomtownroi.com
helpcenter.verisys.com
sftp.verisys.com
helpcenter.verisys.com
feedback.wufoo.com
feedback.blackboardinsurance.com
insights-stage.verisys.com
*.verisys.com
beta.verisys.net
certificates.getfeedback.com
cmap.apps.verisys.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
checkmedic-ldh.sit.verisys.com
forms.comfortkeepers.com
*.verisys.com
enquete.pietervanforeest.nl
supportsurvey.control4.com
*.verisys.com
feedback.liftago.com
*.prod.verisys.com
*.prod.verisys.com
feedback.nanotempertech.com
customdomain.getfeedback.com
survey.faq.rakuten.net
*.dev.verisys.com
sftp.verisys.com
*.dev.verisys.com
survey.faq.rakuten.net
*.verisys.com
*.demo.verisys.com
feedback.icelandair.com
survey.westernwindowsystems.com
dashboard.verisys.net
survey.adstream.com
tls.automattic.com
surveys.fredmangroup.com
sftp.verisys.com
sftp.verisys.com
feedback.auditorservice.com
cm-uw2-dev-chkmdc-app.nsapps.aperturecvo.com
*.verisys.com
surveys.elkay.com
*.corp.verisys.com
www3.verisys.com
survey.faq.rakuten.net
www3.verisys.com
customdomain.getfeedback.com
customerfeedback.surveymonkey.com
feedback.nextdc.com
insights.verisys.com
checkmedic-ldh.dev.verisys.com
feedback.inap.com
feedback.auditorservice.com
pubmanager-alt.stgapps.verisys.com
*.prod.verisys.com
survey.gradwell.com
feedback.nextdc.com
enquete.pietervanforeest.nl
certificates.getfeedback.com
www3.verisys.com
tls.automattic.com
www3.verisys.com
feedback.qualityhosting.de
verisys.com
tls.automattic.com
*.api.verisys.com
*.verisys.com
*.demo.verisys.com
feedback.nanotempertech.com
*.prod.verisys.com
www.verisys.com
getfeedback.wire.com.au
Certificate
The complete raw certificate details for pubmanager-alt.stgapps.verisys.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgzCCA2ugAwIBAgIQAa33ThoW7q4gCa3myEVQ3zANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwMzIzNTk1OVowLTEr MCkGA1UEAxMicHVibWFuYWdlci1hbHQuc3RnYXBwcy52ZXJpc3lzLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKVn2SsgkqMel8XgaElZdFrlgQGt Erkg4zgd0mbNzSGwg1msxihmkXbSx9C2mQ9hgV7i8OUNbUOa+s7VEs/FsbmKNTP5 UOwP7Cc9syg8rKJQeT73ICH9l0866s2TFslaQaXp82XjeixA+hWN3OKcfLg1LSx3 v0nc20xCU2xRTIvljhO5Dfw1qVGiKgco2ULI2dkHVtZx3ZkjJjHH0hsWrhXhawcd b0zxZMIbzWwallk4BeKlfqdV7ptU/2yisxS9rTpCyfueFmZIiMKdmes6wKGyZpGZ MNdLlBBRLgzv+unQBAsCR833pm4QHW1XPcy+dyUybpZdkMYTBZZZFVVKNYsCAwEA AaOCAY4wggGKMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1Ud DgQWBBT1DI+L2PID3sZMgR0+Fh0oOFSOpjAtBgNVHREEJjAkgiJwdWJtYW5hZ2Vy LWFsdC5zdGdhcHBzLnZlcmlzeXMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYD VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20v cjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj7MU2W+QLU+ r/N/hkzZmYu6SB7QE+4wOKinqJFrj1P7rAMRpHRJmZVZ0zVK3BIawsWz7j47v6ac 53qtiX/uo5UezKvZQyKqtF9ojtSAqNhnKqVUHbd2E7Jfr0mzmtw5e386LBmXfGPx oNwm/wJ4nIFfCzMDOQxyRb25zLZFsxk+V+S94V8ZO4PtAugg3PlUjvhwqtZoCjQN 7VSzSlLlEX8+/+xdx8iWf3/jsn/0koVL+NkOAM9N85a4RipHqjZqE/Nlv5IZmhbV y+ZVshZkFuN1ecODH3octj9NvLpZSef8L/Ts6a21mfso9Kt8sM7zLalbyZr8OMSi SFFoWXjmuQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWfZKyCSox6XxeBoSVl0 WuWBAa0SuSDjOB3SZs3NIbCDWazGKGaRdtLH0LaZD2GBXuLw5Q1tQ5r6ztUSz8Wx uYo1M/lQ7A/sJz2zKDysolB5PvcgIf2XTzrqzZMWyVpBpenzZeN6LED6FY3c4px8 uDUtLHe/SdzbTEJTbFFMi+WOE7kN/DWpUaIqByjZQsjZ2QdW1nHdmSMmMcfSGxau FeFrBx1vTPFkwhvNbBqWWTgF4qV+p1Xum1T/bKKzFL2tOkLJ+54WZkiIwp2Z6zrA obJmkZkw10uUEFEuDO/66dAECwJHzfembhAdbVc9zL53JTJull2QxhMFllkVVUo1 iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2232511295354552886504083113160036575 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pubmanager-alt.stgapps.verisys.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20880529831795243175402523134627249035766186837291074525275035057464660968642062135729060195471573141229805574478783803835753529340504827747968310476835997563742604722001379182650312693305399892017888545411775014026392764097540553379327243002042167635888344909572992692020083866726526433376582936325379255773640220124902135093196919590359477357512888329569413818450784191176910148363787582250137248328116931716057334540494240977284449310846908545877791061340474187162410871673365074346452814050688353444640209016174357770521425258089272382877220867824617685763186427814650260146022514493011836415511342400588145636747 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f50c8f8bd8f203dec64c811d3e161d2838548ea6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubmanager-alt.stgapps.verisys.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005a3ecc5365be40b53eaff37f864cd9998bba481ed013ee3038a8a7a8916b8f53fbac0311a47449999559d3354adc121ac2c5b3ee3e3bbfa69ce77aad897feea3951eccabd94322aab45f688ed480a8d8672aa5541db77613b25faf49b39adc397b7f3a2c19977c63f1a0dc26ff02789c815f0b3303390c7245bdb9ccb645b3193e57e4bde15f193b83ed02e820dcf9548ef870aad6680a340ded54b34a52e5117f3effec5dc7c8967f7fe3b27ff492854bf8d90e00cf4df396b8462a47aa366a13f365bf92199a16d5cbe655b2166416e37579c3831f7a1cb63f4dbcba5949e7fc2ff4ece9adb599fb28f4ab7cb0cef32da95bc99afc38c4a24851685978e6b9