www.stratcare.app
Issued by RapidSSL TLS RSA CA G1
About this certificate
This digital certificate with serial number 0a:e0:81:42:d4:70:ff:8b:17:a6:50:5a:85:db:4f:67 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.stratcare.app
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:e0:81:42:d4:70:ff:8b:17:a6:50:5a:85:db:4f:67Serial Number (int): 14457976179805985667936561050972540775
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 63:ac:d9:ef:f3:7f:7b:4d:78:ef:ae:f5:89:77:e5:42:ce:b4:d9:ff
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38
Fingerprint (sha1): af:2c:9f:3b:f5:12:44:eb:1d:4a:48:78:a6:be:75:60:bf:40:1f:ee
Fingerprint (sha256): 51:dc:f8:0b:3a:0b:70:f9:59:00:29:d7:ef:1a:99:77:3e:44:3e:20:5c:dd:8f:fc:a1:f2:e9:6b:ec:68:92:13
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
Check the revocation status for certificate www.stratcare.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.stratcare.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.stratcare.app
stratcare.app
stratcare.app
Other certificates including the domain name stratcare.app
(limited to 100 certificates)
admin.kco-jo.com
oxoinc.jp
test.company.scholarize.io
assetslake.com
signum.app
staging.app.humancloud.network
api.stratcare.app
sanmarcos.marcafranca.com
api.stratcare.app
api.stratcare.app
www.phomoapp.co
www.mindlifegroup.com
www.mountainactive.com
www.triplan.app
www.thedreamscorp.com
restaurant.tagfut.com
staging.app.humancloud.network
tour-feedback-dev.powerproleasing.com
www.esgrimaplatense.com.ar
muhammadbassio.com
www.stratcare.app
rg.vaihde.io
stratcare.app
trackmate.app
rocketbase.ai
wellcarehospitals.com
3studiophotography.co.za
calisabor.fr
forkwell-kl.com
forkwell-kl.com
www.exterai.com
admin.stratcare.app
api.stratcare.app
admin.sharpnsights.com
stratcare.app
claudiovaccaneo.it
www.collectionbecm2018.com
link.storelink.io
chess.srikavin.me
api.stratcare.app
unidadglobal.org
api.stratcare.app
assetslake.com
www.buddyrecs.com
www.handsomegenius.com.au
www.boldambition.net
www.akylab.com
www.stratcare.app
api.stratcare.app
api.stratcare.app
sanmarcos.marcafranca.com
dicasdecasamento.com.br
www.adastralabs.xyz
staging.streampoll.app
claudiovaccaneo.it
staging.streampoll.app
tour-feedback-dev.powerproleasing.com
api.stratcare.app
api.stratcare.app
oxoinc.jp
test.company.scholarize.io
assetslake.com
signum.app
staging.app.humancloud.network
api.stratcare.app
sanmarcos.marcafranca.com
api.stratcare.app
api.stratcare.app
www.phomoapp.co
www.mindlifegroup.com
www.mountainactive.com
www.triplan.app
www.thedreamscorp.com
restaurant.tagfut.com
staging.app.humancloud.network
tour-feedback-dev.powerproleasing.com
www.esgrimaplatense.com.ar
muhammadbassio.com
www.stratcare.app
rg.vaihde.io
stratcare.app
trackmate.app
rocketbase.ai
wellcarehospitals.com
3studiophotography.co.za
calisabor.fr
forkwell-kl.com
forkwell-kl.com
www.exterai.com
admin.stratcare.app
api.stratcare.app
admin.sharpnsights.com
stratcare.app
claudiovaccaneo.it
www.collectionbecm2018.com
link.storelink.io
chess.srikavin.me
api.stratcare.app
unidadglobal.org
api.stratcare.app
assetslake.com
www.buddyrecs.com
www.handsomegenius.com.au
www.boldambition.net
www.akylab.com
www.stratcare.app
api.stratcare.app
api.stratcare.app
sanmarcos.marcafranca.com
dicasdecasamento.com.br
www.adastralabs.xyz
staging.streampoll.app
claudiovaccaneo.it
staging.streampoll.app
tour-feedback-dev.powerproleasing.com
api.stratcare.app
api.stratcare.app
Certificate
The complete raw certificate details for www.stratcare.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIQCuCBQtRw/4sXplBahdtPZzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx MB4XDTE4MDcxNjAwMDAwMFoXDTIwMDcxNTEyMDAwMFowHDEaMBgGA1UEAxMRd3d3 LnN0cmF0Y2FyZS5hcHAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7 0mZ1j7PARg09p/DgYEdiHwmyiebjGh8BgsB0ZmwZBvkLe6bBeWjpwbUxm1YDLobx xKSK2pqqj5CK4Jb7VVWVhESLx3+Ye7XsHRXeS83WQNHMyNb2VIF8jVEzm2teJzn5 DyqL1WWVoulHV3tOXo0Pu89qLFK0UeesR2mjC5CIv68h/CIkQ8GpK1ygZf/w3ZUS oBFkdlPaJyS0sp2ZDqw7MAt9h473UHYuQJ3oDwa+3znm71mG0R5pkBjDVpgnaMRz eWIbF7PrdZpx2GXEIMikwooa0SiL7Toefy5lSUFwgQQmhY19mNeRJh7nnszax2A7 9o6mgrHG8fbhC8ACbRnjAgMBAAGjggMzMIIDLzAfBgNVHSMEGDAWgBQM22yCSQ9K Zwq4FO56xEhSiOtWODAdBgNVHQ4EFgQUY6zZ7/N/e0147671iXflQs602f8wKwYD VR0RBCQwIoIRd3d3LnN0cmF0Y2FyZS5hcHCCDXN0cmF0Y2FyZS5hcHAwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8E ODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU1JT QUNBRzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEW HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHYGCCsGAQUF BwEBBGowaDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20w PgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNT TFRMU1JTQUNBRzEuY3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSC AWkBZwB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZKG6/NUA AAQDAEYwRAIgcO1AiTWGdJximqAQRXkDbjKUaCYRhXPNGy1MLat6MRgCIAyVNLjt uzuTQMiBBmsaXBC9/yk8lr8lFCnxNZFSbXchAHYAh3W/51l8+IxDmV+9827/Vo1H Vjb/SrVgwbTq/16ggw8AAAFkobr80AAABAMARzBFAiEA7QFqkwTuoaQgCyjVS91h UyNkoE09qrDgez91heSCQvACIGqrGeWT/HFYmKv0w/Ohxk/CPDLcmiod6R0yabQp JfsfAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFkobr87wAA BAMARzBFAiEAmSxdBCXqFn/SC7JP4zqOoaQcOD/IuxwvKS4urWI4XtUCIHdV9uo4 1Tn+aFpOLWREaN9ePM2KwpfrNi22CMGlgT6qMA0GCSqGSIb3DQEBCwUAA4IBAQAC XspPbJizIGUTpRFrDbsHZJsE9bsPE6eW4lFNoia91pAyy3BtOjealVQalHE4b5yM FetM87daoNP4N9My/0lC7V+8Z4f5uPxwRqVBH3T36gs/ze0E4GkqEGC0gIj6Sh/G xC0cHBMLV8uLjGrv+Y66hyUCBKVR0gYd9IxAeRetGbErXJfsht1G63dqFmQ9OqRy ptMwIa4HqUVMO18qAgixPbZLHMaexxKyMCEikWNbkPmV2DGm+oUgVJZaQDuGSpBE 5DMSATX3CYFV/DIN21/+XDKisnSBqEls9GAl6nRQ9k08XOgeL3BJKWZtEnvM8lHn l9dfi6Jbod13YGS49Gzt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9JmdY+zwEYNPafw4GBH Yh8Jsonm4xofAYLAdGZsGQb5C3umwXlo6cG1MZtWAy6G8cSkitqaqo+QiuCW+1VV lYREi8d/mHu17B0V3kvN1kDRzMjW9lSBfI1RM5trXic5+Q8qi9VllaLpR1d7Tl6N D7vPaixStFHnrEdpowuQiL+vIfwiJEPBqStcoGX/8N2VEqARZHZT2icktLKdmQ6s OzALfYeO91B2LkCd6A8Gvt855u9ZhtEeaZAYw1aYJ2jEc3liGxez63WacdhlxCDI pMKKGtEoi+06Hn8uZUlBcIEEJoWNfZjXkSYe557M2sdgO/aOpoKxxvH24QvAAm0Z 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14457976179805985667936561050972540775 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stratcare.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23710315249626740554023247316203968247587824399462907222944413185349777049351773948503702238511117311622572804664404899461225805902978536513147239177262541111088631021221173544825143557403633960909243744737163222938993200237822145297961558493818162130423201672697903297649830302669012883102010540917604350454235630647444859821500934229146496666511051532422276470357790357167417366197365114538871388600571588829995917728123183500478140647100670403585025137963573710627492662722317044696652340666868082802329709611016324598419025381102656655760830746893661090652856533199968793291033205337889194539426245539268026767843 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63acd9eff37f7b4d78efaef58977e542ceb4d9ff . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stratcare.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratcare.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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