api.geddup.com
Issued by Amazon
About this certificate
This digital certificate with serial number 05:8a:8c:62:44:97:4c:ba:29:33:e3:b4:1b:cf:e0:38 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.geddup.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:8a:8c:62:44:97:4c:ba:29:33:e3:b4:1b:cf:e0:38Serial Number (int): 7365524268334714009550017001067372600
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 5f:92:dc:65:b4:01:df:f2:83:a2:7e:b2:9b:27:be:ec:48:67:74:fd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 5f:f2:f7:dd:74:64:65:10:09:98:69:23:84:ab:b2:57:5d:36:71:ff
Fingerprint (sha256): 52:18:42:28:9c:9b:3a:27:ce:60:9d:13:c3:ec:04:10:15:f0:b9:ed:93:42:8d:32:f4:93:f2:1a:5e:fc:86:19
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.geddup.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.geddup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.geddup.com
geddup.accounts.colab.coop
accounts.geddup.com
geddup.attachments.colab.coop
geddup.forms.colab.coop
geddup.colab.coop
attachments.geddup.com
forms.geddup.com
geddup.api.colab.coop
geddup.accounts.colab.coop
accounts.geddup.com
geddup.attachments.colab.coop
geddup.forms.colab.coop
geddup.colab.coop
attachments.geddup.com
forms.geddup.com
geddup.api.colab.coop
Other certificates including the domain name geddup.com
(limited to 100 certificates)
api-staging.geddup.com
forms-staging.geddup.com
geddup.com
attachments.geddup.com
forms.geddup.com
attachments.geddup.com
forms.geddup.com
geddup.com
geddup.com
geddup.com
forms-staging.geddup.com
forms.geddup.com
geddup.com
api-staging.geddup.com
forms-staging.geddup.com
geddup.com
api-sandbox.geddup.com
api-staging.geddup.com
api.geddup.com
api-staging.geddup.com
attachments.geddup.com
geddup.com
www.geddup.com
geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
attachments-staging.geddup.com
api-staging.geddup.com
api-staging.geddup.com
forms-staging.geddup.com
api.geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
api-staging.geddup.com
forms-staging.geddup.com
accounts-staging.geddup.com
api-staging.geddup.com
forms.geddup.com
attachments-staging.geddup.com
api-staging.geddup.com
attachments.geddup.com
geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
forms-staging.geddup.com
attachments.geddup.com
geddup.com
forms-staging.geddup.com
attachments-staging.geddup.com
api-staging.geddup.com
accounts-sandbox.geddup.com
geddup.com
geddup.com
accounts-staging.geddup.com
forms-staging.geddup.com
forms-staging.geddup.com
forms-staging.geddup.com
accounts-staging.geddup.com
api-staging.geddup.com
geddup.com
attachments.geddup.com
accounts-staging.geddup.com
attachments.geddup.com
api.geddup.com
api.geddup.com
attachments-staging.geddup.com
attachments.geddup.com
forms-staging.geddup.com
geddup.com
attachments.geddup.com
forms.geddup.com
attachments.geddup.com
forms.geddup.com
geddup.com
geddup.com
geddup.com
forms-staging.geddup.com
forms.geddup.com
geddup.com
api-staging.geddup.com
forms-staging.geddup.com
geddup.com
api-sandbox.geddup.com
api-staging.geddup.com
api.geddup.com
api-staging.geddup.com
attachments.geddup.com
geddup.com
www.geddup.com
geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
attachments-staging.geddup.com
api-staging.geddup.com
api-staging.geddup.com
forms-staging.geddup.com
api.geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
api-staging.geddup.com
forms-staging.geddup.com
accounts-staging.geddup.com
api-staging.geddup.com
forms.geddup.com
attachments-staging.geddup.com
api-staging.geddup.com
attachments.geddup.com
geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
accounts-staging.geddup.com
forms-staging.geddup.com
attachments.geddup.com
geddup.com
forms-staging.geddup.com
attachments-staging.geddup.com
api-staging.geddup.com
accounts-sandbox.geddup.com
geddup.com
geddup.com
accounts-staging.geddup.com
forms-staging.geddup.com
forms-staging.geddup.com
forms-staging.geddup.com
accounts-staging.geddup.com
api-staging.geddup.com
geddup.com
attachments.geddup.com
accounts-staging.geddup.com
attachments.geddup.com
api.geddup.com
api.geddup.com
attachments-staging.geddup.com
attachments.geddup.com
Certificate
The complete raw certificate details for api.geddup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIQBYqMYkSXTLopM+O0G8/gODANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjYwMDAwMDBaFw0yMDA5MjYx MjAwMDBaMBkxFzAVBgNVBAMTDmFwaS5nZWRkdXAuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA5d6UWNno+KXSI0TCtsrth74GzT1//D9bg+vv4ZnN R83w3D6chXJFeRvrarDNDQQIeV/SU8rwXBvK9Ec+qbOg4h3DUGDNVltSCiP9Yv7u 2is2VCoymoHwf+n1NpxfxTQbJd1SXziE9sYrMvn2bQx1m0tZzQieVt1CZMYbttdo ZM3OaSsWN26L/DsdlkjCBUzDNjRgZprqs1e8BMlZdDdEgW+OOZpBf+4hS9QjhlpZ 99TXGVpJ3QUdyB5uLev4aaGpNjTQaugHTImWk27U6zNdLm0EKFWhLwIzcFATxyvY GaC0snKUKDl3OHK6E6YrFb7bxvXw4OlsLgcUSQm3FctXswIDAQABo4ICRzCCAkMw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFF+S3GW0 Ad/yg6J+spsnvuxIZ3T9MIHYBgNVHREEgdAwgc2CDmFwaS5nZWRkdXAuY29tghpn ZWRkdXAuYWNjb3VudHMuY29sYWIuY29vcIITYWNjb3VudHMuZ2VkZHVwLmNvbYId Z2VkZHVwLmF0dGFjaG1lbnRzLmNvbGFiLmNvb3CCF2dlZGR1cC5mb3Jtcy5jb2xh Yi5jb29wghFnZWRkdXAuY29sYWIuY29vcIIWYXR0YWNobWVudHMuZ2VkZHVwLmNv bYIQZm9ybXMuZ2VkZHVwLmNvbYIVZ2VkZHVwLmFwaS5jb2xhYi5jb29wMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEF BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRy dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVz dC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAB7JiLv8AwqYBLktM7eJ/RTHi+HPHe6AXgRh FUrTO9fy4Opiii13xq0VJK+YiL43nxU7j3O9H/EeAHuEY5m0dW/2FRkZMvkNDZHK IX5F6j7Gx8l1Cm8JcP/g+Jd7hF5vLcNjZp2pL08kugzVmQlEuzuMM8XBRkKth53A 8bYJ3rxqfYE3zExfjKtoOuA2/6okuKLV0AZSNtmRKz5H5j+1Bp6Gp86i/BZzq9dL cpe3p1HCbqQJ5sIqUbaL4DMzvE+fIML61bomcGMaX8WvewL5Es8vJCqDbAI5E/RA z1rXcx/PLFQmyXouAPxL8N+ANSOJSMWEuc18HkHGHXUkdo+P3jw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5d6UWNno+KXSI0TCtsrt h74GzT1//D9bg+vv4ZnNR83w3D6chXJFeRvrarDNDQQIeV/SU8rwXBvK9Ec+qbOg 4h3DUGDNVltSCiP9Yv7u2is2VCoymoHwf+n1NpxfxTQbJd1SXziE9sYrMvn2bQx1 m0tZzQieVt1CZMYbttdoZM3OaSsWN26L/DsdlkjCBUzDNjRgZprqs1e8BMlZdDdE gW+OOZpBf+4hS9QjhlpZ99TXGVpJ3QUdyB5uLev4aaGpNjTQaugHTImWk27U6zNd Lm0EKFWhLwIzcFATxyvYGaC0snKUKDl3OHK6E6YrFb7bxvXw4OlsLgcUSQm3FctX swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7365524268334714009550017001067372600 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.geddup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29018329869929011333432540366770855868033399664184657408122704037840714089423655833474969631155636784663739437132760285247066270355887801454450950141165503240556112098569019372320138212944597097280591198883458054343584797962127187927139979830686827186971241704862062776687838534233275933964372106542172940534930454120433230638154503971323655319184307020236377965317184135964900809710442702682019086942072842957251242173541005895545025243361047981534918716501277056904599422719612788351726207715967707976314404007022181350234433648593739697432313933958672157765285884271343196205365390747314419268916198657593046685619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f92dc65b401dff283a27eb29b27beec486774fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.geddup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddup.accounts.colab.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.geddup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddup.attachments.colab.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddup.forms.colab.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddup.colab.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attachments.geddup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.geddup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddup.api.colab.coop' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001ec988bbfc030a9804b92d33b789fd14c78be1cf1dee805e0461154ad33bd7f2e0ea628a2d77c6ad1524af9888be379f153b8f73bd1ff11e007b846399b4756ff615191932f90d0d91ca217e45ea3ec6c7c9750a6f0970ffe0f8977b845e6f2dc363669da92f4f24ba0cd5990944bb3b8c33c5c14642ad879dc0f1b609debc6a7d8137cc4c5f8cab683ae036ffaa24b8a2d5d0065236d9912b3e47e63fb5069e86a7cea2fc1673abd74b7297b7a751c26ea409e6c22a51b68be03333bc4f9f20c2fad5ba2670631a5fc5af7b02f912cf2f242a836c023913f440cf5ad7731fcf2c5426c97a2e00fc4bf0df8035238948c584b9cd7c1e41c61d7524768f8fde3c