portal.fuego.qa
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:87:ab:e9:04:97:72:28:de:87:13:35:e2:fd:65:7f was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=portal.fuego.qa
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:87:ab:e9:04:97:72:28:de:87:13:35:e2:fd:65:7fSerial Number (int): 16655182778946309405661261492173759871
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 35:8a:11:7d:b9:0e:f4:32:98:02:ed:94:22:96:bf:d7:2f:81:76:08
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 0b:2d:0c:1a:c5:68:e1:2c:2f:48:56:c0:78:7e:5c:70:93:78:26:22
Fingerprint (sha256): 54:5c:68:1b:a3:e0:c7:00:ed:04:97:f9:79:3d:31:3b:27:3f:c4:ec:3c:0e:96:44:7b:a5:81:6c:15:1d:bd:04
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate portal.fuego.qa
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for portal.fuego.qa
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
portal.fuego.qa
*.portal.fuego.qa
*.portal.fuego.qa
Other certificates including the domain name fuego.qa
(limited to 100 certificates)
athavan.cdomaintest.tk
fuego.qa
fuegoondemand.com
chat.invigoro.co
chat.invigoro.co
24x7.ifxnetworks.com
wfm.businesstoys.in
chat.invigoro.co
cliq.genisusrisk.com
cliq.itseasyco.com
24x7.ifxnetworks.com
wfm.businesstoys.in
cloudteam.prolaborate.com
fuegoondemand.com
wfm.businesstoys.in
chat.59unlimited.com
monitor.secload.com.br
monitor.secload.com.br
cloudteam.prolaborate.com
wfm.businesstoys.in
chat.invigoro.co
istechwatch.datamarket.com.tr
monitoring.resolu.com.au
chat.invigoro.co
monitor.business.teksavvy.com
comunicacion.adsertor.mx
wfm.businesstoys.in
cliq.datadriven.tec.br
cloudteam.prolaborate.com
24x7.informo.com.br
monitor.netlabindia.org
24x7.ifxnetworks.com
monitor.secload.com.br
chat.invigoro.co
chat.burhani.co
chat.invigoro.co
monitoring.sidusgroup.com
chat.burhani.co
cliq.studio5.dev
support.overfuel.com
chat.invigoro.co
fuego.qa
wfm.businesstoys.in
chat.invigoro.co
ams.genieall.ca
wfm.businesstoys.in
collabs.quantum-horizon.space
24x7.ifxnetworks.com
24x7.informo.com.br
24x7.sierra.sg
comunicacion.adsertor.mx
fuegoondemand.com
chat.tekkit.ca
24x7.ifxnetworks.com
infra.stealthmonitoring.com
monitoring.resolu.com.au
uptime.stackharbor.com
chat.59unlimited.com
sisochat.siredsociety.com
ams.genieall.ca
cliq.omnizant.com
infra.stealthmonitoring.com
chat.invigoro.co
monitoring.xencia.com
chat.invigoro.co
chat.invigoro.co
wfm.businesstoys.in
chat.invigoro.co
monitoreo.ademanda.com
24x7.ifxnetworks.com
wfm.businesstoys.in
zohovalidator.icheers.com.br
chat.tekkit.ca
cliq.ecoway.com.ar
istechwatch.datamarket.com.tr
collabs.quantum-horizon.space
chat.invigoro.co
chat.invigoro.co
monitoring.fuego.qa
uptime.stackharbor.com
monitor.secload.com.br
cliq.ecoway.com.ar
hs.reelanalytics.net
monitor.secload.com.br
chat.invigoro.co
cloudteam.prolaborate.com
portal.fuego.qa
uptime.stackharbor.com
infra.stealthmonitoring.com
chat.invigoro.co
24x7.sierra.sg
chat.invigoro.co
wfm.businesstoys.in
esupport-apm.provintell.com
monitoreo.ademanda.com
monitor.netlabindia.org
monitor.secload.com.br
24x7.ifxnetworks.com
wfm.businesstoys.in
uptime.stackharbor.com
fuego.qa
fuegoondemand.com
chat.invigoro.co
chat.invigoro.co
24x7.ifxnetworks.com
wfm.businesstoys.in
chat.invigoro.co
cliq.genisusrisk.com
cliq.itseasyco.com
24x7.ifxnetworks.com
wfm.businesstoys.in
cloudteam.prolaborate.com
fuegoondemand.com
wfm.businesstoys.in
chat.59unlimited.com
monitor.secload.com.br
monitor.secload.com.br
cloudteam.prolaborate.com
wfm.businesstoys.in
chat.invigoro.co
istechwatch.datamarket.com.tr
monitoring.resolu.com.au
chat.invigoro.co
monitor.business.teksavvy.com
comunicacion.adsertor.mx
wfm.businesstoys.in
cliq.datadriven.tec.br
cloudteam.prolaborate.com
24x7.informo.com.br
monitor.netlabindia.org
24x7.ifxnetworks.com
monitor.secload.com.br
chat.invigoro.co
chat.burhani.co
chat.invigoro.co
monitoring.sidusgroup.com
chat.burhani.co
cliq.studio5.dev
support.overfuel.com
chat.invigoro.co
fuego.qa
wfm.businesstoys.in
chat.invigoro.co
ams.genieall.ca
wfm.businesstoys.in
collabs.quantum-horizon.space
24x7.ifxnetworks.com
24x7.informo.com.br
24x7.sierra.sg
comunicacion.adsertor.mx
fuegoondemand.com
chat.tekkit.ca
24x7.ifxnetworks.com
infra.stealthmonitoring.com
monitoring.resolu.com.au
uptime.stackharbor.com
chat.59unlimited.com
sisochat.siredsociety.com
ams.genieall.ca
cliq.omnizant.com
infra.stealthmonitoring.com
chat.invigoro.co
monitoring.xencia.com
chat.invigoro.co
chat.invigoro.co
wfm.businesstoys.in
chat.invigoro.co
monitoreo.ademanda.com
24x7.ifxnetworks.com
wfm.businesstoys.in
zohovalidator.icheers.com.br
chat.tekkit.ca
cliq.ecoway.com.ar
istechwatch.datamarket.com.tr
collabs.quantum-horizon.space
chat.invigoro.co
chat.invigoro.co
monitoring.fuego.qa
uptime.stackharbor.com
monitor.secload.com.br
cliq.ecoway.com.ar
hs.reelanalytics.net
monitor.secload.com.br
chat.invigoro.co
cloudteam.prolaborate.com
portal.fuego.qa
uptime.stackharbor.com
infra.stealthmonitoring.com
chat.invigoro.co
24x7.sierra.sg
chat.invigoro.co
wfm.businesstoys.in
esupport-apm.provintell.com
monitoreo.ademanda.com
monitor.netlabindia.org
monitor.secload.com.br
24x7.ifxnetworks.com
wfm.businesstoys.in
uptime.stackharbor.com
Certificate
The complete raw certificate details for portal.fuego.qa in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcDCCA1igAwIBAgIQDIer6QSXcijehxM14v1lfzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDYwNDAwMDAwMFoXDTI1MDcwMzIzNTk1OVowGjEY MBYGA1UEAxMPcG9ydGFsLmZ1ZWdvLnFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA5nzr143WqXp50U8UGAafobFnCTVzS9O5/Zaug1WpTnYq8InsBAT1 7gj8uA66KesPMYaL5lyJxYPyGCzVYUmHX6oeG2RgWLzOCp/P5lJNifqvvoe39zDA XLi1IGBrNwXO4BWd3ankumQhfSvF322E+70teBjQ/H1PNgY8999xiZqCA09SWqa4 1nbPfhpQ35vrJbyM9TLDhbGcJ5xrINbDQUT+LyXxo7SLNBtQSsxN/0j2nrDOfcF4 u4aI5Xrjk38mL9fGJoOw33AGINZJrXNbvygk0kJxYFRMDusIY0THRKtx5aRh7zIR jQWynNnImgCd04KxWlHWVRLrRRGz535DLwIDAQABo4IBjjCCAYowHwYDVR0jBBgw FoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFDWKEX25DvQymALtlCKW v9cvgXYIMC0GA1UdEQQmMCSCD3BvcnRhbC5mdWVnby5xYYIRKi5wb3J0YWwuZnVl Z28ucWEwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw Oi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUH AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVz dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3Qu Y29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAX42o3PXEJ/FSYyAFGVbCaX8ps6pVH/TyLixZ0 zlG0qGJe+dITJmb7cTocq/AdVF5V+n1LKix4oF5FPLv8xA7Qyg8HSP1rjoMvYx6R yMcGSJZkjfGR1wKUImlZcB5/IJ2h9d+uAqTHrCWPwvLrIGCF3L5eIjtOpgSxSsV5 sWl4G32VAEuJCqsEMSKOUXUR5r75NegJLM6jxubytaZ8roVx+ou6nLNRApkHGONM 2jr+zty0by/FB2pjmmE82xPNSNT2uRZtHkqo0Rq1se0NZrJAsHSWxaHalRMhoq0o oMDWduY+CWqGBozyyzPwtnckU3KRYjJGykZSfer1VuLCrj1U -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nzr143WqXp50U8UGAaf obFnCTVzS9O5/Zaug1WpTnYq8InsBAT17gj8uA66KesPMYaL5lyJxYPyGCzVYUmH X6oeG2RgWLzOCp/P5lJNifqvvoe39zDAXLi1IGBrNwXO4BWd3ankumQhfSvF322E +70teBjQ/H1PNgY8999xiZqCA09SWqa41nbPfhpQ35vrJbyM9TLDhbGcJ5xrINbD QUT+LyXxo7SLNBtQSsxN/0j2nrDOfcF4u4aI5Xrjk38mL9fGJoOw33AGINZJrXNb vygk0kJxYFRMDusIY0THRKtx5aRh7zIRjQWynNnImgCd04KxWlHWVRLrRRGz535D LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16655182778946309405661261492173759871 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.fuego.qa' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29096411110335825997844926298006689293313438744407861743518586229202502576489689135117091111604917032575008173285995568627208546914425411430448398607721337183127940532542028741461517106621208623243152135165995375410598511240245664964798785781972410705034143878794521244109329330820941762200047952498784529502392366403870035333839519166360731600994335341471221126517232374662743686876230465650627069161919584140597571629623707402383007128043670940003661513202015068388049747643790372251946956134972954351259706820173381492515103127288112866128379013423621308950671557232836231679265420228000692175712062099690719429423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 358a117db90ef4329802ed942296bfd72f817608 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.fuego.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.fuego.qa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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