*.vouchercart.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:77:15:98:7d:26:2a:42:48:62:59:23:30:33:46:a7 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.vouchercart.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:77:15:98:7d:26:2a:42:48:62:59:23:30:33:46:a7Serial Number (int): 19227513279168610532613353233341171367
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c3:3d:f4:38:c5:de:67:b7:d0:3a:fe:04:16:ca:85:bc:9f:e5:02:dc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 88:20:c3:30:da:2f:10:f8:8f:a4:6b:98:8f:eb:b8:dc:4f:57:d9:6e
Fingerprint (sha256): 54:72:2c:6f:c2:bf:15:43:f5:4c:f5:59:4f:92:ca:24:ac:cc:47:db:88:5f:21:67:f0:ce:4b:66:36:fc:5b:ce
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.vouchercart.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.vouchercart.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.vouchercart.com
vouchercart.com
vouchercart.com
Other certificates including the domain name vouchercart.com
(limited to 100 certificates)
www.financialskills.net.au
www.meiscalculator.com
hitspot.com.br
us.production.gfc.avisi-apps.com
www.job-in-arabia.com
plannor.app
www.revivar.app
happy-birthday-to-you.jp
reject-transfer-request.folgo.app
app-stg.heartenly.com
www.sallybouley.com
test.tractivity.se
www.kdotechservices.com
justdogs.app
*.vouchercart.com
bradleyflood.com
lottery-play.com
wyzauto.com
stepupformembership.com
resnal.ml
leofashion.piticommerce.com
verify.biopreva.com
submatch.io
*.vouchercart.com
gmbh.abedick.dev
skillnav.pro
api.freetrade.io
casav4c.org
enricozappala.com
staging.sysi.or.th
squiz.mismith.io
pasteleriadonrafael.cl
bible.app
eventsourcing.eu
www.almaatransport.com
avaitinerary.com
wonasa.com
*.vouchercart.com
www.usushio-aji.com
phovo.co
impperiaimoveis.com.br
*.vouchercart.com
sauntered.net
chatdemo.brainstormincstudio.com
app.kgnot-app.com
www.electionmeter.in
staging.sysi.or.th
dev.skipped.io
cdc.order.place
www.etune.app
hayanshorg.com
pernaude.fr
www.headshot.com
blog-admin.scotthladun.com
placebuilder.ca
www.photomapper.io
www.socialoutfitters.net
www.jampad.app
viinikanlahti-by-winter.weup.city
depress2020s.com
holadoc.app
link.pima-uae.com
www.caramelo.vip
www.waywaystudio.com
*.vouchercart.com
www.admin.rebat.app
ai.emsg.ml
kaffeeandbarbell.turnosweb.app
cosmos.gofloaters.com
autopartsdemo.estore.business
wyzauto.com
straivetest.nroadcorp.com
www.getshippy.com
*.vouchercart.com
blog.imgenerasi.com.my
app.fincashcorban.com.br
*.vouchercart.com
monteloimoveis.com
www.fyfsales.com
www.thomascarbureanu.com
platform.marketadvisor.io
mychamber.app
hs-admin.ce-zambia.org
green-app.co.il
launchpad.tekomon.io
*.vouchercart.com
training.danielsuhfitness.com
www.smdtest.site
gigavec.com
jasminfaessler.ch
*.vouchercart.com
cdc.order.place
tng.presen.ca
store.vouchercart.com
pernaude.fr
www.jannchoy.com
visit.microsofttheater.com
ahmednafies.com
*.vouchercart.com
twaaqexperience.com
www.meiscalculator.com
hitspot.com.br
us.production.gfc.avisi-apps.com
www.job-in-arabia.com
plannor.app
www.revivar.app
happy-birthday-to-you.jp
reject-transfer-request.folgo.app
app-stg.heartenly.com
www.sallybouley.com
test.tractivity.se
www.kdotechservices.com
justdogs.app
*.vouchercart.com
bradleyflood.com
lottery-play.com
wyzauto.com
stepupformembership.com
resnal.ml
leofashion.piticommerce.com
verify.biopreva.com
submatch.io
*.vouchercart.com
gmbh.abedick.dev
skillnav.pro
api.freetrade.io
casav4c.org
enricozappala.com
staging.sysi.or.th
squiz.mismith.io
pasteleriadonrafael.cl
bible.app
eventsourcing.eu
www.almaatransport.com
avaitinerary.com
wonasa.com
*.vouchercart.com
www.usushio-aji.com
phovo.co
impperiaimoveis.com.br
*.vouchercart.com
sauntered.net
chatdemo.brainstormincstudio.com
app.kgnot-app.com
www.electionmeter.in
staging.sysi.or.th
dev.skipped.io
cdc.order.place
www.etune.app
hayanshorg.com
pernaude.fr
www.headshot.com
blog-admin.scotthladun.com
placebuilder.ca
www.photomapper.io
www.socialoutfitters.net
www.jampad.app
viinikanlahti-by-winter.weup.city
depress2020s.com
holadoc.app
link.pima-uae.com
www.caramelo.vip
www.waywaystudio.com
*.vouchercart.com
www.admin.rebat.app
ai.emsg.ml
kaffeeandbarbell.turnosweb.app
cosmos.gofloaters.com
autopartsdemo.estore.business
wyzauto.com
straivetest.nroadcorp.com
www.getshippy.com
*.vouchercart.com
blog.imgenerasi.com.my
app.fincashcorban.com.br
*.vouchercart.com
monteloimoveis.com
www.fyfsales.com
www.thomascarbureanu.com
platform.marketadvisor.io
mychamber.app
hs-admin.ce-zambia.org
green-app.co.il
launchpad.tekomon.io
*.vouchercart.com
training.danielsuhfitness.com
www.smdtest.site
gigavec.com
jasminfaessler.ch
*.vouchercart.com
cdc.order.place
tng.presen.ca
store.vouchercart.com
pernaude.fr
www.jannchoy.com
visit.microsofttheater.com
ahmednafies.com
*.vouchercart.com
twaaqexperience.com
Certificate
The complete raw certificate details for *.vouchercart.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIQDncVmH0mKkJIYlkjMDNGpzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDcwNDAwMDAwMFoXDTI0MDgwMTIzNTk1OVowHDEa MBgGA1UEAwwRKi52b3VjaGVyY2FydC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkT1KJVmIHM6lQpMYnuxZEbAKnUnJ8hSYu23xcny8fGu121zMQ bHNwBprFz9ZNO65zwxbteTXaFYJwNKOraFjWg3/0GrX5K7COGBs5Ez2F+ZpBgYWS CNQaMsqbtFWhKqnOs5FKtXwoS7JdYHTGuwMdJRoBvKSelc8AffWghH9+jvNezgxf 0Unw78qxqSv/dLyNxSZsFzrvevZFzZTG/nAkhyRyRmWILsFKLTUZjXYnxIdra8bt gTh3fe6ejCjDqYH/epBxJkmVcbVZJfyAX4axHhB7Gl8/wc+syH1bZ73cFEFyMca/ sTc7OtkEbIG+cduN2XivjIlXluG0ezN6hlz5AgMBAAGjggL7MIIC9zAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUwz30OMXeZ7fQOv4E FsqFvJ/lAtwwLQYDVR0RBCYwJIIRKi52b3VjaGVyY2FydC5jb22CD3ZvdWNoZXJj YXJ0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9u dHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEF BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRy dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVz dC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIB bgSCAWoBaAB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiR5J u3sAAAQDAEcwRQIhAMyO2RvOZpeo7ZCILImkBTP0nJ8TQDQOjQkcnYAXI5i0AiBn n9vVQUVgDwMVJ5n6nI6Kg6a04svRlqoqCobILN8YkwB2AEiw42vapkc0D+VqAvqd MOscUgHLVt0sgdm7v6s52IRzAAABiR5Ju5AAAAQDAEcwRQIgJQUH0nE4I6pZCTZC 2QibLmK0A9IZ8qavvUDN7JuGDHgCIQDhU3UputJT+1lz/pvo8vdHZWm1c4Y3FJhz RCzQaGNJOQB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiR5J uuwAAAQDAEcwRQIgBDp5iXoVuaaGulb4/yBigjujx2eN7xRX6oQaid3JoLQCIQD9 Oj/AAmw0wjVeFREIX8ndkrTA9MyJC6DAOFkxs0ADXzANBgkqhkiG9w0BAQsFAAOC AQEAso+j7GgUY/2aEyJ5CMMZIe8KUZp/GIR9Z1Q5BaMbErx29GJKH9aFxo+Ykna+ tQyB7FnNYLtze3khdluKBMEF3YoJbby1bAICYkSvDGRFe6tDDIZ9oPvPyTZuqHBY DoJgFd8kLpO1J0WVQz3GLsjAuLQo2S4ESMM15TDVoQE7TiqiCcl7J2BOTvVX5xSe ohTq4xkN9ZDX4aCyXT6RrTvXioFx33de/EOB5dXtd2AnP+VK3yzyKMzwsGhQwLQM 6v9lebFMZx2HRPSO4kR5fToOaOE+/SXeVDtusJpFA5r+8KMnfSkFTtYYV6o93zF0 FvXk3JizTfj0ZyopieQ7J+r4xA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE9SiVZiBzOpUKTGJ7sW RGwCp1JyfIUmLtt8XJ8vHxrtdtczEGxzcAaaxc/WTTuuc8MW7Xk12hWCcDSjq2hY 1oN/9Bq1+SuwjhgbORM9hfmaQYGFkgjUGjLKm7RVoSqpzrORSrV8KEuyXWB0xrsD HSUaAbyknpXPAH31oIR/fo7zXs4MX9FJ8O/Ksakr/3S8jcUmbBc673r2Rc2Uxv5w JIckckZliC7BSi01GY12J8SHa2vG7YE4d33unowow6mB/3qQcSZJlXG1WSX8gF+G sR4QexpfP8HPrMh9W2e93BRBcjHGv7E3OzrZBGyBvnHbjdl4r4yJV5bhtHszeoZc +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19227513279168610532613353233341171367 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vouchercart.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20742197351717751557751660931264149355455809258160454998183929631021230605381838216433848444996518185916044356872026269003984935065551369524741471750176480311413719251000653033591130488658476667104075325746959313486525354289591461925331932972329481723934169792718057958349857684540996305148335632259325467602748222099894640634919451818905269265112120431295718721944844412425830121823691860697645576191046692841588277702411258847273215454304350858199053691934010015665551113694099842927917654351318006176211194070224602316435494842052313601046440888265807121574935338449489941314087994621008674780124710302385931967737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c33df438c5de67b7d03afe0416ca85bc9fe502dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vouchercart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vouchercart.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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