cdn.justalk.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:5a:5d:cd:c4:3f:98:6b:e5:c0:76:31:1a:c2:a0:16 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdn.justalk.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:5a:5d:cd:c4:3f:98:6b:e5:c0:76:31:1a:c2:a0:16Serial Number (int): 16419945233289524032633792528419823638
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0b:a1:14:7c:2e:b7:0e:d7:98:65:68:69:60:52:ed:a5:86:52:d2:62
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 98:2d:60:dd:8e:de:f4:7e:dc:2e:76:00:d0:13:e1:74:74:ab:5d:92
Fingerprint (sha256): 61:72:18:12:a7:d1:64:70:a6:04:49:7e:c5:8d:b6:47:d2:38:5a:ea:6e:e4:dd:7a:c3:19:7c:e0:40:33:0e:a0
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate cdn.justalk.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.justalk.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.justalk.com
Other certificates including the domain name justalk.com
(limited to 100 certificates)
nutrition-origin.me2-prd.gmal.app
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
Certificate
The complete raw certificate details for cdn.justalk.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIQDFpdzcQ/mGvlwHYxGsKgFjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA0MDYwMDAwMDBaFw0yMDA1MDYx MjAwMDBaMBoxGDAWBgNVBAMTD2Nkbi5qdXN0YWxrLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKLF/OaiNWrxHIFmdME2ZmC1iSGg+GoZJ/Ow66qE VoBqZCsFukK8Q8TMclGpLBiwZicH+CKqamv+bKmBD6lLpTNBTDAT56oN5P0K7kBi +U3MSy+1EALldxilCTlEhqYiBtja+P/uHRGciltS5rKSAHZtlOCS59ADXkdr+HKa 0icA2HwjDOB73z/J+0G51LGDBk1sd1UFjSxX/6u83G5RlKXAypPVFeQ/o5yeRafK RmfQBOLcO6GO5ZB7Is2/WPflicjcJEhn5NC8dHKmgxCo0PKZIqfXjEkb94fruq33 Gvq3RcHBx+n0zWyc3j/fmBG9sWhzTCOEVXYXaYTKcmF0yW8CAwEAAaOCAnowggJ2 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQLoRR8 LrcO15hlaGlgUu2lhlLSYjAaBgNVHREEEzARgg9jZG4uanVzdGFsay5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z Y2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsG AQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9u dHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRy dXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABafBg +O4AAAQDAEcwRQIgWLHJkGBjBnKUtD7Scn6eEM8AD9QPC+FneJRC2q4lIXUCIQCH mJXaSeEMEf9A5LK1Leincu/gQFpoeEMHVWH+1+hw3wB1AId1v+dZfPiMQ5lfvfNu /1aNR1Y2/0q1YMG06v9eoIMPAAABafBg+gwAAAQDAEYwRAIgCQLi+mpkePw8wm/u 9c+3bnSyhMhgvwu4csIohPZwbVoCIHU3Ozrvva18nNioGxosrehe7l8Iy/bwibU8 mU8kF8ZNMA0GCSqGSIb3DQEBCwUAA4IBAQCMjJu8ssY5Ed9crDSx4+xR0mvbdvRR hJdXWQZRDEqf+MhfiSL3iBctmB4a9MVSsjhZUPqlHYejg9BWm0YlcgJRVf5trF1f g6BbM4RhX+e55deLh9eQJxsYoMWUf3+kaYyXkM2hsZ8JL6XmQD7NfSdTtkJwKf3z zYUTA0s37pNWkpl2fWJttosEfJPDIbEuXDhronuzmSeLKXrhIVvxtPA4f1fcvZ0V sWCmRrB2WgyrhrDWU4nRLNbSaDB/Ra6h6I5qzo3A0MCX6YCn3AExsiUBYIm6zEkE yYNBy9xDF526dfFc9t7JlNW6sLcNDhZq3mvzucbCOZykZhECYp2fTYBU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosX85qI1avEcgWZ0wTZm YLWJIaD4ahkn87DrqoRWgGpkKwW6QrxDxMxyUaksGLBmJwf4Iqpqa/5sqYEPqUul M0FMMBPnqg3k/QruQGL5TcxLL7UQAuV3GKUJOUSGpiIG2Nr4/+4dEZyKW1LmspIA dm2U4JLn0ANeR2v4cprSJwDYfCMM4HvfP8n7QbnUsYMGTWx3VQWNLFf/q7zcblGU pcDKk9UV5D+jnJ5Fp8pGZ9AE4tw7oY7lkHsizb9Y9+WJyNwkSGfk0Lx0cqaDEKjQ 8pkip9eMSRv3h+u6rfca+rdFwcHH6fTNbJzeP9+YEb2xaHNMI4RVdhdphMpyYXTJ bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16419945233289524032633792528419823638 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.justalk.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20548236873901219755274872663927052770533804102770459224202575027375588753725385311648305004654984292088149250262212886301182485574846469367618555911302426471038350119184807570782303353524306024743135828744397935022747753374350705860130838922775526910327543932376930870918234278399799998918513621778153042109941996573605484001511657511440117277415014067645201494625079136696803712642026267244749043728970098482671439253425834027308310517722856929184529092016708800307456727736634418191372644331451946152899760516738118346375684779426744143298517488360046239303326954997071199851839472210139094445190195280191048436079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ba1147c2eb70ed7986568696052eda58652d262 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.justalk.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169f060f8ee0000040300473045022058b1c9906063067294b43ed2727e9e10cf000fd40f0be167789442daae252175022100879895da49e10c11ff40e4b2b52de8a772efe0405a687843075561fed7e870df0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169f060fa0c000004030046304402200902e2fa6a6478fc3cc26feef5cfb76e74b284c860bf0bb872c22884f6706d5a022075373b3aefbdad7c9cd8a81b1a2cade85eee5f08cbf6f089b53c994f2417c64d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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