harbor.core.vineti.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:b8:ec:bf:b7:17:30:ba:2c:69:8a:8a:3b:65:59:d9 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=harbor.core.vineti.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:b8:ec:bf:b7:17:30:ba:2c:69:8a:8a:3b:65:59:d9Serial Number (int): 18240148405083608849150735863549090265
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d7:af:91:d3:70:a7:4c:a2:72:4a:6a:8e:9b:df:fc:6d:0f:5e:0b:b0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 6e:a6:72:5d:af:21:ff:cf:32:fc:fb:fd:02:90:da:e4:e0:8c:8b:81
Fingerprint (sha256): 64:04:99:ed:a4:35:a2:2d:79:c4:a9:11:58:c4:71:f3:ea:b3:9d:3f:3d:44:e7:1e:b5:c1:99:fc:79:c7:ef:6a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate harbor.core.vineti.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for harbor.core.vineti.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
harbor.core.vineti.com
Other certificates including the domain name vineti.com
(limited to 100 certificates)
*.osdev.vineti.com
api.c2.core.vineti.com
harbor.core.vineti.com
marketplace.partnerpage.io
marketplace.partnerpage.io
customer-success.vineti.com
vineti.com
*.vineti.com
marketplace.partnerpage.io
api.c2.core.vineti.com
agency-directory.teikametrics.com
core.vineti.com
us-controlled1-dr.vineti.com
us-uncontrolled1.vineti.com
us-controlled1.vineti.com
eu-uncontrolled1.vineti.com
marketplace.partnerpage.io
marketplace.partnerpage.io
agencies.ecommerce-platforms.com
vineti.com
eu-controlled1.vineti.com
marketplace.callpage.io
alliance.vineti.com
vineti.com
core.vineti.com
www.vineti.com
us-uncontrolled1.vineti.com
*.vineti.com
partners.alexodoricodev.com
customer-success.vineti.com
core.vineti.com
harbor.core.vineti.com
vineti.com
www.vineti.com
customer-success.vineti.com
*.vineti.com
agency-directory.teikametrics.com
marketplace.partnerpage.io
*.vineti.com
*.vineti.com
vineti.com
agency-directory.teikametrics.com
eu-controlled1-dr.vineti.com
*.vineti.com
core.vineti.com
core.vineti.com
*.vineti.com
agency-directory.teikametrics.com
vineti.com
marketplace.callpage.io
harbor.core.vineti.com
*.vineti.com
us-uncontrolled1.vineti.com
core.vineti.com
us-uncontrolled1.vineti.com
api.core.vineti.com
us-controlled1.vineti.com
*.vineti.com
eu-controlled1-dr.vineti.com
us-controlled1-dr.vineti.com
marketplace.partnerpage.io
www.vineti.com
marketplace.callpage.io
www.vineti.com
us-controlled1-dr.vineti.com
core.vineti.com
eu-controlled1-dr.vineti.com
core.vineti.com
eu-controlled1.vineti.com
vineti.com
marketplace.partnerpage.io
eu-controlled1.vineti.com
vineti.com
us-controlled1.vineti.com
*.core2.vineti.com
customer-success.vineti.com
*.vineti.com
*.core2.vineti.com
marketplace.partnerpage.io
marketplace.partnerpage.io
agency-directory.teikametrics.com
www.vineti.com
harbor.core.vineti.com
api.core.vineti.com
vineti.com
marketplace.partnerpage.io
*.vineti.com
www.vineti.com
*.osdev.vineti.com
vineti.com
customer-success.vineti.com
alliance.vineti.com
www.vineti.com
vineti.com
marketplace.partnerpage.io
core.vineti.com
core.vineti.com
marketplace.partnerpage.io
*.osdev.vineti.com
marketplace.callpage.io
api.c2.core.vineti.com
harbor.core.vineti.com
marketplace.partnerpage.io
marketplace.partnerpage.io
customer-success.vineti.com
vineti.com
*.vineti.com
marketplace.partnerpage.io
api.c2.core.vineti.com
agency-directory.teikametrics.com
core.vineti.com
us-controlled1-dr.vineti.com
us-uncontrolled1.vineti.com
us-controlled1.vineti.com
eu-uncontrolled1.vineti.com
marketplace.partnerpage.io
marketplace.partnerpage.io
agencies.ecommerce-platforms.com
vineti.com
eu-controlled1.vineti.com
marketplace.callpage.io
alliance.vineti.com
vineti.com
core.vineti.com
www.vineti.com
us-uncontrolled1.vineti.com
*.vineti.com
partners.alexodoricodev.com
customer-success.vineti.com
core.vineti.com
harbor.core.vineti.com
vineti.com
www.vineti.com
customer-success.vineti.com
*.vineti.com
agency-directory.teikametrics.com
marketplace.partnerpage.io
*.vineti.com
*.vineti.com
vineti.com
agency-directory.teikametrics.com
eu-controlled1-dr.vineti.com
*.vineti.com
core.vineti.com
core.vineti.com
*.vineti.com
agency-directory.teikametrics.com
vineti.com
marketplace.callpage.io
harbor.core.vineti.com
*.vineti.com
us-uncontrolled1.vineti.com
core.vineti.com
us-uncontrolled1.vineti.com
api.core.vineti.com
us-controlled1.vineti.com
*.vineti.com
eu-controlled1-dr.vineti.com
us-controlled1-dr.vineti.com
marketplace.partnerpage.io
www.vineti.com
marketplace.callpage.io
www.vineti.com
us-controlled1-dr.vineti.com
core.vineti.com
eu-controlled1-dr.vineti.com
core.vineti.com
eu-controlled1.vineti.com
vineti.com
marketplace.partnerpage.io
eu-controlled1.vineti.com
vineti.com
us-controlled1.vineti.com
*.core2.vineti.com
customer-success.vineti.com
*.vineti.com
*.core2.vineti.com
marketplace.partnerpage.io
marketplace.partnerpage.io
agency-directory.teikametrics.com
www.vineti.com
harbor.core.vineti.com
api.core.vineti.com
vineti.com
marketplace.partnerpage.io
*.vineti.com
www.vineti.com
*.osdev.vineti.com
vineti.com
customer-success.vineti.com
alliance.vineti.com
www.vineti.com
vineti.com
marketplace.partnerpage.io
core.vineti.com
core.vineti.com
marketplace.partnerpage.io
*.osdev.vineti.com
marketplace.callpage.io
Certificate
The complete raw certificate details for harbor.core.vineti.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQDbjsv7cXMLosaYqKO2VZ2TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMjUwMDAwMDBaFw0yMTAyMjUx MjAwMDBaMCExHzAdBgNVBAMTFmhhcmJvci5jb3JlLnZpbmV0aS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZI2MAdlepyzbmywLjY9bPKB7MLKnM WzBI8jTTKvQQnje9yGldgibkBXpKLuEzB2nuLhhApNTjCG9WGwpl3JEnzFQVO0LA 8MRH7MSRULnYO3lhqIN2qttNBgGhPpnh0AMBUN3Dk4zIG5qJ9fXlSSEuBgftCAwj dqCkGO8qHfJUXP4tZY7+BbFFwyXpZx8jTVPWk5sZ1egJpKIWREb/1UH7RPPN0mCP STD08zhJ6zXsFfHV0PR2JbUH7IyH4Ygof8rfr6gOJftbKorx67gFb3GCk+A1cwIL +5/iikV2xdMbmIRZJkDQtpnsWqZP4q8r/uJfKm02q0NpsfxRzf8gqgbDAgMBAAGj ggGPMIIBizAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQU16+R03CnTKJySmqOm9/8bQ9eC7AwIQYDVR0RBBowGIIWaGFyYm9yLmNvcmUu dmluZXRpLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9CwfbQgPma7cb 6X3OjNr11VBG4NwB9rDhTKSZcN2x8mHOfQpaY4TXjARZyUa0TnXZ88r6NNewIskS IaJ93ZRxGPhQhyDGzAd0rRO6/PpBwjoEXTuRb23dgS2ablXiuA1JgxIdDQTS9S3o B/rFg/x+n+tTAX+WJXURtHNA/GkJG0afTHEwrb9/R0Q9jyO0U27CV/lZXo3QcIjy /F8i8yb+e3ENA76ksGhlMsa6RqeAJ9f3kYgEYR+0TSCYepVGU6H3M8fgwuweawuO HUvwDlMw1bsrbWoZPf/fp5OmOv6oy79fFRxgE3oxSaY0xjZl91hcD6fMqreZ/xAW KK7FhpRL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SNjAHZXqcs25ssC42PW zygezCypzFswSPI00yr0EJ43vchpXYIm5AV6Si7hMwdp7i4YQKTU4whvVhsKZdyR J8xUFTtCwPDER+zEkVC52Dt5YaiDdqrbTQYBoT6Z4dADAVDdw5OMyBuaifX15Ukh LgYH7QgMI3agpBjvKh3yVFz+LWWO/gWxRcMl6WcfI01T1pObGdXoCaSiFkRG/9VB +0TzzdJgj0kw9PM4Ses17BXx1dD0diW1B+yMh+GIKH/K36+oDiX7WyqK8eu4BW9x gpPgNXMCC/uf4opFdsXTG5iEWSZA0LaZ7FqmT+KvK/7iXyptNqtDabH8Uc3/IKoG wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18240148405083608849150735863549090265 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harbor.core.vineti.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27411162022493178830260940178879455725080133111327457728133405454759807948375220739993279468937739917635454734947846403883488760750495620157392847039144127930889681790538212825533980570075622074867847397064571099656501027014998072740852796468421623651435488459586608084838695031133126518800109631724981937167607544672103739257291562085725129560079939656817636039817370789015169492434290578241872154900735541266169417740012458631581082636189376617148030106410872337767561038832328635991056791289835211678305097464531804649435668160172800617818877257102038796782350108151579440656882387314614564547225701717265886086851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7af91d370a74ca2724a6a8e9bdffc6d0f5e0bb0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbor.core.vineti.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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