js.mtrip.me
Issued by Amazon
About this certificate
This digital certificate with serial number 02:5e:b6:3c:4c:48:80:0f:fd:26:06:80:ce:42:9b:0b was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=js.mtrip.me
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:5e:b6:3c:4c:48:80:0f:fd:26:06:80:ce:42:9b:0bSerial Number (int): 3150228072118229166053616222768110347
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: c8:aa:91:f7:59:c1:70:0e:11:3a:51:7b:dd:13:01:73:25:99:fd:e2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 44:1b:dc:42:30:6d:52:c2:d3:1b:d2:95:2b:a1:5f:da:25:3a:ce:d1
Fingerprint (sha256): 66:55:fb:76:d0:78:c8:b5:b3:bc:65:a8:5d:68:5a:d4:ed:e3:f9:d3:ce:12:2e:8f:3f:35:25:37:00:1b:17:c1
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate js.mtrip.me
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for js.mtrip.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
js.mtrip.me
Other certificates including the domain name mtrip.me
(limited to 100 certificates)
js.mtrip.me
api.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
www.shard1.cdn.mtrip.me
androiddata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
iosdata.mtrip.me
tripagent.com
tripagent.com
testcloudflare.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
tripagent.com
mtrip.me
api.mtrip.com
mytrip.tripagent.com
androiddata.mtrip.me
iosdata.mtrip.me
tripagent.com
cdn.mtrip.me
androiddata.mtrip.me
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
api.mtrip.com
mytrip.tripagent.com
iosdata.mtrip.me
tripagent.com
mtrip.me
js.mtrip.me
tripagent.com
mytrip.tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
api.mtrip.com
mtrip.me
api.mtrip.com
tripagent.com
api.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
js.mtrip.me
tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
tripagent.com
mytrip.tripagent.com
js.mtrip.me
testcloudflare.mtrip.me
dev.mtrip.me
tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
tripagent.com
androiddata.mtrip.me
mytrip.tripagent.com
cdn.mtrip.me
iosdata.mtrip.me
cdn.mtrip.me
cdn.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
api.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
www.shard1.cdn.mtrip.me
androiddata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
iosdata.mtrip.me
tripagent.com
tripagent.com
testcloudflare.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
tripagent.com
mtrip.me
api.mtrip.com
mytrip.tripagent.com
androiddata.mtrip.me
iosdata.mtrip.me
tripagent.com
cdn.mtrip.me
androiddata.mtrip.me
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
api.mtrip.com
mytrip.tripagent.com
iosdata.mtrip.me
tripagent.com
mtrip.me
js.mtrip.me
tripagent.com
mytrip.tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
api.mtrip.com
mtrip.me
api.mtrip.com
tripagent.com
api.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
js.mtrip.me
tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
tripagent.com
mytrip.tripagent.com
js.mtrip.me
testcloudflare.mtrip.me
dev.mtrip.me
tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
tripagent.com
androiddata.mtrip.me
mytrip.tripagent.com
cdn.mtrip.me
iosdata.mtrip.me
cdn.mtrip.me
cdn.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
Certificate
The complete raw certificate details for js.mtrip.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIQAl62PExIgA/9JgaAzkKbCzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMDMwMDAwMDBaFw0yMDAyMDMx MjAwMDBaMBYxFDASBgNVBAMTC2pzLm10cmlwLm1lMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAnzxcSBeDFAW06Yg/4E52TBBIJdzc2CLx1Ea1w0yDIoIa 2obe7FHmWIMtCllHOifScGAPAGe0WSrkAulCzdVtu4H4ZarXu4FWksRErruS72dP 2TJl9zKnGfsPsi5cqJ8S0ATHJn8IVCv/bn/OexZf7j51Dy4S0BZCZIhb8Otkhv5B DvqhiR4J4CAiEDapIH6wFI4ZyfZ/J14LHk/FYcPnZmmQSmA+73ZEtlPhp9eT7jp2 2ZbAGXWChqsRqH78yiWoNdqm3v3eud9PK1kDvoXzXCaROUzSKflI/rK7/IX4K6P+ VRDdDYGE9ZnrytRA7glW1oCUlQrGDQchMvo5fCLg1wIDAQABo4ICdjCCAnIwHwYD VR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFMiqkfdZwXAO ETpRe90TAXMlmf3iMBYGA1UdEQQPMA2CC2pzLm10cmlwLm1lMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw oC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3Js MCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20v c2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A dQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAWgVpMtQAAAEAwBG MEQCIHzxXMaGshTxRou5QmOHPFsyw/K89ZV/isoaFygWdD00AiB52Ng8W5F5G7Al G0uirH55tgBLDaL/fbVFwiT3Qs1yIgB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1 YMG06v9eoIMPAAABaBWkzBYAAAQDAEcwRQIgaMv3nxg4G1xqfbUwegyqpbadqfF2 PL+7H5NN3n5U7fACIQC+HxYCPRSWiac+6Sz9V0CSz4z06uW/EcbIHoZtfl6yQjAN BgkqhkiG9w0BAQsFAAOCAQEAWUIpi3J6foAbkFuobqEIoSzL7t8fFCokTx0dxO9c dgue4TZ6lAMWiGz0/cEWplMS3myvY65852b52NuVizRR1VPxoI7gcECWYH3ai43K ELLz0IwPQh8MbzAuRUzkymy25pcfNBla2mcoGrueuwjI4jJl8C0IEaxR1w84l/2D wnX7fZ7R8+3ECYfuCko240s5A0bFvm26SDR2Rfz0yrBwF8HJ3aqFjgLc+noYGTmo iqMJwuwk0INgxkQWlKAPTQ/GUZLHg+rSWhTXS0yp0ScE+HAoRejsilv9yz9pAmml My4DCENIXtPVy90r93LqwQpCbOpp5oC5MIs3GI2UzpzylQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzxcSBeDFAW06Yg/4E52 TBBIJdzc2CLx1Ea1w0yDIoIa2obe7FHmWIMtCllHOifScGAPAGe0WSrkAulCzdVt u4H4ZarXu4FWksRErruS72dP2TJl9zKnGfsPsi5cqJ8S0ATHJn8IVCv/bn/OexZf 7j51Dy4S0BZCZIhb8Otkhv5BDvqhiR4J4CAiEDapIH6wFI4ZyfZ/J14LHk/FYcPn ZmmQSmA+73ZEtlPhp9eT7jp22ZbAGXWChqsRqH78yiWoNdqm3v3eud9PK1kDvoXz XCaROUzSKflI/rK7/IX4K6P+VRDdDYGE9ZnrytRA7glW1oCUlQrGDQchMvo5fCLg 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3150228072118229166053616222768110347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'js.mtrip.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20101655349194212929476293942382997537003544599876975916600604796628638742118841922443425115934943070169188393755906301720562703136281492521908468205926970033746462236560598209730025827800307492631397829790343730961327206637202725207511451750291147303748007321817933610098464432061308647783650785993078870657059514345375030841417463649502909583659437299010569644263774833462143350053367448505423626212524019547793875988199585635623706259398361060376358723042238975974451705093516414132623039785796378230219149868943468484653310767367217104447242963283514473769208388488564515747112339341348035081233102663655786471639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8aa91f759c1700e113a517bdd1301732599fde2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.mtrip.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016815a4cb50000004030046304402207cf15cc686b214f1468bb94263873c5b32c3f2bcf5957f8aca1a172816743d34022079d8d83c5b91791bb0251b4ba2ac7e79b6004b0da2ff7db545c224f742cd72220076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016815a4cc160000040300473045022068cbf79f18381b5c6a7db5307a0caaa5b69da9f1763cbfbb1f934dde7e54edf0022100be1f16023d149689a73ee92cfd574092cf8cf4eae5bf11c6c81e866d7e5eb242 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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