aaf.gecompany.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 02:e6:18:a5:8c:00:36:d8:d6:ee:a8:b2:87:21:e0:9c was issued on by Amazon.
With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=aaf.gecompany.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:e6:18:a5:8c:00:36:d8:d6:ee:a8:b2:87:21:e0:9cSerial Number (int): 3853184162838304976838112101936521372
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 20:0e:9d:c4:a1:5d:2b:65:3a:5d:af:02:cb:8d:42:f3:fd:ff:28:3f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 8a:3e:be:1d:02:44:7e:28:b4:83:0e:5c:cd:bf:57:42:48:f1:db:5e
Fingerprint (sha256): 6a:ab:ed:7f:1a:85:77:d3:a1:2a:5d:03:d7:eb:ab:6f:a9:bd:42:38:c8:b8:dd:e0:66:34:d5:63:d8:9b:d3:56
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate aaf.gecompany.com
97
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aaf.gecompany.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aaf.gecompany.com
www.ge-americas.com
www.gecompany.com.mx
www.geimaginationatwork.net
www.geconnections.com
japan.geblogs.com
www.ge.co.nz
www.bitstew.com
ge-digital.co
brasil.txchnologist.com
www.1-800-ge.com
www.ask-ge.net
predixui.com
www.geamericas.com
brazil.geblogs.com
www.gecitizenship.com
www.geafrica.com
www.gecompany.org
www.bringgoodthingstolife.com
www.geblogs.com
predix.co.il
ge-digital.net
www.gehealthyshare.com
www.gecentennialflight.com
content.ge.com
www.gejapanholdings.co.jp
www.gejapanholdings.com
healthchoice.ge-healthahead.com
predixui.net
www.gemindsandmachines.com
www.gejapanholdings.jp
www.proficy.com
www.ge-america.com
www.gebrand.com
www.gejapan.com
www.ge.co.uk
www.e-ge.com
www.ask-ge.org
dev.geholidaycard.com
www.e-ge.net
gopredix.com
geforcee.geblogs.com
predixo.com
predix.ae
www.ge-co.org
stage-solr-dsg.gebrilliantyou.com
www.ge-company.org
www.geenergyfinancialservices.com
www.ge.co.th
www.ge.com.tr
proficy.com
www.geforyou.com
www.ge-africa.com
www.general-electric.com
www.geamerica.com
photoproject.ecomagination.com
predixui.org
www.developinghealthglobally.com
www.ge-company.com
seed.ecomagination.com
generalelectric.tj
www.ge-cdn.com
gedigital.co
geoterra.ecomagination.com
www.ge.com.sg
www.ge-co.net
www.ecomagination.com
gedigital.dev
challenge.ecomagination.com
www.ge.com.br
www.800thinkge.com
www.gedestinationafrica.com
eddie.ge.com
www.ge-australia.com
www.ge-company.net
www.geglobalresearch.com
www.1-800-ge.org
www.ge-co.com
www.ask-ge.com
www.geholidaycard.com
www.ge.com.au
visualization.geblogs.com
www.ge-cities.com
www.geaustralia.com
ww2.geglobalresearch.com
flexibility.ecomagination.com
www.gefinland.com
www.gecompany.com
www.ge-europe.com
www.gefoundation.com
www.gecareers.com
kids.ecomagination.com
ge.ecomagination.com
gepredix.com
ge.digital
www.ge.com.pk
ge-digital.org
www.ge-americas.com
www.gecompany.com.mx
www.geimaginationatwork.net
www.geconnections.com
japan.geblogs.com
www.ge.co.nz
www.bitstew.com
ge-digital.co
brasil.txchnologist.com
www.1-800-ge.com
www.ask-ge.net
predixui.com
www.geamericas.com
brazil.geblogs.com
www.gecitizenship.com
www.geafrica.com
www.gecompany.org
www.bringgoodthingstolife.com
www.geblogs.com
predix.co.il
ge-digital.net
www.gehealthyshare.com
www.gecentennialflight.com
content.ge.com
www.gejapanholdings.co.jp
www.gejapanholdings.com
healthchoice.ge-healthahead.com
predixui.net
www.gemindsandmachines.com
www.gejapanholdings.jp
www.proficy.com
www.ge-america.com
www.gebrand.com
www.gejapan.com
www.ge.co.uk
www.e-ge.com
www.ask-ge.org
dev.geholidaycard.com
www.e-ge.net
gopredix.com
geforcee.geblogs.com
predixo.com
predix.ae
www.ge-co.org
stage-solr-dsg.gebrilliantyou.com
www.ge-company.org
www.geenergyfinancialservices.com
www.ge.co.th
www.ge.com.tr
proficy.com
www.geforyou.com
www.ge-africa.com
www.general-electric.com
www.geamerica.com
photoproject.ecomagination.com
predixui.org
www.developinghealthglobally.com
www.ge-company.com
seed.ecomagination.com
generalelectric.tj
www.ge-cdn.com
gedigital.co
geoterra.ecomagination.com
www.ge.com.sg
www.ge-co.net
www.ecomagination.com
gedigital.dev
challenge.ecomagination.com
www.ge.com.br
www.800thinkge.com
www.gedestinationafrica.com
eddie.ge.com
www.ge-australia.com
www.ge-company.net
www.geglobalresearch.com
www.1-800-ge.org
www.ge-co.com
www.ask-ge.com
www.geholidaycard.com
www.ge.com.au
visualization.geblogs.com
www.ge-cities.com
www.geaustralia.com
ww2.geglobalresearch.com
flexibility.ecomagination.com
www.gefinland.com
www.gecompany.com
www.ge-europe.com
www.gefoundation.com
www.gecareers.com
kids.ecomagination.com
ge.ecomagination.com
gepredix.com
ge.digital
www.ge.com.pk
ge-digital.org
Other certificates including the domain name gecompany.com
(limited to 100 certificates)
*.ecomex.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com
Certificate
The complete raw certificate details for aaf.gecompany.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINWzCCDEOgAwIBAgIQAuYYpYwANtjW7qiyhyHgnDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIxOTAwMDAwMFoXDTI1MDExNjIzNTk1OVowHDEa MBgGA1UEAxMRYWFmLmdlY29tcGFueS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsjwElMFj3EQ7T+3sxgkRafkQRHKYdOPLe0+MnolDvGvnDywWJ wUs9ItBEkPTc09i6VV3uXJ7VdImtXZfa5bX8ZtgfF7ijKVgJOJUURtePnlBRaqU3 6BspB6xaDauD20gU4Ipb0bBOI1x13un7xu1s1CTUIQGVtgClerk82mv8TrU5aJjl usk7fQZL1Rg61jFvTk2ORUsVPvP1upflaYu5qwxxYW0jdWXV/iOuIlUf5A852I8M 8VEC60Z9cj7w6wCvvGJHK4AMKKF7X32OElJqg7/l9fBzCLHPzFO8HeU85gufsvVg j3BTVjqKO+0+K5/akm0Y+41rab68ToBHc2tfAgMBAAGjggp3MIIKczAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUIA6dxKFdK2U6Xa8C y41C8/3/KD8wggeoBgNVHREEggefMIIHm4IRYWFmLmdlY29tcGFueS5jb22CE3d3 dy5nZS1hbWVyaWNhcy5jb22CFHd3dy5nZWNvbXBhbnkuY29tLm14ght3d3cuZ2Vp bWFnaW5hdGlvbmF0d29yay5uZXSCFXd3dy5nZWNvbm5lY3Rpb25zLmNvbYIRamFw YW4uZ2VibG9ncy5jb22CDHd3dy5nZS5jby5ueoIPd3d3LmJpdHN0ZXcuY29tgg1n ZS1kaWdpdGFsLmNvghdicmFzaWwudHhjaG5vbG9naXN0LmNvbYIQd3d3LjEtODAw LWdlLmNvbYIOd3d3LmFzay1nZS5uZXSCDHByZWRpeHVpLmNvbYISd3d3LmdlYW1l cmljYXMuY29tghJicmF6aWwuZ2VibG9ncy5jb22CFXd3dy5nZWNpdGl6ZW5zaGlw LmNvbYIQd3d3LmdlYWZyaWNhLmNvbYIRd3d3LmdlY29tcGFueS5vcmeCHXd3dy5i cmluZ2dvb2R0aGluZ3N0b2xpZmUuY29tgg93d3cuZ2VibG9ncy5jb22CDHByZWRp eC5jby5pbIIOZ2UtZGlnaXRhbC5uZXSCFnd3dy5nZWhlYWx0aHlzaGFyZS5jb22C Gnd3dy5nZWNlbnRlbm5pYWxmbGlnaHQuY29tgg5jb250ZW50LmdlLmNvbYIZd3d3 LmdlamFwYW5ob2xkaW5ncy5jby5qcIIXd3d3LmdlamFwYW5ob2xkaW5ncy5jb22C H2hlYWx0aGNob2ljZS5nZS1oZWFsdGhhaGVhZC5jb22CDHByZWRpeHVpLm5ldIIa d3d3LmdlbWluZHNhbmRtYWNoaW5lcy5jb22CFnd3dy5nZWphcGFuaG9sZGluZ3Mu anCCD3d3dy5wcm9maWN5LmNvbYISd3d3LmdlLWFtZXJpY2EuY29tgg93d3cuZ2Vi cmFuZC5jb22CD3d3dy5nZWphcGFuLmNvbYIMd3d3LmdlLmNvLnVrggx3d3cuZS1n ZS5jb22CDnd3dy5hc2stZ2Uub3JnghVkZXYuZ2Vob2xpZGF5Y2FyZC5jb22CDHd3 dy5lLWdlLm5ldIIMZ29wcmVkaXguY29tghRnZWZvcmNlZS5nZWJsb2dzLmNvbYIL cHJlZGl4by5jb22CCXByZWRpeC5hZYINd3d3LmdlLWNvLm9yZ4Ihc3RhZ2Utc29s ci1kc2cuZ2VicmlsbGlhbnR5b3UuY29tghJ3d3cuZ2UtY29tcGFueS5vcmeCIXd3 dy5nZWVuZXJneWZpbmFuY2lhbHNlcnZpY2VzLmNvbYIMd3d3LmdlLmNvLnRogg13 d3cuZ2UuY29tLnRyggtwcm9maWN5LmNvbYIQd3d3LmdlZm9yeW91LmNvbYIRd3d3 LmdlLWFmcmljYS5jb22CGHd3dy5nZW5lcmFsLWVsZWN0cmljLmNvbYIRd3d3Lmdl YW1lcmljYS5jb22CHnBob3RvcHJvamVjdC5lY29tYWdpbmF0aW9uLmNvbYIMcHJl ZGl4dWkub3JngiB3d3cuZGV2ZWxvcGluZ2hlYWx0aGdsb2JhbGx5LmNvbYISd3d3 LmdlLWNvbXBhbnkuY29tghZzZWVkLmVjb21hZ2luYXRpb24uY29tghJnZW5lcmFs ZWxlY3RyaWMudGqCDnd3dy5nZS1jZG4uY29tggxnZWRpZ2l0YWwuY2+CGmdlb3Rl cnJhLmVjb21hZ2luYXRpb24uY29tgg13d3cuZ2UuY29tLnNngg13d3cuZ2UtY28u bmV0ghV3d3cuZWNvbWFnaW5hdGlvbi5jb22CDWdlZGlnaXRhbC5kZXaCG2NoYWxs ZW5nZS5lY29tYWdpbmF0aW9uLmNvbYINd3d3LmdlLmNvbS5icoISd3d3LjgwMHRo aW5rZ2UuY29tght3d3cuZ2VkZXN0aW5hdGlvbmFmcmljYS5jb22CDGVkZGllLmdl LmNvbYIUd3d3LmdlLWF1c3RyYWxpYS5jb22CEnd3dy5nZS1jb21wYW55Lm5ldIIY d3d3LmdlZ2xvYmFscmVzZWFyY2guY29tghB3d3cuMS04MDAtZ2Uub3Jngg13d3cu Z2UtY28uY29tgg53d3cuYXNrLWdlLmNvbYIVd3d3LmdlaG9saWRheWNhcmQuY29t gg13d3cuZ2UuY29tLmF1ghl2aXN1YWxpemF0aW9uLmdlYmxvZ3MuY29tghF3d3cu Z2UtY2l0aWVzLmNvbYITd3d3LmdlYXVzdHJhbGlhLmNvbYIYd3cyLmdlZ2xvYmFs cmVzZWFyY2guY29tgh1mbGV4aWJpbGl0eS5lY29tYWdpbmF0aW9uLmNvbYIRd3d3 LmdlZmlubGFuZC5jb22CEXd3dy5nZWNvbXBhbnkuY29tghF3d3cuZ2UtZXVyb3Bl LmNvbYIUd3d3LmdlZm91bmRhdGlvbi5jb22CEXd3dy5nZWNhcmVlcnMuY29tghZr aWRzLmVjb21hZ2luYXRpb24uY29tghRnZS5lY29tYWdpbmF0aW9uLmNvbYIMZ2Vw cmVkaXguY29tggpnZS5kaWdpdGFsgg13d3cuZ2UuY29tLnBrgg5nZS1kaWdpdGFs Lm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5j b20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSC AWkBZwB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjIKNh9MA AAQDAEYwRAIgHoK5LYN4DA3mvn2/tn37TKjrBeVc8/mYjDGSRRcdknwCIDi3bJH8 ZIAbYmoaNrOLRlrdztwBQmlr9UmwfFKV6AyHAHYAPxdLT9ciR1iUHWUchL4NEu2Q N38fhWrrwb8ohez4ZG4AAAGMgo2H8QAABAMARzBFAiEAvTztNP1bhoOc8lgWsJAW 4kCx3Fwjk0LCNPYl1HuOTK4CICw1RfNlCM5kKQh8EVzqCz02cNhw43nN9R16BGpP ZoymAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGMgo2H2QAA BAMARzBFAiEAsPutvwCjAhJc3Ar7VrFA+UIGBNaobJ1V8/YxPgh2drgCIGzEay+a ag7GsAQcvAMZiL0PiO39rQdMMZleDDrBZfPFMA0GCSqGSIb3DQEBCwUAA4IBAQBx S92UV9tBNm6QGq8INJjnNP1bkJyT+nyRSgkMPc+iBgKTxBVz9Zr2EWkmJ487/3tH KXFoeEVqtJPh8OUauz6+5V/pybVDUwgpV+1iwv4j1n2p/ZxPPGhIegYWaclGioUD q2uRfN4FhX5rxIkleVjU/Y5NDG1tEFm+9IRJIDmxyoEh5Uk3eZPwCTgzPBzz5Nqq Vv/5CqZXvOl2aHed/G7Gq0bGhoG+haHLse6fEapcWtw+dQU65phhfPDYVpPEsh6a 2yO2VXlL/iHpxmc8FhYytRBYE5URqrMY8QsgixBr/voCAM2MIliw2+jepixXRG0f DUx+qCCUl8+tQ2de2nfB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI8BJTBY9xEO0/t7MYJE Wn5EERymHTjy3tPjJ6JQ7xr5w8sFicFLPSLQRJD03NPYulVd7lye1XSJrV2X2uW1 /GbYHxe4oylYCTiVFEbXj55QUWqlN+gbKQesWg2rg9tIFOCKW9GwTiNcdd7p+8bt bNQk1CEBlbYApXq5PNpr/E61OWiY5brJO30GS9UYOtYxb05NjkVLFT7z9bqX5WmL uasMcWFtI3Vl1f4jriJVH+QPOdiPDPFRAutGfXI+8OsAr7xiRyuADCihe199jhJS aoO/5fXwcwixz8xTvB3lPOYLn7L1YI9wU1Y6ijvtPiuf2pJtGPuNa2m+vE6AR3Nr XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3853184162838304976838112101936521372 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaf.gecompany.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21783506588393826786689296876164815597446274609182045376141412239262816486418983658046180788855438840730238498577826216116108445693545630166293484273966902308038359012657012324521873156980279195830469714291543422032071100275727600785476242582739667343610559041587365113675577287308542802886265530813746309517561847288865229190980385047017657054849757452230567512612523379528534923004892467091429066688528959517274432164889998260930169380145805134877648743715045990426680053948254157777609780964201298032397070378186934433245789794431089385879466655757437504436252536985026006755338461456593437417963451672525054110559 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 200e9dc4a15d2b653a5daf02cb8d42f3fdff283f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1951 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaf.gecompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-americas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecompany.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geimaginationatwork.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geconnections.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan.geblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitstew.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-digital.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasil.txchnologist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1-800-ge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask-ge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixui.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geamericas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil.geblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecitizenship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geafrica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecompany.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bringgoodthingstolife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predix.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-digital.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gehealthyshare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecentennialflight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapanholdings.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapanholdings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthchoice.ge-healthahead.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixui.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemindsandmachines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapanholdings.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proficy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-america.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gebrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-ge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask-ge.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.geholidaycard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-ge.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopredix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geforcee.geblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predix.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-co.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-solr-dsg.gebrilliantyou.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-company.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geenergyfinancialservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.co.th' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proficy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geforyou.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-africa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.general-electric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoproject.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixui.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developinghealthglobally.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-company.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalelectric.tj' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedigital.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoterra.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-co.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedigital.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenge.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.800thinkge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gedestinationafrica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddie.ge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-australia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-company.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geglobalresearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1-800-ge.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-co.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask-ge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geholidaycard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualization.geblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-cities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geaustralia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.geglobalresearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexibility.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gefinland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-europe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gefoundation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecareers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.ecomagination.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepredix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.pk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-digital.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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