app.prokurio.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 02:6a:e0:c3:3e:95:e0:03:56:68:00:68:f7:42:3c:4e was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=app.prokurio.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:6a:e0:c3:3e:95:e0:03:56:68:00:68:f7:42:3c:4eSerial Number (int): 3213398187186690157857237622105193550
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: a3:76:a2:d1:14:d0:b3:b0:97:e6:6e:90:5e:9d:27:20:55:48:36:52
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 58:a7:6e:6d:a1:5e:b6:94:19:96:02:98:74:15:81:76:1f:1d:2e:9c
Fingerprint (sha256): 6d:79:52:8f:c2:a6:77:51:f5:7c:5d:74:bf:ad:a7:2c:56:82:d1:d0:55:06:0d:77:5a:d8:08:66:e2:bb:bd:be
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate app.prokurio.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.prokurio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.prokurio.com
www.app.prokurio.com
www.app.prokurio.com
Other certificates including the domain name prokurio.com
(limited to 100 certificates)
status.pipeimob.com.br
status.markiiieb.com
status.ngxnetworks.com
iq.syncd.tech
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
status.quarklink.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.mapworks.io
shw.rmt.status.descartes.com
status.pipeimob.com.br
status.lenderdock.com
iq.syncd.tech
status.5starcoms.net
iq.syncd.tech
shw.rmt.status.descartes.com
status.prokurio.com
status.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.dayonebio.com
status.prokurio.com
status.zeasn.io
status.dealerexpert.ca
status.zeasn.io
status.naviscloudops.com
disponibilidade.activecorp.com.br
status.orangecityfl.gov
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.intellecommerce.com
www.prokurio.com
prokurio.com
status.prokurio.com
status.intellecommerce.com
status.anywhere.asolvi.app
disponibilidade.activecorp.com.br
iq.syncd.tech
status.mapworks.io
shw.rmt.status.descartes.com
status.lenderdock.com
status.facm.cl
status.ngxnetworks.com
status.dayonebio.com
status.apptrana.com
status.tronixtrm.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.apptrana.com
shw.rmt.status.descartes.com
status.canadianblackbook.com
status.zeasn.io
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
status.anywhere.asolvi.app
status.chekk.me
status.canadianblackbook.com
status.canadianblackbook.com
iq.syncd.tech
status.orangecityfl.gov
app.prokurio.com
disponibilidade.activecorp.com.br
status.5starcoms.net
prokurio.com
disponibilidade.activecorp.com.br
status.lenderdock.com
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.chekk.me
disponibilidade.activecorp.com.br
status.buyerlink.com
status.orangecityfl.gov
status.naviscloudops.com
status.anywhere.asolvi.app
shw.rmt.status.descartes.com
iq.syncd.tech
status.buyerlink.com
status.bozic.io
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.naviscloudops.com
status.lenderdock.com
status.prokurio.com
status.anywhere.asolvi.app
shw.rmt.status.descartes.com
status.apptrana.com
status.intellecommerce.com
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
status.markiiieb.com
status.ngxnetworks.com
iq.syncd.tech
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
status.quarklink.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.mapworks.io
shw.rmt.status.descartes.com
status.pipeimob.com.br
status.lenderdock.com
iq.syncd.tech
status.5starcoms.net
iq.syncd.tech
shw.rmt.status.descartes.com
status.prokurio.com
status.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.dayonebio.com
status.prokurio.com
status.zeasn.io
status.dealerexpert.ca
status.zeasn.io
status.naviscloudops.com
disponibilidade.activecorp.com.br
status.orangecityfl.gov
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.intellecommerce.com
www.prokurio.com
prokurio.com
status.prokurio.com
status.intellecommerce.com
status.anywhere.asolvi.app
disponibilidade.activecorp.com.br
iq.syncd.tech
status.mapworks.io
shw.rmt.status.descartes.com
status.lenderdock.com
status.facm.cl
status.ngxnetworks.com
status.dayonebio.com
status.apptrana.com
status.tronixtrm.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.apptrana.com
shw.rmt.status.descartes.com
status.canadianblackbook.com
status.zeasn.io
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
status.anywhere.asolvi.app
status.chekk.me
status.canadianblackbook.com
status.canadianblackbook.com
iq.syncd.tech
status.orangecityfl.gov
app.prokurio.com
disponibilidade.activecorp.com.br
status.5starcoms.net
prokurio.com
disponibilidade.activecorp.com.br
status.lenderdock.com
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.chekk.me
disponibilidade.activecorp.com.br
status.buyerlink.com
status.orangecityfl.gov
status.naviscloudops.com
status.anywhere.asolvi.app
shw.rmt.status.descartes.com
iq.syncd.tech
status.buyerlink.com
status.bozic.io
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.naviscloudops.com
status.lenderdock.com
status.prokurio.com
status.anywhere.asolvi.app
shw.rmt.status.descartes.com
status.apptrana.com
status.intellecommerce.com
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
Certificate
The complete raw certificate details for app.prokurio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdTCCA12gAwIBAgIQAmrgwz6V4ANWaABo90I8TjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwOTAwMDAwMFoXDTI1MDEwNzIzNTk1OVowGzEZ MBcGA1UEAxMQYXBwLnByb2t1cmlvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKOjNxxRqtjy6EtIzQGzI1ewGJUVczOvLiqeGhbkDOQf9/aUdZ+a OuIO9kYhL2xpvcHaQpjiUvg9O6e5fmqp7HrpnsEW5C5OdGM1D6/PeVAqz9TIuSdx A0K31kGHbuyE3pXa8xbt4wp2zbBFnWaL4kRFggcBPBz7wdVE6a+iYgL/QK73emeq lPRbsc6g05zHBypgFp2fxJY3vnVzX/C82vPeBsICq8IR/5HMcMMmyMvdZXO4vBEC 4hpjHclZDDIbt6LuDehraeTW42Q3NKcS/FM1dgjTNvsrD4pwmAfW01xqvk8WdDGI IV6iCLbrXreu6IujK7fPGJTn/M2WWV6B5xUCAwEAAaOCAZIwggGOMB8GA1UdIwQY MBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBSjdqLRFNCzsJfmbpBe nScgVUg2UjAxBgNVHREEKjAoghBhcHAucHJva3VyaW8uY29tghR3d3cuYXBwLnBy b2t1cmlvLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG Kmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1Bggr BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpv bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250 cnVzdC5jb20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFtw9Y/VJzyLq+keB7+9S2JZQjZTVacr HlCGTiD8UsP+H6Xh4WbEVdxOhW3eVQdIIc4JGBOnL2na5wxdSbpF8TT3BS4xGfT1 B/wvEqy0dLSA/mLPLYD/8EimyROJ9GVv2Htrrg+EZDc5Pk0CtkIXB5YafG6yK+kD DkSQPARD5yIBkL5+lTMAzqSZQYaNdLraPlsOMHfJohsUDWXtsFUeeaTbKfFL4zrS 3NgAFr07OqE6WKwswI3101yTFplCBBfP22x8K2Jk4O3mEQMJGlyfRFR/yPB4Mxop wTL8xqvzL9HwubX+m7+nhU+iii+YseMmzBvOSs+MJqcX7VnGGTSFohQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6M3HFGq2PLoS0jNAbMj V7AYlRVzM68uKp4aFuQM5B/39pR1n5o64g72RiEvbGm9wdpCmOJS+D07p7l+aqns eumewRbkLk50YzUPr895UCrP1Mi5J3EDQrfWQYdu7ITeldrzFu3jCnbNsEWdZovi REWCBwE8HPvB1UTpr6JiAv9Arvd6Z6qU9FuxzqDTnMcHKmAWnZ/Elje+dXNf8Lza 894GwgKrwhH/kcxwwybIy91lc7i8EQLiGmMdyVkMMhu3ou4N6Gtp5NbjZDc0pxL8 UzV2CNM2+ysPinCYB9bTXGq+TxZ0MYghXqIItutet67oi6Mrt88YlOf8zZZZXoHn FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3213398187186690157857237622105193550 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.prokurio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20657328161692633141061384991701971124778902545218161958543250703956004937160269820515079738999635045607955040183228870062232252731071069967927883466493616314697903130227710858124688003120787364426013757734945899341390414876230371202267160414347045204509067032129577460807523253725665463892274031629010712504678289576734998989102075219714839565992313069235587419834687175520611491662288196848061810786959611288937386787024136608416715876600510157284441503022240343574978174597141918664927615702916413900000329341357208034959744712450780310650238155306987506314268451401689310865043976995345436470028103082353547667221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a376a2d114d0b3b097e66e905e9d272055483652 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.prokurio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.prokurio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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