volaris.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 08:1b:20:32:3f:9a:01:fb:24:81:65:09:bc:17:6b:de was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=volaris.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:1b:20:32:3f:9a:01:fb:24:81:65:09:bc:17:6b:deSerial Number (int): 10774668999658949445966358215524838366
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 86:6b:83:9a:41:7d:e8:70:ce:14:23:7d:1d:e5:67:e8:4f:94:0c:0e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 4f:f2:44:b8:e3:73:a7:e9:6b:f7:73:6c:35:6f:d8:50:c7:6f:18:01
Fingerprint (sha256): 6d:9d:94:90:33:91:d5:75:33:19:d9:29:ce:a5:c9:49:6e:75:3a:b8:26:73:52:6d:bd:cb:c5:49:2f:78:f6:b3
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate volaris.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for volaris.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
volaris.com
*.volaris.com
*.webopsvolaris.com
webopsvolaris.com
*.volaris.com
*.webopsvolaris.com
webopsvolaris.com
Other certificates including the domain name volaris.com
(limited to 100 certificates)
incapsula.com
*.v.volaris.com
mq6.volaris.com
hoteles.volaris.com
incapsula.com
incapsula.com
*.volaris.com
tuexperiencia.volaris.com
incapsula.com
cp02.radius.volaris.com
16.distilcdn.com
viaja.volaris.com
mapa.volaris.com
s4.ct.cartrawler.com
volaris.com
tuexperiencia.volaris.com
s4.ct.cartrawler.com
revista.volaris.com
tuexperiencia.volaris.com
img.esign.volaris.com
incapsula.com
incapsula.com
incapsula.com
tuexperiencia.volaris.com
incapsula.com
incapsula.com
assistive.volaris.com
flights.volaris.com
incapsula.com
pre-web.volaris.com
incapsula.com
revista.volaris.com
*.webopsvolaris.com
jobs.volaris.com
incapsula.com
incapsula.com
incapsula.com
*.volaris.com
view-online.pricewatch.v.volaris.com
incapsula.com
mapa.volaris.com
revista.volaris.com
incapsula.com
tuexperiencia.volaris.com
volaris.com
incapsula.com
*.volaris.com
incapsula.com
16.distilcdn.com
*.volaris.com
hoteles.volaris.com
*.yana.volantio.com
img.esign.volaris.com
reservaciones.volaris.com
revista.volaris.com
jobs.volaris.com
revista.volaris.com
incapsula.com
jobs.volaris.com
*.volaris.com
myrefund.v.volaris.com
incapsula.com
s4.ct.cartrawler.com
s4.ct.cartrawler.com
*.yana.volantio.com
incapsula.com
volaris.com
link.volaris.com
mapa.volaris.com
incapsula.com
link.volaris.com
*.v.volaris.com
myrefund.v.volaris.com
incapsula.com
compare.volaris.com
s4.ct.cartrawler.com
tuexperiencia.volaris.com
mapa.volaris.com
incapsula.com
img.volaris.com
volaris.com
incapsula.com
incapsula.com
link.volaris.com
viaja.volaris.com
incapsula.com
incapsula.com
*.volaris.com
revista.volaris.com
mapa.volaris.com
*.volaris.com
*.yana.volantio.com
m.volaris.com
pricewatch.v.volaris.com
incapsula.com
incapsula.com
jobs.volaris.com
incapsula.com
incapsula.com
volaris.com
*.v.volaris.com
mq6.volaris.com
hoteles.volaris.com
incapsula.com
incapsula.com
*.volaris.com
tuexperiencia.volaris.com
incapsula.com
cp02.radius.volaris.com
16.distilcdn.com
viaja.volaris.com
mapa.volaris.com
s4.ct.cartrawler.com
volaris.com
tuexperiencia.volaris.com
s4.ct.cartrawler.com
revista.volaris.com
tuexperiencia.volaris.com
img.esign.volaris.com
incapsula.com
incapsula.com
incapsula.com
tuexperiencia.volaris.com
incapsula.com
incapsula.com
assistive.volaris.com
flights.volaris.com
incapsula.com
pre-web.volaris.com
incapsula.com
revista.volaris.com
*.webopsvolaris.com
jobs.volaris.com
incapsula.com
incapsula.com
incapsula.com
*.volaris.com
view-online.pricewatch.v.volaris.com
incapsula.com
mapa.volaris.com
revista.volaris.com
incapsula.com
tuexperiencia.volaris.com
volaris.com
incapsula.com
*.volaris.com
incapsula.com
16.distilcdn.com
*.volaris.com
hoteles.volaris.com
*.yana.volantio.com
img.esign.volaris.com
reservaciones.volaris.com
revista.volaris.com
jobs.volaris.com
revista.volaris.com
incapsula.com
jobs.volaris.com
*.volaris.com
myrefund.v.volaris.com
incapsula.com
s4.ct.cartrawler.com
s4.ct.cartrawler.com
*.yana.volantio.com
incapsula.com
volaris.com
link.volaris.com
mapa.volaris.com
incapsula.com
link.volaris.com
*.v.volaris.com
myrefund.v.volaris.com
incapsula.com
compare.volaris.com
s4.ct.cartrawler.com
tuexperiencia.volaris.com
mapa.volaris.com
incapsula.com
img.volaris.com
volaris.com
incapsula.com
incapsula.com
link.volaris.com
viaja.volaris.com
incapsula.com
incapsula.com
*.volaris.com
revista.volaris.com
mapa.volaris.com
*.volaris.com
*.yana.volantio.com
m.volaris.com
pricewatch.v.volaris.com
incapsula.com
incapsula.com
jobs.volaris.com
incapsula.com
incapsula.com
volaris.com
Certificate
The complete raw certificate details for volaris.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIQCBsgMj+aAfskgWUJvBdr3jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIwNzAwMDAwMFoXDTI0MDEzMDIzNTk1OVowFjEU MBIGA1UEAxMLdm9sYXJpcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDh1VwifH2oKiZ6AFRdONouZ3aWcLycjovlBI90yilucGjCFEsMjtBPczER ia3NRVKvu2rrwfwE9ZYjtta+LmDxGnRvK15QNsk/xOwF/7w0ZcVz2d1QBM3bJHXg 5akFCBw4Pr0fby60c9ykMjQOQ6Zut/5KPsXNBx8AUU5SUhS8mYgKFdxqepkBPfwY GVWPRBiu24dMK2cJxHQy1VZ3sh7tFl7y7XJ3rnu85M6WY/o1MvsXZlUv8Bldc3eH 6bzINdBx4LH8xoO/VxvQpWr2ttqQ6B+D+/AISbdcfim9EQi5jgjE6yNcxa7+clQn 4QJp8fbAizVCSZPe+Y0aKkqo7AKvAgMBAAGjggMaMIIDFjAfBgNVHSMEGDAWgBSB uA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUhmuDmkF96HDOFCN9HeVn6E+U DA4wTQYDVR0RBEYwRIILdm9sYXJpcy5jb22CDSoudm9sYXJpcy5jb22CEyoud2Vi b3Bzdm9sYXJpcy5jb22CEXdlYm9wc3ZvbGFyaXMuY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g LIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMG A1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh aHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo dHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0T AQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGGKeCPGQAABAMARzBFAiEAj9LIo8XOoD9x oVRCeHswdcr5UQYR6vyiKpnbsJf0TIwCIFaKvxMgCRYjTzQpwPD5X9+BBtw1YlLm ad5F6nyJM3jNAHUAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGG KeCPegAABAMARjBEAiA77NZyod7ZF5G+cZXYToXCD0GAkhMUhwfbmS9iHKowJgIg HZmsty6/HOvwITml6sfTBaoKF6Y9WVfG3CsOAG/I5gEAdgBIsONr2qZHNA/lagL6 nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYYp4I9WAAAEAwBHMEUCIQCAeKy/YdZvvIvQ IDOGNh5aXQIFXeWiqKIj65+sDJk7CAIgFqs7lbFBm5UOJhsy1Rs4leqn5ff18IQM cUpDsVl6CHIwDQYJKoZIhvcNAQELBQADggEBAKDybv1tL24yOvdAu6/tjkFR2nv6 jZ8fc4o+wSxKA02f0b/MxpW7ogkvte3qBc4cmXCUYWMEGUJyYk/QZgxUqC4xLgOO 87cjJDVtQcxbWIBNXPObmgw/SdcuXS3pq76asRRRYVGd5r6ukg1Fmxl4yckOnqrq mKCXz5Goa4AU1bf9poTqrwvw3+BN6PtkuMIyYgOxJx1v0F3LIp7vyoDQ5ZuYxMwa 3Tfj7qhjNdl8K0ZeKlfxxmyQ2aM/Q0Er34SuN1gEMRhsDDbBJnOCUd29anN437dt gIy/VaoEIPEALW0oCPsf+UGYsZ2hZU7xIlSee/Da2S+N1gipXdO1FDSa1uM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dVcInx9qComegBUXTja Lmd2lnC8nI6L5QSPdMopbnBowhRLDI7QT3MxEYmtzUVSr7tq68H8BPWWI7bWvi5g 8Rp0byteUDbJP8TsBf+8NGXFc9ndUATN2yR14OWpBQgcOD69H28utHPcpDI0DkOm brf+Sj7FzQcfAFFOUlIUvJmIChXcanqZAT38GBlVj0QYrtuHTCtnCcR0MtVWd7Ie 7RZe8u1yd657vOTOlmP6NTL7F2ZVL/AZXXN3h+m8yDXQceCx/MaDv1cb0KVq9rba kOgfg/vwCEm3XH4pvREIuY4IxOsjXMWu/nJUJ+ECafH2wIs1QkmT3vmNGipKqOwC rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10774668999658949445966358215524838366 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'volaris.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28508830305947642927217124376791615925042369617726872910892154230688456735312115409566874650151677775781823030219565520795016283938801720657082923672353805639342856777222771500458556531653496663503821404070126318238580891622228924716182455442510525658517713996334939036448045695362900139103110760276424602579441227186272322478186591312248675859696552416962127745774485841929370039934667070871748100352975003696015610596443293779813772001722587447075902140059967981944373500493780018755475303278231733800796614539707992711332316443839046610585051192665371523674857059025265154040553575768635295753288528927200415318703 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 866b839a417de870ce14237d1de567e84f940c0e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volaris.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webopsvolaris.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webopsvolaris.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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