wsprod.kindlustus.ee
- If P&C Insurance AS -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0f:c4:8e:94:2f:2b:79:0e:dd:73:0b:00:7d:32:c0:94 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
If P&C Insurance AS
Organization:
If P&C Insurance AS
Organization unit: IT
Organization unit: IT
Locality:
Tallinn
Country: EE
Country: EE
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:c4:8e:94:2f:2b:79:0e:dd:73:0b:00:7d:32:c0:94Serial Number (int): 20959001963576685909473849083933409428
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 35:f5:51:34:52:4b:d2:c5:33:c3:29:43:19:6d:40:5a:d1:83:0e:37
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 0e:79:1f:64:6f:fd:ef:f9:79:b0:3a:d4:3b:50:8c:35:89:23:80:0a
Fingerprint (sha256): 6d:d0:a0:99:fa:c3:4c:ca:3c:46:40:33:0b:5e:dd:f2:c7:5b:a0:20:2c:89:4e:c4:7d:da:2a:01:9b:a2:ce:46
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate wsprod.kindlustus.ee
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wsprod.kindlustus.ee
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wsprod.kindlustus.ee
Other certificates including the domain name kindlustus.ee
(limited to 100 certificates)
partnertest.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
partnertest.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
spoint.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
test.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
www.kindlustus.ee
partnertest.kindlustus.ee
wsprod.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
wstest.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
partnertest.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
partnertest.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
spoint.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
test.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
www.kindlustus.ee
partnertest.kindlustus.ee
wsprod.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
wstest.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
partnertest.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
Certificate
The complete raw certificate details for wsprod.kindlustus.ee in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIQD8SOlC8reQ7dcwsAfTLAlDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjAwMzMxMDAwMDAwWhcNMjEwMzMxMTIwMDAwWjBpMQswCQYDVQQGEwJFRTEQMA4G A1UEBxMHVGFsbGlubjEcMBoGA1UECgwTSWYgUCZDIEluc3VyYW5jZSBBUzELMAkG A1UECxMCSVQxHTAbBgNVBAMTFHdzcHJvZC5raW5kbHVzdHVzLmVlMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmEXYOHIu+7vE78unfUDZr+cq5Lnb0fz PdNF49ITvJF+2QZNOAcO61Hv/LWnThBG1sr8VnTXb9BNY5vPFXtpljPD37IA270J aCwBjP/yOWKudXjLbC2jW1sQ9d13N6B7Hroizi8kDsqk4MAsn+nS0EqEvE47rY8i VitzeieIZpG4v7nIdgfmRl3/9MDa5sJfmxmwlMSP2ZZ6MGJ23o73SrKtZSSN1NSw 4tkHpgTcZjOuO3n8PV6J2oWd+kbvzYyEgE/OmZN1a0aX58qDSsq9UJa50VeJzF37 xs9tGCDuORuiOap6kXRfsyna2LF4ehx/aYNizhVCZWVruruWGWuCMQIDAQABo4IB rzCCAaswHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYE FDX1UTRSS9LFM8MpQxltQFrRgw43MB8GA1UdEQQYMBaCFHdzcHJvZC5raW5kbHVz dHVzLmVlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1Ro YXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw bwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0 ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhh d3RlUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQC8miN9Hx+gZVXgvdBal2PnqvR3Tw/it32Eexcj w8LEkWBEhMC5jm1bmOEilm49cSTP7wKbnKK/gecQRPbFLiPEM9W6t5BaxkbwSWxQ cTJ51GMKxHToTCNoeNXeZ5di0onnaCGBy5bniaNl/Vpbnj5MQyqp8diwUWeSaJSX 3LFudpzw5aw39jF5Gn1bimSRSn+DHKhDPN6Y06fRUjouNzP70UOSF8dMsEkoWqfT bpY5hDQEDUhbnHrgaXx2OattibTr2U0NbxdIBHs5X2a+mvEm6G4/HCCNRDf+bWwT sUb1IWY1ddOrZQo/jajXBTXVadHWJjZ6cuaP9Hg1uuKdcc6O -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmEXYOHIu+7vE78unfUD Zr+cq5Lnb0fzPdNF49ITvJF+2QZNOAcO61Hv/LWnThBG1sr8VnTXb9BNY5vPFXtp ljPD37IA270JaCwBjP/yOWKudXjLbC2jW1sQ9d13N6B7Hroizi8kDsqk4MAsn+nS 0EqEvE47rY8iVitzeieIZpG4v7nIdgfmRl3/9MDa5sJfmxmwlMSP2ZZ6MGJ23o73 SrKtZSSN1NSw4tkHpgTcZjOuO3n8PV6J2oWd+kbvzYyEgE/OmZN1a0aX58qDSsq9 UJa50VeJzF37xs9tGCDuORuiOap6kXRfsyna2LF4ehx/aYNizhVCZWVruruWGWuC MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20959001963576685909473849083933409428 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tallinn' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'If P&C Insurance AS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wsprod.kindlustus.ee' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18478670040367602309004747143333408141122684551585545794663828594230433211694061339585006006720605252824169948540673277113323107264245800099143070289301476453951520962451997539750259887210407507603298650237916183533185841723505455508107881364079442250899905230155027445058277761743041807944728560333390336098050925782267485123449622344783022041702124412676038373312396320272909860272512138848676296651265848576062612014986674163944722153651860600718892515923916528741383818762580457420713241229564380102980230959585001176128251556709215570591068916488286258895177448438582104737930995218107469552207208736665950192177 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35f55134524bd2c533c32943196d405ad1830e37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsprod.kindlustus.ee' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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