*.stampede.ai
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:ae:ad:70:86:5a:cc:b0:06:93:e8:f4:dc:1f:82:e1 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.stampede.ai
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:ae:ad:70:86:5a:cc:b0:06:93:e8:f4:dc:1f:82:e1Serial Number (int): 19516169366370276814295755296119685857
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 08:15:69:ab:13:e4:c8:83:33:3c:55:a1:05:0e:08:57:ec:b6:2e:1c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c0:e1:7a:24:8c:70:43:ee:97:b0:06:ff:63:8c:1d:06:16:a0:59:a9
Fingerprint (sha256): 6e:12:17:11:5c:90:4c:07:a5:8e:2e:cb:1a:97:91:83:4c:08:43:74:1e:12:50:de:25:fe:18:78:2f:53:58:b0
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.stampede.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.stampede.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.stampede.ai
Other certificates including the domain name stampede.ai
(limited to 100 certificates)
status.achilles.com
status.attomus.com
status.achilles.com
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
status.attomus.com
status.attomus.com
status.attomus.com
status.achilles.com
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
survey.sembatechnologies.com
stg.stampede.ai
stampede.ai
www.ensminger.io
status.attomus.com
morpheus.stg.stampede.ai
spence.smartroad.eye3.cl
endpoint-security.status.broadcom.com
status.achilles.com
stampede.ai
www.whatsthat.online
status.achilles.com
stg.stampede.ai
stampede.ai
status.attomus.com
status.attomus.com
mobile.bbgo.city
endpoint-security.status.broadcom.com
survey.hookdm.com
stg.stampede.ai
status.attomus.com
www.plade.io
*.stampede.ai
status.achilles.com
status.achilles.com
endpoint-security.status.broadcom.com
status.achilles.com
brandlab.easysignage.app
status.attomus.com
stampede.ai
status.achilles.com
status.achilles.com
stampede.ai
status.attomus.com
widget3.shiftboolean.com
endpoint-security.status.broadcom.com
bscestate.com
outreach.stampede.ai
endpoint-security.status.broadcom.com
status.achilles.com
survey.clinark.org
stampede.ai
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
www.stampede.ai
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
morpheus.stg.stampede.ai
endpoint-security.status.broadcom.com
*.stampede.ai
prospect.stampede.ai
status.attomus.com
status.attomus.com
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
review.black
soft-ua.net
status.achilles.com
status.attomus.com
stampede.ai
endpoint-security.status.broadcom.com
survey.winningconversation.com.sg
status.achilles.com
endpoint-security.status.broadcom.com
status.achilles.com
stampede.ai
endpoint-security.status.broadcom.com
status.attomus.com
q.stampede.ai
*.blackbx.io
status.achilles.com
review.black
endpoint-security.status.broadcom.com
stampede.ai
stampede.ai
stampede.ai
www.melbournewebco.com
status.attomus.com
stampede.ai
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
status.attomus.com
roxberry-orders.crispnow.com
status.achilles.com
status.attomus.com
status.achilles.com
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
status.attomus.com
status.attomus.com
status.attomus.com
status.achilles.com
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
survey.sembatechnologies.com
stg.stampede.ai
stampede.ai
www.ensminger.io
status.attomus.com
morpheus.stg.stampede.ai
spence.smartroad.eye3.cl
endpoint-security.status.broadcom.com
status.achilles.com
stampede.ai
www.whatsthat.online
status.achilles.com
stg.stampede.ai
stampede.ai
status.attomus.com
status.attomus.com
mobile.bbgo.city
endpoint-security.status.broadcom.com
survey.hookdm.com
stg.stampede.ai
status.attomus.com
www.plade.io
*.stampede.ai
status.achilles.com
status.achilles.com
endpoint-security.status.broadcom.com
status.achilles.com
brandlab.easysignage.app
status.attomus.com
stampede.ai
status.achilles.com
status.achilles.com
stampede.ai
status.attomus.com
widget3.shiftboolean.com
endpoint-security.status.broadcom.com
bscestate.com
outreach.stampede.ai
endpoint-security.status.broadcom.com
status.achilles.com
survey.clinark.org
stampede.ai
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
www.stampede.ai
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
morpheus.stg.stampede.ai
endpoint-security.status.broadcom.com
*.stampede.ai
prospect.stampede.ai
status.attomus.com
status.attomus.com
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
review.black
soft-ua.net
status.achilles.com
status.attomus.com
stampede.ai
endpoint-security.status.broadcom.com
survey.winningconversation.com.sg
status.achilles.com
endpoint-security.status.broadcom.com
status.achilles.com
stampede.ai
endpoint-security.status.broadcom.com
status.attomus.com
q.stampede.ai
*.blackbx.io
status.achilles.com
review.black
endpoint-security.status.broadcom.com
stampede.ai
stampede.ai
stampede.ai
www.melbournewebco.com
status.attomus.com
stampede.ai
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
status.attomus.com
status.achilles.com
status.attomus.com
roxberry-orders.crispnow.com
status.achilles.com
Certificate
The complete raw certificate details for *.stampede.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIQDq6tcIZazLAGk+j03B+C4TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDEyNzAwMDAwMFoXDTI1MDIyNDIzNTk1OVowGDEW MBQGA1UEAwwNKi5zdGFtcGVkZS5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAL3ur+oT6DuCjnqVMzHnyjUbbYYQGcuUVVNN4snRGZlsD3V+iXRXDJ0k 8uU03RXXiV8uP1hbsctNBDEiLIWvrlLORqU4RnlLlJHWiOQm5Lf2OIX7B45IL+1o poeZPTV5rWamg1vtcsB4AWvQiGHUJ9soTWNBMO3sx19kJuds5yAq2TP825/AvRDo f8JXIQ9l8H0OnTC50qKK2lL6ycpf9kqay7DivPHgigTzrnjGFGuFntb7tDvdrtf2 nyd4XqrwJwX4aV4dOqWXSlrMb+AGzlD3gByw3vWtdaQCkACpe9FNwNp9pmjI+cnR PrtK5oM51etz7KzWHVJE8p4qI0Cl3ckCAwEAAaOCAugwggLkMB8GA1UdIwQYMBaA FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQIFWmrE+TIgzM8VaEFDghX 7LYuHDAYBgNVHREEETAPgg0qLnN0YW1wZWRlLmFpMBMGA1UdIAQMMAowCAYGZ4EM AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVz dC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/ BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYATnWjJ1yaEMM4W2zU3z9S 6x3w4I4bjWnAsfpksWKaOd8AAAGNSGYm1QAABAMARzBFAiBpTl9yaFwsrzLFfFTG WuShxKbme5rHXvKwSx5s7ZEfdgIhAMCzMjLJfAu0/foR+hBtbXsz5pSv7LWexV/p LDoWAB16AHcAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNSGYm 7QAABAMASDBGAiEArpofcdW9aD5p7upmiwuy2jKaHILZQSOWpSsa1AbOBkACIQCd 1v1Menp3EgH9vE6/8gkGFOR62UzeFKMEfp6UuC4ZaQB3AObSMWNAd4zBEEEG13G5 zsHSQPaWhIb7uocyHf0eN45QAAABjUhmJxgAAAQDAEgwRgIhAJ/yQijpVXTalAwV kR+ETzW0ScONY4QUwfdB28qGmrR4AiEAoVuT7zN87PQoTumKqLfKuK1h+S55bR38 KsGg7PBMnCowDQYJKoZIhvcNAQELBQADggEBALAXUdPuYwFEJfwQg50JJFKXv49A zhEaHmCdrGAeUQueMZQiF3/tu+x2FMz4pVLpDvrxca0ctt3CGtwca7kjo7g9V0/Y gHF15yKZMExojAKerMa7pFmhvLlTABPWXmgVHPB8EiSsVmxoDLEMLPfBASDrpnLG 7Uvx+NCNjZhR+y/rPdkLTWWBduuyBT1g8XdOY+rdw6NwH9X/wxcRP6uUP2lH7mHZ 8WwXJBj/JncAJTVpfYAoreY9yy9hY9aDRUYeLROgHc+jJmYgb88uX4nYNubUGl9g ZnpFksk600KajJFLZCBYIpvMi4UP6TcMZy79E3xjBY8wDhr/ZHjvR8kDbho= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve6v6hPoO4KOepUzMefK NRtthhAZy5RVU03iydEZmWwPdX6JdFcMnSTy5TTdFdeJXy4/WFuxy00EMSIsha+u Us5GpThGeUuUkdaI5Cbkt/Y4hfsHjkgv7Wimh5k9NXmtZqaDW+1ywHgBa9CIYdQn 2yhNY0Ew7ezHX2Qm52znICrZM/zbn8C9EOh/wlchD2XwfQ6dMLnSooraUvrJyl/2 SprLsOK88eCKBPOueMYUa4We1vu0O92u1/afJ3heqvAnBfhpXh06pZdKWsxv4AbO UPeAHLDe9a11pAKQAKl70U3A2n2maMj5ydE+u0rmgznV63PsrNYdUkTyniojQKXd yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19516169366370276814295755296119685857 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stampede.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23976740666667168081608885865511368296889316640322650677258065107017294518917182983013492231822658549180884576462174502843907068606431187801626959711730540133293875772314004746275855087887542131255145874315401876141466090397884012654478569231512446506443310351111881682374276084118737922690273625816678291855901704306782398320106693392861278302847844430435852845717876939848969006202517123122117415397386462781191981655026165052014691321825797831025963223960497452988472108441388288113087668055595520107811300606426446408285782890308600407171200621518661980423938890061671739294896273552713973952572514811488682499529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 081569ab13e4c883333c55a1050e0857ecb62e1c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stampede.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a0076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d486626d500000403004730450220694e5f72685c2caf32c57c54c65ae4a1c4a6e67b9ac75ef2b04b1e6ced911f76022100c0b33232c97c0bb4fdfa11fa106d6d7b33e694afecb59ec55fe92c3a16001d7a0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d486626ed0000040300483046022100ae9a1f71d5bd683e69eeea668b0bb2da329a1c82d9412396a52b1ad406ce06400221009dd6fd4c7a7a771201fdbc4ebff2090614e47ad94cde14a3047e9e94b82e1969007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d4866271800000403004830460221009ff24228e95574da940c15911f844f35b449c38d638414c1f741dbca869ab478022100a15b93ef337cecf4284ee98aa8b7cab8ad61f92e796d1dfc2ac1a0ecf04c9c2a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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