ota.cash.api.paytheory.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0c:94:7d:e3:c4:2a:0f:58:6b:0b:cf:14:ef:da:66:8a was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ota.cash.api.paytheory.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:94:7d:e3:c4:2a:0f:58:6b:0b:cf:14:ef:da:66:8aSerial Number (int): 16721749231185401436607481223122151050
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 37:c0:61:f9:48:a8:4f:99:c8:e5:66:41:e7:0c:93:08:c5:f5:63:10
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): c4:76:2b:86:b4:9f:64:c9:d3:9a:63:22:d1:b3:bf:49:aa:cb:98:2c
Fingerprint (sha256): 6e:3a:5d:66:c0:55:f2:c3:53:14:93:ce:94:fc:c5:d0:85:5e:49:0d:9a:24:48:8c:5f:44:44:0e:5e:4a:ef:b6
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate ota.cash.api.paytheory.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ota.cash.api.paytheory.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ota.cash.api.paytheory.com
Other certificates including the domain name paytheory.com
(limited to 100 certificates)
carefeed.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
Certificate
The complete raw certificate details for ota.cash.api.paytheory.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgIQDJR948QqD1hrC88U79pmijANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxMTAwMDAwMFoXDTI1MDEwODIzNTk1OVowJTEj MCEGA1UEAxMab3RhLmNhc2guYXBpLnBheXRoZW9yeS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDXM0xHnkutBMk6fT9+50I1RzC8oSMbDTx8r9IJ gbAhv6mymR+G7K34GdhO5cjaM3QVsskLpquBdKuhHmQR1V9nNPmbka3F65R65uvM oqZdQ0zzGohU0xLOrlduDf6qUtV9fiTvHpdBxxNfkCXLc2/qsUgnVj1iE8jQiF4C /kASz7wDHT/d2O3e+Abd2oR6BQBtYnKq7/l3WOBhsRE8ggFAVIaCDeo8viFLeww9 ESbd/4hLRll9d1qeOU0UXn9cqUC5Dg/gQ3I0Z9yXOjdyGlkwPS3CMXDqBrGN/hKp DYYEtHa9Emf4klnCQRdg0yaok77NhZ6a6bfbwRDBWGDvJYqrAgMBAAGjggGGMIIB gjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUN8Bh +UioT5nI5WZB5wyTCMX1YxAwJQYDVR0RBB4wHIIab3RhLmNhc2guYXBpLnBheXRo ZW9yeS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1 c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqZmYyAqWUcvrVneTwG/T3zfgLLxJRMUs mvwf/LazrpT8IYAIk3Bexf1cv2EEAaaY6eBoMSo8tmlWlRJdLiqms62BPynfYCCT 5fd2lAaM4OZMF4SewHXV4ZuL+Jc+miDkDJcUOk3caDEahlRNkT9a1l3kw/tEb3/y Ca6+zmQ6tHTNlf5X1Dvl80IzaVb7Mq0JC0zDI44yim86ShTRTFgsllvLyXuufHET V7oABQu+Nt607FReTKFEBGcWFDP3vlclcjtOamN1+0LSj+VqwehHzeYaoFs2BfiF vuuYRrSdONgpU1zL31u4YjTUd1qQH84/f+lM0/tBe8oSm9QmCRiP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zNMR55LrQTJOn0/fudC NUcwvKEjGw08fK/SCYGwIb+pspkfhuyt+BnYTuXI2jN0FbLJC6argXSroR5kEdVf ZzT5m5GtxeuUeubrzKKmXUNM8xqIVNMSzq5Xbg3+qlLVfX4k7x6XQccTX5Aly3Nv 6rFIJ1Y9YhPI0IheAv5AEs+8Ax0/3djt3vgG3dqEegUAbWJyqu/5d1jgYbERPIIB QFSGgg3qPL4hS3sMPREm3f+IS0ZZfXdanjlNFF5/XKlAuQ4P4ENyNGfclzo3chpZ MD0twjFw6gaxjf4SqQ2GBLR2vRJn+JJZwkEXYNMmqJO+zYWemum328EQwVhg7yWK qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16721749231185401436607481223122151050 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ota.cash.api.paytheory.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27166531538423048867473363604388795779037169468171111388548915595339164326936201303723709172735501824322875463035667676996737850858127812402014853186210143171582042972444517150554201418867475772312024259630954993320887451173155235152203640080378936945004924812588644885010333909689509914283137351677267986970362194106489333524428711607063385668538351890171049218731147255014844779390521098588503499523082338835700954884836544512868298497682893297452942883869905265132166120902223200277142782091008564477188577776053275798989492773649688241312374135423748391427883234888946679465229729838074975628084947476988742175403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37c061f948a84f99c8e56641e70c9308c5f56310 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ota.cash.api.paytheory.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0060a99998c80a9651cbeb567793c06fd3df37e02cbc4944c52c9afc1ffcb6b3ae94fc21800893705ec5fd5cbf610401a698e9e068312a3cb6695695125d2e2aa6b3ad813f29df602093e5f77694068ce0e64c17849ec075d5e19b8bf8973e9a20e40c97143a4ddc68311a86544d913f5ad65de4c3fb446f7ff209aebece643ab474cd95fe57d43be5f342336956fb32ad090b4cc3238e328a6f3a4a14d14c582c965bcbc97bae7c711357ba00050bbe36deb4ec545e4ca1440467161433f7be5725723b4e6a6375fb42d28fe56ac1e847cde61aa05b3605f885beeb9846b49d38d829535ccbdf5bb86234d4775a901fce3f7fe94cd3fb417bca129bd42609188f