*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:9e:86:a7:87:9d:21:0f:67:02:b7:20:1f:41:f2:c7 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9e:86:a7:87:9d:21:0f:67:02:b7:20:1f:41:f2:c7
Serial Number (int): 2152342015393881645971685880470041287
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ff:ca:2a:09:eb:3b:88:d9:c7:96:7a:ff:3b:42:bd:f0:36:36:48:2d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 55:b4:1e:94:36:a7:65:81:ea:25:af:c5:cb:cf:4a:2e:52:74:46:6e
Fingerprint (sha256): 6f:24:71:d1:35:61:13:c3:d1:72:dc:a2:99:d3:5e:72:db:94:98:78:84:a9:e3:7b:4c:17:b0:41:89:4d:f4:24

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn

Other certificates including the domain name a2z.org.cn

(limited to 100 certificates)
cn-northwest-1.cti.api.tickety.a2z.org.cn
cn-northwest-1.prod.tnsv2.taxes.insights.aws.a2z.org.cn
prod-zhy-o.cn-northwest-1.ro.bsg.budgets.insights.aws.a2z.org.cn
idp.integ.federate.a2z.org.cn
main.bsk.cn-northwest-1.beta.basin.security.a2z.org.cn
cn-north-1.prod.request-queue.composition.config.a2z.org.cn
sagemaker.pre-prod.cn-north-1.ml-platform.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
cn-northwest-1.gamma.oas.ops-auth.insights.aws.a2z.org.cn
*.d-c-ss.prod.cn-northwest-1.canary.identity.iot.aws.a2z.org.cn
vs.d2c.marketing.aws.a2z.org.cn
ease.gamma.cn-northwest-1.ml-platform.aws.a2z.org.cn
midway.cn-northwest-1.cti.api.tickety.a2z.org.cn
neo.preprod.cn-northwest-1.ml-platform.aws.a2z.org.cn
preprod-cn-north-1.scs.gluestudio.a2z.org.cn
cn-northwest-1.preprod.trs.cp-transaction.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
yavapai-runtime.gamma.cn-north-1.ml-platform.aws.a2z.org.cn
cn-northwest-1.prod.manifest.index.insights.aws.a2z.org.cn
versiongate.prod.cn-north-1.quicksight.aws.a2z.org.cn
cn-north-1.preprod.trecs.trusted-advisor.aws.a2z.org.cn
cn-north-1.prod.saml.afi.aws.a2z.org.cn
environment.preprod.cn-north-1.ml-platform.aws.a2z.org.cn
ease.gamma.cn-north-1.ml-platform.aws.a2z.org.cn
cn-northwest-1.prod.web.shoehorn.security.a2z.org.cn
cn-northwest-1.prod.mds.cloudtrail.aws.a2z.org.cn
cn-northwest-1.gamma.iris.enterprise.insights.aws.a2z.org.cn
web71.v2.ssl-for-saas.demo.solutions.aws.a2z.org.cn
versiongate.integ.cn-north-1.quicksight.aws.a2z.org.cn
onebox.subledger.cn-northwest-1.marketplace.aws.a2z.org.cn
api.cn-north-1.gamma.handover.aws.a2z.org.cn
rcm.prod.cn-northwest-1.controller.cryo.aws.a2z.org.cn
web147.v2.ssl-for-saas.demo.solutions.aws.a2z.org.cn
cn-northwest-1.prod.storage.communication.fin-x.aws.a2z.org.cn
operational-website.prod.cn-northwest-1.ses.aws.a2z.org.cn
lcms-staging.prod-c00.bjs.codemanagement.lambda.aws.a2z.org.cn
go.cn-north-1.prod.deeplinks.console.aws.a2z.org.cn
eds.cn-northwest-1.prod.wadi.identity.aws.a2z.org.cn
dvxfaegoydioectsjjuh.nw-runner.demo.solutions.aws.a2z.org.cn
*.d-c-ss.prod.cn-northwest-1.canary.identity.iot.aws.a2z.org.cn
cn-northwest-1.prod.account-events.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
rrs.577156531925.cn-north-1.rialto.rds.a2z.org.cn
rcs.565403883287.cn-north-1.rialto.rds.a2z.org.cn
cn-northwest-1.gamma.ads.overwatch.insights.aws.a2z.org.cn
prod.cn-northwest-1.ifs.forecast.insights.aws.a2z.org.cn
dbproxy.dbproxy.integ.cn-northwest-1.quicksight.aws.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
cn-northwest-1.prod.trs.cp-transaction.aws.a2z.org.cn
prod.griffonquery.cn-north-1.marketplace.aws.a2z.org.cn
roleproxy.gamma.cn-northwest-1.ml-platform.aws.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
lldps.prod.cn-north-1.ml-platform.aws.a2z.org.cn
cn-northwest-1.prod.broker.index.insights.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
d5494f4d3a.cnnw1-az1.cn-northwest-1.athena.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
ops-api.cn-north-1.pi.a2z.org.cn
*.d-c-ss.prod.cn-northwest-1.canary.identity.iot.aws.a2z.org.cn
montecarlo.preprod.cn-north-1.ml-platform.aws.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
neo.preprod.cn-north-1.ml-platform.aws.a2z.org.cn
prod.cn-northwest-1.ifs.forecast.insights.aws.a2z.org.cn
llds.prod.cn-north-1.ml-platform.aws.a2z.org.cn
training-metrics.gamma.cn-northwest-1.ml-platform.aws.a2z.org.cn
cells.swift.cn-northwest-1.prod.beaglerock.aws.a2z.org.cn
maeve.preprod.cn-north-1.ml-platform.aws.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
environment.preprod.cn-northwest-1.ml-platform.aws.a2z.org.cn
main.control-room.cn-north-1.beta.basin.security.a2z.org.cn
prod.cn-northwest-1.osas.organizations.aws.a2z.org.cn
a9f85279a4.cnn1-az1.gamma-cn-north-1.athena.aws.a2z.org.cn
api.zhy.devgamma.async.basilisk.platform.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
reencrypt.cnn1-cn-north-1.xrab.rds.a2z.org.cn
preprod.cn-northwest-1.rvs.billing.a2z.org.cn
cn-northwest-1.gamma.pclis.godzilla.insights.aws.a2z.org.cn
prod.cn-northwest-1.remo.usage-generation.a2z.org.cn
roleproxy.prod.cn-northwest-1.ml-platform.aws.a2z.org.cn
environment.prod.cn-northwest-1.ml-platform.aws.a2z.org.cn
cn-nw-1.prod.banner.heimdall.insights.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
prod.cn-north-1.gameservergroups.gamelift.aws.a2z.org.cn
mck-rotator.prod-cn-northwest-1-adam.prod.efs.aws.a2z.org.cn
*.d-c-ss.prod.cn-northwest-1.canary.identity.iot.aws.a2z.org.cn
*.d-c-ss.prod.cn-northwest-1.canary.identity.iot.aws.a2z.org.cn
api.cn-northwest-1.prod.pricing.billing.a2z.org.cn
*.d-c-ss.gamma.cn-north-1.canary.identity.iot.aws.a2z.org.cn
cn-northwest-1.prod-onebox.cips.dna.insights.aws.a2z.org.cn
977a46e097.cnnw1-az3.gamma-cn-northwest-1.athena.aws.a2z.org.cn
utilization.pre-prod.cn-northwest-1.ml-platform.aws.a2z.org.cn
cn-northwest-1.gamma.ads.overwatch.insights.aws.a2z.org.cn
integ.cn-northwest-1.query.redshift.aws.a2z.org.cn
*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn
*.d-c-ss.prod.cn-northwest-1.canary.identity.iot.aws.a2z.org.cn
cn-northwest-1.preprod.dcs.aether.insights.aws.a2z.org.cn
6bf215b3de.cnnw1-az3.gamma-cn-northwest-1.athena.aws.a2z.org.cn
cn-northwest-1.gamma.service.cat.insights.aws.a2z.org.cn

Certificate

The complete raw certificate details for *.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvwHDBYKYs0HKTjAsraV
PPZFj18MFKgYP5pxOwRduLoOzXRVLXYvAonQOTuvYfs3DXYEDGjwA3o4uBt0kfrj
RUofdLJ6yxYLLbyQdzEvSgGBpjnqmRoagHGfe2h7/Y1jiPNX4lfHzfTS5h69WTGT
QHHYsUzgDXEGGU+en4OP7R45jDQT04chTnUtm/MYEo8mS3mkCsrVXANCclpW02Ii
oHrgYJzqUOSPERD5SbMyp7AP6ru3lsaT8dRZUXnpVyyIUOQowTKPloMzWoCM5hc6
UZOx0Sxi8FCc3UNkCzEjxKL8md35zFkiBux8sNbOyNzCLLLvokBZgxfzua3MvAa6
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2152342015393881645971685880470041287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24614510569512497812746036285719572216994579029149821366043103399597967203282911364722242707183061069202910924041171402697175955371225928880814745062672196433735893811932795928418716041930132483103204766169030075913277509036411293512525990499075502899768854738668998383397034895456707000923073064613298221979234409949402203586134372054668709437848396196156540972015942450064406851157219863341124260706325535581968002580714385709242946481045434578578244788208540797323740694529345616787866254713126158523709837329269513015312359864469191274668837745528696037428919550460379183732100015711748996207186518475103583779489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffca2a09eb3b88d9c7967aff3b42bdf03636482d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-c-ss.prod.cn-north-1.canary.identity.iot.aws.a2z.org.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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