gigya-eu1.inspire.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:5e:5e:d6:5a:8f:06:bc:06:22:9c:05:ce:d0:f8:60 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gigya-eu1.inspire.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5e:5e:d6:5a:8f:06:bc:06:22:9c:05:ce:d0:f8:60Serial Number (int): 5806911417198017677040009450768889952
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 05:47:cb:57:09:bc:81:79:93:22:54:75:76:2d:3a:cd:f3:d5:e3:9a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 67:e6:90:e9:8d:5a:3b:7d:59:15:69:9b:27:c9:dc:b9:5a:16:7a:93
Fingerprint (sha256): 6f:49:d6:76:ab:f7:3e:26:82:d5:95:05:5f:98:71:cd:29:b1:06:d5:ca:61:f4:b9:58:54:f7:a5:95:1c:35:de
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate gigya-eu1.inspire.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gigya-eu1.inspire.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gigya-eu1.inspire.com
Other certificates including the domain name inspire.com
(limited to 100 certificates)
connect.inspire.com
inspire.client.janrain.com
cancer.inspire.com
links.inspire.com
akamai-san18.exacttarget.com
inspire-qatest-001.inspire.com
akamai-san18.exacttarget.com
corp.inspire.com
akamai-san18.exacttarget.com
faq.aheine.dev
corp.inspire.com
cancer.inspire.com
inspire-srinivas-001.inspire.com
gigya-eu1.inspire.com
cancer.inspire.com
www.corp.inspire.com
inspire-sprintlab.inspire.com
inspire-qatestia002.inspire.com
corp.inspire.com
inspire-nate008.inspire.com
*.inspire.com
data.dsp.inspire.com
corp.inspire.com
*.inspire.com
cancer.inspire.com
moorlandmassagetherapies.co.uk
inspire-manjunath-001.inspire.com
corp.inspire.com
*.inspire.com
inspire-sharique-001.inspire.com
corp.inspire.com
*.ghe.inspire.com
connect.inspire.com
connect.inspire.com
inspire-akash.inspire.com
survey.inspire.com
akamai-san18.exacttarget.com
corp.inspire.com
corp.inspire.com
thedesserthouse.posify.in
inspire-qatestia002.inspire.com
connect.inspire.com
corp.inspire.com
corp.inspire.com
corp.inspire.com
corp.inspire.com
connect.inspire.com
inspire-qatestia002.inspire.com
akamai-san18.exacttarget.com
inspire-mark-005.inspire.com
inspire.client.janrain.com
view.email.inspire.com
akamai-san18.exacttarget.com
cancer.inspire.com
admin.zuberance.com
*.inspire.com
cancer.inspire.com
data.dsp.inspire.com
www.perlasdeeter.com
corp.inspire.com
*.inspire.com
connect.inspire.com
survey.inspire.com
*.inspire.com
survey.inspire.com
www.retag.it
akamai-san18.exacttarget.com
gigya.inspire.com
inspire-qatestia002.inspire.com
survey.inspire.com
akamai-san18.exacttarget.com
*.inspire.com
inspire-qatestia002.inspire.com
www.savvy.insure
*.inspire.com
click.email.inspire.com
*.inspire.com
cancer.inspire.com
cancer.inspire.com
*.inspire.com
akamai-san18.exacttarget.com
cloud.email.inspire.com
ailepro.com
*.inspire.com
gigya-eu1.inspire.com
gigya.inspire.com
connect.inspire.com
connect.inspire.com
message.inspire.com
cancer.inspire.com
akamai-san18.exacttarget.com
gigya.inspire.com
cancer.inspire.com
inspire-swarnali.inspire.com
akamai-san18.exacttarget.com
sbstransit-test.quicta.io
cancer.inspire.com
*.inspire.com
cancer.inspire.com
cancer.inspire.com
inspire.client.janrain.com
cancer.inspire.com
links.inspire.com
akamai-san18.exacttarget.com
inspire-qatest-001.inspire.com
akamai-san18.exacttarget.com
corp.inspire.com
akamai-san18.exacttarget.com
faq.aheine.dev
corp.inspire.com
cancer.inspire.com
inspire-srinivas-001.inspire.com
gigya-eu1.inspire.com
cancer.inspire.com
www.corp.inspire.com
inspire-sprintlab.inspire.com
inspire-qatestia002.inspire.com
corp.inspire.com
inspire-nate008.inspire.com
*.inspire.com
data.dsp.inspire.com
corp.inspire.com
*.inspire.com
cancer.inspire.com
moorlandmassagetherapies.co.uk
inspire-manjunath-001.inspire.com
corp.inspire.com
*.inspire.com
inspire-sharique-001.inspire.com
corp.inspire.com
*.ghe.inspire.com
connect.inspire.com
connect.inspire.com
inspire-akash.inspire.com
survey.inspire.com
akamai-san18.exacttarget.com
corp.inspire.com
corp.inspire.com
thedesserthouse.posify.in
inspire-qatestia002.inspire.com
connect.inspire.com
corp.inspire.com
corp.inspire.com
corp.inspire.com
corp.inspire.com
connect.inspire.com
inspire-qatestia002.inspire.com
akamai-san18.exacttarget.com
inspire-mark-005.inspire.com
inspire.client.janrain.com
view.email.inspire.com
akamai-san18.exacttarget.com
cancer.inspire.com
admin.zuberance.com
*.inspire.com
cancer.inspire.com
data.dsp.inspire.com
www.perlasdeeter.com
corp.inspire.com
*.inspire.com
connect.inspire.com
survey.inspire.com
*.inspire.com
survey.inspire.com
www.retag.it
akamai-san18.exacttarget.com
gigya.inspire.com
inspire-qatestia002.inspire.com
survey.inspire.com
akamai-san18.exacttarget.com
*.inspire.com
inspire-qatestia002.inspire.com
www.savvy.insure
*.inspire.com
click.email.inspire.com
*.inspire.com
cancer.inspire.com
cancer.inspire.com
*.inspire.com
akamai-san18.exacttarget.com
cloud.email.inspire.com
ailepro.com
*.inspire.com
gigya-eu1.inspire.com
gigya.inspire.com
connect.inspire.com
connect.inspire.com
message.inspire.com
cancer.inspire.com
akamai-san18.exacttarget.com
gigya.inspire.com
cancer.inspire.com
inspire-swarnali.inspire.com
akamai-san18.exacttarget.com
sbstransit-test.quicta.io
cancer.inspire.com
*.inspire.com
cancer.inspire.com
cancer.inspire.com
Certificate
The complete raw certificate details for gigya-eu1.inspire.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgDCCA2igAwIBAgIQBF5e1lqPBrwGIpwFztD4YDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA2MTgwMDAwMDBaFw0xOTA3MTgx MjAwMDBaMCAxHjAcBgNVBAMTFWdpZ3lhLWV1MS5pbnNwaXJlLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALPQ3fwXsBAB5/wE/591OVBb5qq0kjmZ TkQRsu66dSDbzfKC3aJPkjoQ2B2spXjZreUrJ0qQI8xMzn4nNsgD/pkvF6a7s07n 6gWUWGvsugYlj0FFBqyditxZ8IqkNO6Y9CchSvFKhMO5z1yyi0YAyVA33qyYQ3hw MGCackFwn+RV2MT14jBGkwN0wFJtYu/Nm/25fbHYp8vXrY98ZVfjcNq0AVPQxVM9 OtZqZtemPmsZbcyFpnlIZTWNAwaNIps4h94/mR+rlpGgSWWrep+hu0c+ocjUIRIv O7WZWZQSAMuJnJpDExqEkxQoziZ9QK1UUqpuRsI0O5NMNrg1BsjmgE0CAwEAAaOC AY4wggGKMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBQFR8tXCbyBeZMiVHV2LTrN89XjmjAgBgNVHREEGTAXghVnaWd5YS1ldTEuaW5z cGlyZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxhqbOr92Zc9Xo/e jdmytE+vDhwVVVh179h02ZFk0SeOPXkRWBO08WQaU0V4wZHKRlUpstLYrPXjLPEh yGECxrlPYqUp8q6aBsvoxeJ2NggtpCJLUvmq3U+gWmgJ6/rguUuQPwW+2pmN7tUZ 5EWPiwWg70r6yHoIiqN3Rwt9S8cI9Va77HW08ZXTxaLvOVkM4pO0mVuURc4iR3BF GglFroeCoCjIqX6Y5lPh+5wpJeTZaU/etRmNx+lLVRHOCyEmBD9Lhw9bG0/bJ8ri yb/B+W04EkR3q1NUXLjJY9h2tKCLtmaSls03pszkehyDqGrIS22W5kimPsXxJ2FB zkRoMQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Dd/BewEAHn/AT/n3U5 UFvmqrSSOZlORBGy7rp1INvN8oLdok+SOhDYHayleNmt5SsnSpAjzEzOfic2yAP+ mS8XpruzTufqBZRYa+y6BiWPQUUGrJ2K3FnwiqQ07pj0JyFK8UqEw7nPXLKLRgDJ UDferJhDeHAwYJpyQXCf5FXYxPXiMEaTA3TAUm1i782b/bl9sdiny9etj3xlV+Nw 2rQBU9DFUz061mpm16Y+axltzIWmeUhlNY0DBo0imziH3j+ZH6uWkaBJZat6n6G7 Rz6hyNQhEi87tZlZlBIAy4mcmkMTGoSTFCjOJn1ArVRSqm5GwjQ7k0w2uDUGyOaA TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5806911417198017677040009450768889952 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gigya-eu1.inspire.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22699652808402185140125127098852306717258840432430597836277255231490822032935150171405701705284128499201143556923197444458145832117240788830816429813499646636597285429883807294721179081261482641211057898235917754407917736034049295039718172406766951806312066772980840108203277716890912548587531222934151013165447012559670477431440661205082064393940439718542413513872104400294588854584310032503758640801346704840522382851345502337177451642973476645941499786234494426045690792726533123748953619744221703362105257816965029456755979110110890783901167304006267209246800081803862553949503318789232814347410401503148555796557 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0547cb5709bc817993225475762d3acdf3d5e39a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigya-eu1.inspire.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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