*.staging.favor.cuona.io
Issued by Amazon
About this certificate
This digital certificate with serial number 04:4d:c5:be:71:aa:06:61:70:63:e6:5a:b0:92:ca:34 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.staging.favor.cuona.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4d:c5:be:71:aa:06:61:70:63:e6:5a:b0:92:ca:34Serial Number (int): 5720729564466995939087858765749471796
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ad:ad:64:e6:98:7e:7b:59:e3:cd:27:c3:d2:5e:a3:64:e2:f6:22:c8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): aa:56:41:fa:52:3a:bc:b7:35:a3:10:87:8a:7a:71:c3:67:39:76:09
Fingerprint (sha256): 6f:5b:cb:c3:1f:da:d1:88:a8:da:36:e0:70:f5:58:6a:6f:59:53:91:8c:66:5c:ca:92:8f:52:91:19:43:44:94
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.staging.favor.cuona.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.staging.favor.cuona.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.staging.favor.cuona.io
Other certificates including the domain name cuona.io
(limited to 100 certificates)
link.thecup.kr
redirect.madreleczenie.pl
hamtest.ca
dev.restamiga.com
www.wordhyve.com
warfronttostorefront.com
www.pinioninnovations.com
*.bleeding-edge.cuona.io
riskmap.hospitalmicrobiome.care
build-experiments.cuona.io
lager-demo.parklab.app
suriname-auth.ibep-prod.com
api.karmuh.app
ozone.energy-portal.com.au
cuona.io
api.freetrade.io
admin.dictiro.de
www.shedcloud.com.br
dictation.io
ema.ai
patrickb.dev
beta.stockl.io
*.staging.favor.cuona.io
pierinasanchez.nyc
speakers.360idev.com
*.cuona.io
www.ttsss.app
api.favor.cuona.io
bim.btib.fr
favor.cuona.io
bleeding-edge.record.manage.cuona.io
riggedwheel.com
www.deckf.org
flights.matousek.co.uk
marionlaitselart.fr
*.bleeding-edge.cuona.io
www.10v3.us
www.mettle-studio.co.uk
www.kingsleyelrica.com
wizheard.com
faces-test.royalcollege.ca
www.bluefishfoundry.com
gradingbyblackjadedwolf.nyc
*.bleeding-edge.favor.cuona.io
*.bleeding-edge.cuona.io
cuona.io
cuona-endpoint.api.dev.cuona.io
acuitymd.com
cuona.io
demo-share.konaiceboost.com
leaderboards.giflytics.com
back-office-stage.aires.digital
staging.investhumber-netzero.com
camilleburkhardt.com
wigglebot.mrwiggly.co.uk
whatchado.ch
www.gloffye.com
lyricalgoblin.com
grandilo.com
cuona.io
api.karmuh.app
www.getthezone.app
2getherllc.com
2getherllc.com
www.iprabhat.com
bleeding-edge.cuona.io
*.staging.favor.cuona.io
invest-siam.com
test.tutamkhamon.com
checkin.uat.theout.com
stg-examai.skillupai.com
www.proautoma.com
artpic2000.com
bleeding-edge.cuona.io
blurail.tk
party.sallyfrancesco.net
fundmy.xyz
csumusic2020.emirror.app
fishchenko.com
cuona.io
cognate-ai.com
*.production.favor.cuona.io
www.arends.xyz
kccbl.in
partner.penterm.com
astrolyra.com
linkstaging.cocomart.in
checkin.uat.theout.com
experiencelegendbiotech.com
dantruong.net
cuona.io
autoimpute.upm.edu.my
referrals.jwelpix.com
fishchenko.com
www.culinaria.app.br
*.bleeding-edge.favor.cuona.io
aceiteasy.com
www.erponclouds.ca
*.cuona.io
app.vidocto.com
redirect.madreleczenie.pl
hamtest.ca
dev.restamiga.com
www.wordhyve.com
warfronttostorefront.com
www.pinioninnovations.com
*.bleeding-edge.cuona.io
riskmap.hospitalmicrobiome.care
build-experiments.cuona.io
lager-demo.parklab.app
suriname-auth.ibep-prod.com
api.karmuh.app
ozone.energy-portal.com.au
cuona.io
api.freetrade.io
admin.dictiro.de
www.shedcloud.com.br
dictation.io
ema.ai
patrickb.dev
beta.stockl.io
*.staging.favor.cuona.io
pierinasanchez.nyc
speakers.360idev.com
*.cuona.io
www.ttsss.app
api.favor.cuona.io
bim.btib.fr
favor.cuona.io
bleeding-edge.record.manage.cuona.io
riggedwheel.com
www.deckf.org
flights.matousek.co.uk
marionlaitselart.fr
*.bleeding-edge.cuona.io
www.10v3.us
www.mettle-studio.co.uk
www.kingsleyelrica.com
wizheard.com
faces-test.royalcollege.ca
www.bluefishfoundry.com
gradingbyblackjadedwolf.nyc
*.bleeding-edge.favor.cuona.io
*.bleeding-edge.cuona.io
cuona.io
cuona-endpoint.api.dev.cuona.io
acuitymd.com
cuona.io
demo-share.konaiceboost.com
leaderboards.giflytics.com
back-office-stage.aires.digital
staging.investhumber-netzero.com
camilleburkhardt.com
wigglebot.mrwiggly.co.uk
whatchado.ch
www.gloffye.com
lyricalgoblin.com
grandilo.com
cuona.io
api.karmuh.app
www.getthezone.app
2getherllc.com
2getherllc.com
www.iprabhat.com
bleeding-edge.cuona.io
*.staging.favor.cuona.io
invest-siam.com
test.tutamkhamon.com
checkin.uat.theout.com
stg-examai.skillupai.com
www.proautoma.com
artpic2000.com
bleeding-edge.cuona.io
blurail.tk
party.sallyfrancesco.net
fundmy.xyz
csumusic2020.emirror.app
fishchenko.com
cuona.io
cognate-ai.com
*.production.favor.cuona.io
www.arends.xyz
kccbl.in
partner.penterm.com
astrolyra.com
linkstaging.cocomart.in
checkin.uat.theout.com
experiencelegendbiotech.com
dantruong.net
cuona.io
autoimpute.upm.edu.my
referrals.jwelpix.com
fishchenko.com
www.culinaria.app.br
*.bleeding-edge.favor.cuona.io
aceiteasy.com
www.erponclouds.ca
*.cuona.io
app.vidocto.com
Certificate
The complete raw certificate details for *.staging.favor.cuona.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhjCCA26gAwIBAgIQBE3FvnGqBmFwY+ZasJLKNDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMjIwMDAwMDBaFw0yMTAyMjIx MjAwMDBaMCMxITAfBgNVBAMMGCouc3RhZ2luZy5mYXZvci5jdW9uYS5pbzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANGq1lbGqu0//cYl2X4WVEYRUu/z ITf5cHjCrghYZOgkWLkF6SO1nHQSSnMdSZ2wn494xtZetI8I54kVAJsVTW8BVzWN 4N8ukRADfimyJarzQVBxmMf5zJeTJIqnHdvJjR5YtbaPpMp8I1vL/U+ZDjWXSgNd XGTf37tco+KitX3C1Dz+/3HiIxw/BTFx7lM/HcDs9mRs1L/ytGMqrIwtmJHuN77i jVer6VsZZLFvXNVnsVeUxS74JckgPUC8z9jo4xu1odV1dVD/HNaY2KV0198fGZb6 StzOFYNW6j38n23q72V/vFu/fArn3WQe9Rh9/93n7yt0jtNr0ze1EJpMPgsCAwEA AaOCAZEwggGNMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud DgQWBBStrWTmmH57WePNJ8PSXqNk4vYiyDAjBgNVHREEHDAaghgqLnN0YWdpbmcu ZmF2b3IuY3VvbmEuaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1s AQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6qM6lJc 9Y9x+AlO91LcB+RpyoiVbTMydQD9vzHHdx6hRhwOW97v4yzC/LbUR4mH4x27Wr8I xyMQJaW7oBiogs/MHJa1zWLwPOimT6gWh0/O+hP0Ete3XumtJYHdCUnAXQHlWmPI PCNQdhgpGScHNYB+Y89w7K3a3Ofq/PUPz/2UcdzIQ8PiclS2ZYABuZb5q0qXRkVn Pm1ZMs1cbud6bPdig0o4slgOrv8adgh0c0XE2rhzvK5l8kj3+MF1eJvE9OJw3oyx 31THQ+GRyk57MoHOcp2QQKnFBGBG+858xNxQI1o/CY3Uwsb4ZSwVTaSsOkLWAzmP Eijd4U5szEDRbQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0arWVsaq7T/9xiXZfhZU RhFS7/MhN/lweMKuCFhk6CRYuQXpI7WcdBJKcx1JnbCfj3jG1l60jwjniRUAmxVN bwFXNY3g3y6REAN+KbIlqvNBUHGYx/nMl5Mkiqcd28mNHli1to+kynwjW8v9T5kO NZdKA11cZN/fu1yj4qK1fcLUPP7/ceIjHD8FMXHuUz8dwOz2ZGzUv/K0YyqsjC2Y ke43vuKNV6vpWxlksW9c1WexV5TFLvglySA9QLzP2OjjG7Wh1XV1UP8c1pjYpXTX 3x8ZlvpK3M4Vg1bqPfyfbervZX+8W798CufdZB71GH3/3efvK3SO02vTN7UQmkw+ CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5720729564466995939087858765749471796 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.favor.cuona.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26468048731379282874947779977165112567862541643875382643993724671925991251466329612165233061218002947641973507650739633485993242453808594382763962414870020352963075514917233980113348167384637610454951043212365369207929111656384797246320635253502018254931395418930869629986848481873962253823791490844914722350136135623969107828223434156305603276141929615992041820514642857894671074970685675774572738344069905106319017134295622603704910833219699606555341620995677415158594642801129237986284377862412252582446819432795854255958143540144845257193362258795817752658606953417718015944967407140271314787365565801251092577803 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) adad64e6987e7b59e3cd27c3d25ea364e2f622c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.favor.cuona.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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