promocodesforyou.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 09:d1:3b:af:7e:05:dd:b8:22:b9:4c:b5:71:72:51:af was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=promocodesforyou.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:d1:3b:af:7e:05:dd:b8:22:b9:4c:b5:71:72:51:afSerial Number (int): 13049452571595280181594520002850083247
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: df:d8:4e:0b:cc:a5:77:d8:09:7d:3e:7f:9a:88:da:f0:ee:01:6a:3e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 26:22:26:1e:7e:f3:39:ac:ad:9f:4c:46:4e:70:cd:07:94:76:4a:1a
Fingerprint (sha256): 70:75:25:ef:2f:bf:02:70:3e:93:f0:f6:ac:47:5d:8f:7b:79:43:f0:e0:c8:be:41:a8:e2:ce:3b:dc:4e:34:94
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate promocodesforyou.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promocodesforyou.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promocodesforyou.com
*.admin.promocodesforyou.com
*.promocodesforyou.com
*.admin.promocodesforyou.com
*.promocodesforyou.com
Other certificates including the domain name promocodesforyou.com
(limited to 100 certificates)
ssl2336.cloudflare.com
promocodesforyou.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
*.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
promocodesforyou.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
*.promocodesforyou.com
*.promocodesforyou.com
promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
*.promocodesforyou.com
promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
*.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
promocodesforyou.com
promocodesforyou.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
*.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
*.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
*.promocodesforyou.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
www.promocodesforyou.com
ssl2336.cloudflare.com
*.tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
*.tracking.promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
*.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
promocodesforyou.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
*.promocodesforyou.com
*.promocodesforyou.com
promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
*.promocodesforyou.com
promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
*.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
promocodesforyou.com
promocodesforyou.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
*.promocodesforyou.com
tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
*.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
*.promocodesforyou.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
www.promocodesforyou.com
ssl2336.cloudflare.com
*.tracking.promocodesforyou.com
tracking.promocodesforyou.com
promocodesforyou.com
ssl2336.cloudflare.com
*.tracking.promocodesforyou.com
ssl2336.cloudflare.com
tracking.promocodesforyou.com
ssl2336.cloudflare.com
promocodesforyou.com
ssl2336.cloudflare.com
Certificate
The complete raw certificate details for promocodesforyou.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgIQCdE7r34F3bgiuUy1cXJRrzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDQyOTAwMDAwMFoXDTI1MDUyNzIzNTk1OVowHzEd MBsGA1UEAxMUcHJvbW9jb2Rlc2ZvcnlvdS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ9Yz3g8wIzEWAiC4gcn1fmwILXbvWSGPWeBhXeBEN1V63 TFCv2h2+XcwEqz05agkVgr0ZeumClDbYkgHq4Nw74dcZFW+MMiGiHqM9gAr6PijG K/DQBFQx259KnJ9XbgDnGY945G0/TJPFgpLA7hsMF5sQM/hhpB71mXxZrfYNvPVT GW8dE86KEB3JRPExae19ubyf5klxrNiILiW5CvymykzrAAxs2Ik6Qa1IwsI08E6I UZ9kHjnaNtf+vhzckcz856qwkzTXHFoCjQI72I9DliXh6CJqvfr5e6fgSXRjtZsx O/12qL3oRGGhJBoHYG2RXiFMUCvXoq9mWvCVJMWdAgMBAAGjggMkMIIDIDAfBgNV HSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU39hOC8yld9gJ fT5/moja8O4Baj4wVQYDVR0RBE4wTIIUcHJvbW9jb2Rlc2ZvcnlvdS5jb22CHCou YWRtaW4ucHJvbW9jb2Rlc2ZvcnlvdS5jb22CFioucHJvbW9jb2Rlc2ZvcnlvdS5j b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v Y3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29t L3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFr AWkAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY8o5AvoAAAE AwBHMEUCIQCNVffDxOBj+tn/oLXFlHNR+6PswXHoHxzNFIe4xfoH1AIgISRLUjEi AsKe8FFX8ZQ8d+JPqoOQ6S8zYW2rVArEhKwAdgB9WR4S4XgqexxhZ3xe/fjQh1wU oE6VnrkDL9kOjC55uAAAAY8o5AwnAAAEAwBHMEUCIEI/V2pFB3GiGU6i6DtLTvfL 83mgsbGyfBD8NKQYqhVNAiEA1Rf/nqAiQXOK7RK5gvftq331enXFG/kHxk9T9yJl mmQAdwDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY8o5Aw+AAAE AwBIMEYCIQCDG8ZZWjBMmr/4HZpzLpr5weAjo+eeZpJJrw5iMKu7dgIhAIh1Qr2U K0BiGTp4mM2wOCzkw3iH3k2it++tXGSQQ4o1MA0GCSqGSIb3DQEBCwUAA4IBAQCI yfGl/Ra4C99DLiO9vnAyxHaLollHoilrr2JrZ5EZBGawt5ZyxEnE67bOMSHdyEoh CLAvwCsEzibEcMzVnMSLL/4rNS4HRXuSmwypRjkcJ9Q55IuSIlyYH6LhN7C2eE8C g+ChP0FC0jppwi49kL3N8vjwPOKRnyzQjMzaYDAdHDxnJybXQWRKSF8w6KmzbqYu Hhfn/TNDZxzdi/ICtcNUfiGnbjVsTDy87WJ2zBNsP6Nmq93j/e5qmfTNEnnuBhli /WB/MJ3qZWaf2T/e7OPNuQfCIQz7utSTX2pRWQtzK2EDqkAOxUrBlRW/aydhM1gc 1ac5vqiJQo45lPoiB5yB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfWM94PMCMxFgIguIHJ9 X5sCC1271khj1ngYV3gRDdVet0xQr9odvl3MBKs9OWoJFYK9GXrpgpQ22JIB6uDc O+HXGRVvjDIhoh6jPYAK+j4oxivw0ARUMdufSpyfV24A5xmPeORtP0yTxYKSwO4b DBebEDP4YaQe9Zl8Wa32Dbz1UxlvHRPOihAdyUTxMWntfbm8n+ZJcazYiC4luQr8 pspM6wAMbNiJOkGtSMLCNPBOiFGfZB452jbX/r4c3JHM/OeqsJM01xxaAo0CO9iP Q5Yl4egiar36+Xun4El0Y7WbMTv9dqi96ERhoSQaB2BtkV4hTFAr16KvZlrwlSTF nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13049452571595280181594520002850083247 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promocodesforyou.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19435546199117869422093437560037138108306385974138918071446715181105508910453590258514217845486419382685368465119852781876357852302744079821067189842932023280490425411843328687653633648972510296528285962169992103721068642940808860001051431071774110821897602178857468032932517033006961426655999313280895029830083193101099365861170589480078803260845433123739173001760816284230011517504736033913788982836543219887476921705239507780253815102329577018643513834394285344671384701280354058222300644890910018030514056208246239300533370150290787043492232463254029651863164335223773621244369808548252671983565955310436974118301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dfd84e0bcca577d8097d3e7f9a88daf0ee016a3e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promocodesforyou.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.promocodesforyou.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocodesforyou.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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