prod-mm.prod-getty.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:91:72:83:4d:68:ec:f1:b2:21:c9:bb:87:8b:a8:75 was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod-mm.prod-getty.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:91:72:83:4d:68:ec:f1:b2:21:c9:bb:87:8b:a8:75
Serial Number (int): 19364397583017670864321308499068561525
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:6c:9c:4f:0b:d4:f9:7e:e0:39:f3:6e:e6:1f:ef:3b:9d:05:92:50
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ca:86:c0:c0:1a:db:2b:a6:a1:90:f4:64:c8:cd:3c:c1:05:60:b1:0f
Fingerprint (sha256): 70:c6:65:8e:44:db:25:24:45:a2:38:97:f3:5f:f4:d5:a0:9a:34:d9:ce:8d:eb:2c:ff:48:6b:95:27:45:09:d8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate prod-mm.prod-getty.cloud

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-mm.prod-getty.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-mm.prod-getty.cloud
mm.gettyimages.com
*.gettyimages.com
www.hitachiaircon-mediamanager.com
image.tokyo2020.jp
www.mbgolfmedia.com
www.lbbw-mediamanager.de
www.eondanjaq.com
www.emphotomanager.com
www.ltamediamanager.com
www.caondemand.com
www.euroleagueimagehub.com
www.nationwideimagelibrary.co.uk
www.himediamanager.com
www.bundesliga-fotodatenbank.de
www.hearstimagelibrary.com
www.samsungeasyads.com
www.samsunggallery.com
www.hondadesignworks.com
download.mizuno.com
www.download.mizuno.com
images.europeantour.com
mediamanager.dws.com
library.symantec.com

Other certificates including the domain name prod-getty.cloud

(limited to 100 certificates)
secondary-prod-in.prod-getty.cloud
uw2-in.prod-getty.cloud
customcontent.gettyimages.com
briefs-middleware.custom-content.usw2.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
prod-mm-missing.prod-getty.cloud
prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-in.prod-getty.cloud
prod-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
ue1-in.prod-getty.cloud
uw2-in.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-in.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
ue1-mms-ws.prod-getty.cloud
wildcard.prod-getty.cloud
uw2-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
uw2-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
*.asset.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
metrics.usw2.prod-getty.cloud
customcontent.gettyimages.com
uw2-in.prod-getty.cloud
prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
*.prod-getty.cloud
middleware-customcontent.gettyimages.com
prod-mm.prod-getty.cloud
uw2-mm.prod-getty.cloud
ue1-mms-api.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
ue1-mms-api.prod-getty.cloud
*.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
customcontent.prod-getty.cloud
prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.gettyimages.com
uw2-mms-ws.prod-getty.cloud
prod-mm.prod-getty.cloud
*.entapp-integr.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.gettyimages.com
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.prod-getty.cloud
prod-mm.prod-getty.cloud
*.prod-getty.cloud
wildcard.prod-getty.cloud
wildcard.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
uw2-in.prod-getty.cloud
ue1-in.prod-getty.cloud
briefs-middleware.custom-content.usw2.prod-getty.cloud
uw2-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
*.prod-getty.cloud
prod-in.prod-getty.cloud
wildcard.prod-getty.cloud
ue1-mm.prod-getty.cloud
uw2-mms-api.prod-getty.cloud
wildcard.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
middleware-customcontent.gettyimages.com
secondary-prod-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
uw2-mm.prod-getty.cloud
ue1-in.prod-getty.cloud

Certificate

The complete raw certificate details for prod-mm.prod-getty.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEGv90qrwShDd++P8fto
6n1HkcrVEjdYf9LvJXyrD2UeFMMaXOiOD2PYXCCo/RYzHVhrEbIbRYIn6No/iBNC
5WjlnDWywgM9L3GQ3borsrVYYLY9w1+eQTG5h4gl/MN3sju62+hhtt4U85ctdIZZ
JbO+T5lpUgxwFQQAP1V2K6vX62sOOLbWjRY54Yl8fVdFTwgdEeL1IFEPEosq/6a2
PZ/xCbz2V5iJhGRojRx/D2tBpMD2pPIDMXq/+SHG5Cat+EawIJZs1mJxwRsripnp
EHHLaaofPTejzlALn/GcPRNbcZ8zddPiGKlUVHEJ2fN7PjzG8d1YXXbiLgG6WIOx
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19364397583017670864321308499068561525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-mm.prod-getty.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22755286541871481757990883471037360157116668483879106371037651635049528385478434560251626050220138352506184849535244008337148815311833803993526227958596193104000559323731445658078635568411569188065594432367237656771467566201447856723624966856413096125043592088712603261153306712852359667748980184558632253524592692229832233611802479787115974865258710679618118092464600743456110528704629348217003193314123586505808842620359133476032215271499773121548751263773186257315230151886655614194559256544774202771974415816113878982874087741599181206031007463566310224039430681374095655787180342549590046856405568356635459695097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a66c9c4f0bd4f97ee039f36ee61fef3b9d059250
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (596 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-mm.prod-getty.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hitachiaircon-mediamanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tokyo2020.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbgolfmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbbw-mediamanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eondanjaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emphotomanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ltamediamanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.euroleagueimagehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationwideimagelibrary.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.himediamanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundesliga-fotodatenbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearstimagelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsungeasyads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsunggallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hondadesignworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mizuno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.download.mizuno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediamanager.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.symantec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad249c898a49b9e0d6f745d2377ef171f68572ab6d6f8ed73a0553a8e03ab0c376baabb5a30e478627d7af373817d4a1c77760264ad7aed6a5b603b00dc300d5b582f2619912f2fd289148a2144082b699ab54e9339f225b17624d8ec72fa133cd6869b8efd729aa441c0bbd8236bb07c343454d48f59167206407b6e3a23529093b04ce453001a80602de96bf9132f1620ae9d54d2b625ad4b647571e774eb7ac67d84ca34f3c8e550b7a4d278d18f61a1dfad25510dffbc7fce31f4302c5c8d1c33ecf53da833e33fb7324bf2ead4a68829ba52ad6b6857a1dc0bdbe5bb2992bc3e90e61391f7567687e34cfe5c0acd9cf913ad46f067dae41702a0961a137