www.punxsy.k12.pa.us
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:18:92:bb:6d:7f:ca:60:27:e0:bd:97:62:b0:a3:dd was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.punxsy.k12.pa.us
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:18:92:bb:6d:7f:ca:60:27:e0:bd:97:62:b0:a3:ddSerial Number (int): 14749099159595789117747782027186316253
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d4:ab:63:9c:95:d5:54:5a:46:c7:30:d7:a0:3e:18:51:c8:31:8e:3f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 02:48:65:50:c5:69:ab:79:c9:15:a6:a2:1d:63:13:8c:ad:5e:bb:61
Fingerprint (sha256): 72:06:00:2d:6f:6a:e3:5c:e2:49:63:64:13:80:e8:98:17:31:60:65:ab:81:37:3e:ef:99:5e:f0:d8:08:21:6c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate www.punxsy.k12.pa.us
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.punxsy.k12.pa.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.punxsy.k12.pa.us
pa01001168.schoolwires.net
pa01001168.schoolwires.net
Other certificates including the domain name punxsy.k12.pa.us
(limited to 100 certificates)
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
punxsy.k12.pa.us
mail.punxsy.k12.pa.us
*.punxsy.k12.pa.us
www.escuelamexico.com.mx
*.punxsy.k12.pa.us
www.huntingtonisd.com
admin.clift.wisd.org
admin.allison.pusd.org
admin.bes.seafordbluejays.org
punxsy.k12.pa.us
punxsy.k12.pa.us
*.punxsy.k12.pa.us
admin.hartsacademy.org
punxsy.k12.pa.us
morelandpreschool.moreland.org
ms.moodyisd.org
*.punxsy.k12.pa.us
ngc.lancasterisd.org
www.infinityhs.org
admin.delta-summit.chsd218.org
punxsy.k12.pa.us
admin.bes.seafordbluejays.org
punxsy.k12.pa.us
punxsy.k12.pa.us
admin.allison.pusd.org
mail.punxsy.k12.pa.us
huntingtonisd.com
punxsy.k12.pa.us
*.punxsy.k12.pa.us
tmsa.org
*.punxsy.k12.pa.us
admin.allison.pusd.org
mishpms.hpisd.org
admin.llesat.org
admin.allison.pusd.org
www.punxsy.k12.pa.us
admin.finley.wisd.org
punxsy.k12.pa.us
llanoisd.org
admin.allison.pusd.org
*.punxsy.k12.pa.us
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
*.punxsy.k12.pa.us
adulted.sanjacinto.k12.ca.us
delta-summit.chsd218.org
*.punxsy.k12.pa.us
admin.shackelford.wisd.org
mail.punxsy.k12.pa.us
eisner.caminonuevo.org
northernheights.adsb.on.ca
catonschool.com
admin.bes.seafordbluejays.org
www.punxsy.k12.pa.us
*.punxsy.k12.pa.us
mail.punxsy.k12.pa.us
punxsy.k12.pa.us
*.punxsy.k12.pa.us
admin.cchs.mpusd.net
www.hartsacademy.org
goldenvalleyhighschool.com
admin.bes.seafordbluejays.org
shs.seafordbluejays.org
admin.bes.seafordbluejays.org
stthomasmorealhambra.org
www.punxsy.k12.pa.us
mail.punxsy.k12.pa.us
*.punxsy.k12.pa.us
www.punxsy.k12.pa.us
northside.wisd.org
mail.punxsy.k12.pa.us
admin.rowlettacademy.org
admin.northside.wisd.org
seafordhighschool.seafordbluejays.org
punxsy.k12.pa.us
mail.punxsy.k12.pa.us
*.punxsy.k12.pa.us
www.escuelamexico.com.mx
*.punxsy.k12.pa.us
www.huntingtonisd.com
admin.clift.wisd.org
admin.allison.pusd.org
admin.bes.seafordbluejays.org
punxsy.k12.pa.us
punxsy.k12.pa.us
*.punxsy.k12.pa.us
admin.hartsacademy.org
punxsy.k12.pa.us
morelandpreschool.moreland.org
ms.moodyisd.org
*.punxsy.k12.pa.us
ngc.lancasterisd.org
www.infinityhs.org
admin.delta-summit.chsd218.org
punxsy.k12.pa.us
admin.bes.seafordbluejays.org
punxsy.k12.pa.us
punxsy.k12.pa.us
admin.allison.pusd.org
mail.punxsy.k12.pa.us
huntingtonisd.com
punxsy.k12.pa.us
*.punxsy.k12.pa.us
tmsa.org
*.punxsy.k12.pa.us
admin.allison.pusd.org
mishpms.hpisd.org
admin.llesat.org
admin.allison.pusd.org
www.punxsy.k12.pa.us
admin.finley.wisd.org
punxsy.k12.pa.us
llanoisd.org
admin.allison.pusd.org
*.punxsy.k12.pa.us
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
*.punxsy.k12.pa.us
adulted.sanjacinto.k12.ca.us
delta-summit.chsd218.org
*.punxsy.k12.pa.us
admin.shackelford.wisd.org
mail.punxsy.k12.pa.us
eisner.caminonuevo.org
northernheights.adsb.on.ca
catonschool.com
admin.bes.seafordbluejays.org
www.punxsy.k12.pa.us
*.punxsy.k12.pa.us
mail.punxsy.k12.pa.us
punxsy.k12.pa.us
*.punxsy.k12.pa.us
admin.cchs.mpusd.net
www.hartsacademy.org
goldenvalleyhighschool.com
admin.bes.seafordbluejays.org
shs.seafordbluejays.org
admin.bes.seafordbluejays.org
stthomasmorealhambra.org
www.punxsy.k12.pa.us
mail.punxsy.k12.pa.us
*.punxsy.k12.pa.us
www.punxsy.k12.pa.us
northside.wisd.org
mail.punxsy.k12.pa.us
admin.rowlettacademy.org
admin.northside.wisd.org
Certificate
The complete raw certificate details for www.punxsy.k12.pa.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQCxiSu21/ymAn4L2XYrCj3TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODAyMjgwMDAwMDBaFw0xOTAzMjgx MjAwMDBaMB8xHTAbBgNVBAMTFHd3dy5wdW54c3kuazEyLnBhLnVzMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7uMcJpDAZbvLf2nscDQ47rmFYJsyYA ACRknDIV7tZSF/JHX6i6c8s6G+yipoldA5GlXnHXdNS10sZVbHB7H/6Lz5Cch/vO vBoYflB2eu6VQ47+fygPfeuIri1sZaJpJr0wSXY6kUgoky8da2KMwJ2DsVJCS0nt ionJDCEoVp9ipZjgO9usQFYYrvSml8HnLJ1QlSWuKRy0XwRLxcgEcOMKgMmqcv/U RInbbBSU+nrTBejRJ3SnnNIB1GaXiVOtf4ua8ttLHbS0A2gfwIVC6Y1K6iJlglGt QqYPS4UF20ntHNNfABQsrPpQTDIx85HXqKJ6imN9cxq9sw7rvaoGewIDAQABo4IB lDCCAZAwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FNSrY5yV1VRaRscw16A+GFHIMY4/MDsGA1UdEQQ0MDKCFHd3dy5wdW54c3kuazEy LnBhLnVzghpwYTAxMDAxMTY4LnNjaG9vbHdpcmVzLm5ldDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAg BgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3Nj YTFiLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBE7GHyi7vA DQssabL1RqqDBrvsDPGYCnPp58V3n1D3r8oiWCmpaynNIGUVfOQLneAIkKxTtKQF PdwxWepJ2v7JhN/Vw9d83ryHOi5CkYrOOBLeCaZvb34ZcUzk19AHuqdiXi5VfwHd aRy8/iKJ191udU69wWPgmQrxvV6rZZXqVJFgWz/yCqBMSCqIG4SupC9dw4/UWKIr bxUMN+QeddK/0oE/CeLIQw1F02woAc4zC/RQjhXXvMIIOeTJRIzXelfEoU3x8a1R q5Lb74aVGCsyArQFvXXh8tquqo6ke0WBZxZr7DgNTjmASXO6KxS6+HU2GM4/8ErZ lrqEwKPUQNfv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7uMcJpDAZbvLf2nscD Q47rmFYJsyYAACRknDIV7tZSF/JHX6i6c8s6G+yipoldA5GlXnHXdNS10sZVbHB7 H/6Lz5Cch/vOvBoYflB2eu6VQ47+fygPfeuIri1sZaJpJr0wSXY6kUgoky8da2KM wJ2DsVJCS0ntionJDCEoVp9ipZjgO9usQFYYrvSml8HnLJ1QlSWuKRy0XwRLxcgE cOMKgMmqcv/URInbbBSU+nrTBejRJ3SnnNIB1GaXiVOtf4ua8ttLHbS0A2gfwIVC 6Y1K6iJlglGtQqYPS4UF20ntHNNfABQsrPpQTDIx85HXqKJ6imN9cxq9sw7rvaoG ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14749099159595789117747782027186316253 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.punxsy.k12.pa.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19022007163217391406384301885622627822805503953163025143921777760368429230421032430714227949919960417808379242887155813312842627437208665296799901812210497369221563822989068538492482019029265297009163236824370911722484005406619374655376796146397012143176623907849761581040784195008874878315742093676630426849312012758452210796534434822438947544747852559400155236478560179424978362960381765744950836034323472273253586391765719692026173160904788660726778308353945230604372891076428056343292313331276920976629676432937767142482494443847049164135080677605884455323970134933934847223136892954665775962916368742281116255867 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d4ab639c95d5545a46c730d7a03e1851c8318e3f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punxsy.k12.pa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa01001168.schoolwires.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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