mail.holidayboxer.com
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 0d:27:8f:37:b6:08:ec:9d:c7:7a:7a:5e:42:ac:60:4a was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.holidayboxer.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:27:8f:37:b6:08:ec:9d:c7:7a:7a:5e:42:ac:60:4aSerial Number (int): 17485368321146085681715805298283536458
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f5:7c:94:cf:3a:4f:7f:47:ef:89:9c:bb:8c:23:27:0b:1a:66:66:03
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): a1:28:ef:ca:18:7d:75:50:28:69:2d:cf:94:5a:23:e5:ab:98:05:1e
Fingerprint (sha256): 74:a3:4f:65:27:5f:00:b2:d9:5e:be:aa:3f:69:71:b8:15:e9:7c:41:8f:e8:6e:01:b4:a9:64:e2:3f:a8:c0:ec
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate mail.holidayboxer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.holidayboxer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.holidayboxer.com
Other certificates including the domain name holidayboxer.com
(limited to 100 certificates)
santaboxs.com
8641232st.com
santaboxes.com
dadboxes.com
holidayboxer.com
sni.cloudflaressl.com
saasynerds.com
santaboxes.com
santaboxes.holidayboxer.com
july4thboxes.com
flnerds.com
momsdaybox.com
cupidboxes.com
holidayboxer.com
nynerds.com
dadboxes.com
cupidboxes.com
sni.cloudflaressl.com
nerds.nyc
icantts.com
cupidboxes.com
flnerds.com
1466bayridgeparkway.com
cupidboxes.com
flnerds.com
saasynerd.holidayboxer.com
mothersdayboxes.holidayboxer.com
advocatesforthedisabledny.org
icanttees.com
nynerds.com
icantts.com
zootboxes.com
sni.cloudflaressl.com
mail.holidayboxer.com
momsdayboxes.com
nynerds.com
santaboxs.com
dadboxes.com
dadboxes.com
holidayboxer.com
8641232st.com
1466bayridgeparkway.com
icanttees.com
icantts.com
8641232st.com
nynerds.com
santaboxs.com
cupidboxes.com
8641232st.com
santaboxes.com
momsdayboxes.com
holidayboxer.com
dadboxes.com
furbabyboxes.com
comlivco.org
holidayboxer.com
cupidboxes.com
holidayboxer.com
santaboxes.com
holidayboxer.com
advocatesforthedisabledny.org
santaboxes.com
momsdayboxes.com
nerds.nyc
dadboxes.com
furbabyboxes.holidayboxer.com
santaboxes.com
dadboxes.com
icanttees.com
july4thbox.com
holidayboxer.com
wicketteholdings.com
holidayboxer.com
advocatesforthedisabledny.org
1466bayridgeparkway.com
holidayboxer.com
dadboxes.com
1466bayridgeparkway.com
momsdayboxes.com
nynerds.com
flnerds.com
holidayboxer.com
nynerds.com
adiny.org
mail.holidayboxer.com
nerds.nyc
momsdayboxes.com
dadboxes.com
santaboxes.com
furbabyboxes.com
holidaysurpriseboxes.com
furbabyboxes.com
nynerds.com
mail.holidayboxer.com
cupidboxes.com
holidayboxer.com
nyflnerds.remotesupportnerds.com
8641232st.com
saasynerd.com
sni.cloudflaressl.com
8641232st.com
santaboxes.com
dadboxes.com
holidayboxer.com
sni.cloudflaressl.com
saasynerds.com
santaboxes.com
santaboxes.holidayboxer.com
july4thboxes.com
flnerds.com
momsdaybox.com
cupidboxes.com
holidayboxer.com
nynerds.com
dadboxes.com
cupidboxes.com
sni.cloudflaressl.com
nerds.nyc
icantts.com
cupidboxes.com
flnerds.com
1466bayridgeparkway.com
cupidboxes.com
flnerds.com
saasynerd.holidayboxer.com
mothersdayboxes.holidayboxer.com
advocatesforthedisabledny.org
icanttees.com
nynerds.com
icantts.com
zootboxes.com
sni.cloudflaressl.com
mail.holidayboxer.com
momsdayboxes.com
nynerds.com
santaboxs.com
dadboxes.com
dadboxes.com
holidayboxer.com
8641232st.com
1466bayridgeparkway.com
icanttees.com
icantts.com
8641232st.com
nynerds.com
santaboxs.com
cupidboxes.com
8641232st.com
santaboxes.com
momsdayboxes.com
holidayboxer.com
dadboxes.com
furbabyboxes.com
comlivco.org
holidayboxer.com
cupidboxes.com
holidayboxer.com
santaboxes.com
holidayboxer.com
advocatesforthedisabledny.org
santaboxes.com
momsdayboxes.com
nerds.nyc
dadboxes.com
furbabyboxes.holidayboxer.com
santaboxes.com
dadboxes.com
icanttees.com
july4thbox.com
holidayboxer.com
wicketteholdings.com
holidayboxer.com
advocatesforthedisabledny.org
1466bayridgeparkway.com
holidayboxer.com
dadboxes.com
1466bayridgeparkway.com
momsdayboxes.com
nynerds.com
flnerds.com
holidayboxer.com
nynerds.com
adiny.org
mail.holidayboxer.com
nerds.nyc
momsdayboxes.com
dadboxes.com
santaboxes.com
furbabyboxes.com
holidaysurpriseboxes.com
furbabyboxes.com
nynerds.com
mail.holidayboxer.com
cupidboxes.com
holidayboxer.com
nyflnerds.remotesupportnerds.com
8641232st.com
saasynerd.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for mail.holidayboxer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIQDSePN7YI7J3HenpeQqxgSjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xOTAzMjgwMDAwMDBaFw0yMTAzMjcxMjAwMDBaMCAxHjAcBgNVBAMTFW1haWwu aG9saWRheWJveGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMaUr1OoOdcWUVz+XaGfBdvCg8w30vDUiAnexCEk0xgx2WG8dZUsa4+tCFVFUiR7 wXoAXETJOdLKJtCIkIXX/E2o2oUcJjqB9k1DQMxm4voLBQYVQq5oV0Vka/isnMVq v13oYiJK9FAxKuuuA/EsYGHiaObWtdml0mfQoXxmcjTm+EXpVhAbXwST7AqDDiQP Fsv6gpa+BI/nk8vBQBFvD7Dia+LeT3sf8TFHpvS5nHit+4UNYSqv7i4rQtrUI6aR 7a9QHcZn+jFCFKQn5Bc6W6E/l3yGt9lntog2OsYa8kRZUF4NQQgbRECcbH+jWdRT fF/wiUcoKbVMvrpmXLAiBQcCAwEAAaOCAbIwggGuMB8GA1UdIwQYMBaAFKWM/jLM 6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBT1fJTPOk9/R++JnLuMIycLGmZmAzAg BgNVHREEGTAXghVtYWlsLmhvbGlkYXlib3hlci5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwTAYD VR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwcAYIKwYBBQUHAQEEZDBiMCQGCCsG AQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0 dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcnQwCQYD VR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VmGY9HmpN8Cs2Kdmu3Jt0lr1EXBd6KUUX1/q/s6X351JU+9V/Jr/qHgTeGYtWaVx 1yV9nlEN9BrvAusY4C383YAZmM33+9ESUK7LDtz7GDJSGltCVMPO1OAHAPo5DusC 7TJ2x8MI95wV167z6ZsJfaXmAFSzm7xSZw81hjvpUg2TaGyZZtpsWtX6OG3UcgVT vJNpgEsk/o16I70ersdnqN8LhaCLuODwChsclbtcvJTNognkWmvWTsnk8y7DP736 +WhQlpINmlMOeQne5bX1zJImgwqMO4fQBupdsHmbF3YTphw7wRoq8eUacI2BD5ln xkoWH4tThyfImrwOhxmVaQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpSvU6g51xZRXP5doZ8F 28KDzDfS8NSICd7EISTTGDHZYbx1lSxrj60IVUVSJHvBegBcRMk50som0IiQhdf8 TajahRwmOoH2TUNAzGbi+gsFBhVCrmhXRWRr+KycxWq/XehiIkr0UDEq664D8Sxg YeJo5ta12aXSZ9ChfGZyNOb4RelWEBtfBJPsCoMOJA8Wy/qClr4Ej+eTy8FAEW8P sOJr4t5Pex/xMUem9LmceK37hQ1hKq/uLitC2tQjppHtr1Adxmf6MUIUpCfkFzpb oT+XfIa32We2iDY6xhryRFlQXg1BCBtEQJxsf6NZ1FN8X/CJRygptUy+umZcsCIF BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17485368321146085681715805298283536458 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.holidayboxer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25068503625448684902157594918249548094666048338856295830697990544748105396231697071729755286605168998063448923247428167297089117253492303736135370514295304774335875236869057401803512912592484517159991693849684507669433867891517572666198702355141050036632410074118229662541108823859959480595313218050189272309530136868914231178494850497450350746838440409917910489274452177354220538518265009116556200466762367546595679384073051895478891772894045284786095582975401241013006342389818675532444142754951950975881276895820470643697691761255725930814512691325415908331543281551379531088366772680183720739537961250446830077191 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f57c94cf3a4f7f47ef899cbb8c23270b1a666603 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.holidayboxer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00566198f479a937c0acd8a766bb726dd25af511705de8a5145f5feafece97df9d4953ef55fc9affa8781378662d59a571d7257d9e510df41aef02eb18e02dfcdd801998cdf7fbd11250aecb0edcfb1832521a5b4254c3ced4e00700fa390eeb02ed3276c7c308f79c15d7aef3e99b097da5e60054b39bbc52670f35863be9520d93686c9966da6c5ad5fa386dd4720553bc9369804b24fe8d7a23bd1eaec767a8df0b85a08bb8e0f00a1b1c95bb5cbc94cda209e45a6bd64ec9e4f32ec33fbdfaf9685096920d9a530e7909dee5b5f5cc9226830a8c3b87d006ea5db0799b177613a61c3bc11a2af1e51a708d810f9967c64a161f8b538727c89abc0e87199569