media.oasisdigital.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:45:7e:6a:bb:56:63:09:1d:94:62:13:67:3d:57:43 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=media.oasisdigital.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:45:7e:6a:bb:56:63:09:1d:94:62:13:67:3d:57:43Serial Number (int): 16311568472431312343219814317351065411
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8c:d7:7a:f9:f7:cf:73:7f:25:a8:7b:30:18:ef:37:b3:64:b5:a9:52
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 6f:89:b7:aa:04:0d:e9:96:ec:e8:92:61:c3:52:e4:2c:6a:e8:8e:1d
Fingerprint (sha256): 79:b1:be:00:8f:9c:bb:75:d9:0a:94:6f:cd:55:d7:37:46:87:3e:45:f4:e2:54:ef:cc:38:cc:58:dc:fc:dd:5b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate media.oasisdigital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for media.oasisdigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
media.oasisdigital.com
Other certificates including the domain name oasisdigital.com
(limited to 100 certificates)
blog.candy.ac
oasisdigital.com
oasisdigital.com
theblacklistdmv.com
eduardrotaru.com
oasisdigital.com
buffet.oasisdigital.com
corp.innoqua.jp
blog.oasisdigital.com
agustyle.com
generic.hypermedia.app
modl.oasisdigital.com
blog.oasisdigital.com
www.kivlov.co
modl.oasisdigital.com
www.sanchezcarlosjr.com
modl.oasisdigital.com
www.paths.io
kta-brasschaat.noteble.be
phpmyadmin.oasisdigital.com
buffet.oasisdigital.com
www.queselebras.pe
oasisdigital.com
www.nivendha.me
blog.oasisdigital.com
primerelocation.demo.movello.se
www.m.werktijd.be
youtube-matome.xyz
blog.oasisdigital.com
media.oasisdigital.com
capricorncoast.parking.smartsys.io
wp.oasisdigital.com
blog.oasisdigital.com
modl.oasisdigital.com
oasisdigital.com
submit.oasisdigital.com
blog.oasisdigital.com
*.oasisdigital.com
oasisdigital.com
modl.oasisdigital.com
www.balamlabs.com
oasisdigital.com
edm.karmayasa.com
oasisdigital.com
media.oasisdigital.com
oasisdigital.com
modl.oasisdigital.com
app-dev.hellodibsly.com
www.anonymitybot.com
modl.oasisdigital.com
pnd-p.dev-ltl-xpo.com
blog.oasisdigital.com
www.notably.app
private-bb-6.oasisdigital.com
modl.oasisdigital.com
blog.oasisdigital.com
blog.oasisdigital.com
featherlessagency.com
www.elsprintfalabella.com
www.partechsystems.com
blog.oasisdigital.com
media.oasisdigital.com
jamiecorkhill.com
blog.oasisdigital.com
*.oasisdigital.com
media.oasisdigital.com
modl.oasisdigital.com
oasisdigital.com
oasisdigital.com
blog.oasisdigital.com
harvey.epidemico.com
oasisdigital.com
thesimpleclub.at
www.hbiba.info
prayertimes.deeniyat.com
blog.oasisdigital.com
amz-club.com
oasisdigital.com
modl.oasisdigital.com
developmentsbyj.com
oasisdigital.com
www.tromero.org
oasisdigital.com
blog.oasisdigital.com
blog.oasisdigital.com
www.turfxl.in
oasisdigital.com
blog.oasisdigital.com
oasisdigital.com
www.mypatriotmobile.com
habitusapp.io
dev-auth.pointaddress.com
blog.oasisdigital.com
www.balamlabs.com
modl.oasisdigital.com
welldeliveryprocess.com
dev-dynamic.popsy.app
modl.oasisdigital.com
sysadmin.ca
devfest.gdgvalencia.es
oasisdigital.com
oasisdigital.com
theblacklistdmv.com
eduardrotaru.com
oasisdigital.com
buffet.oasisdigital.com
corp.innoqua.jp
blog.oasisdigital.com
agustyle.com
generic.hypermedia.app
modl.oasisdigital.com
blog.oasisdigital.com
www.kivlov.co
modl.oasisdigital.com
www.sanchezcarlosjr.com
modl.oasisdigital.com
www.paths.io
kta-brasschaat.noteble.be
phpmyadmin.oasisdigital.com
buffet.oasisdigital.com
www.queselebras.pe
oasisdigital.com
www.nivendha.me
blog.oasisdigital.com
primerelocation.demo.movello.se
www.m.werktijd.be
youtube-matome.xyz
blog.oasisdigital.com
media.oasisdigital.com
capricorncoast.parking.smartsys.io
wp.oasisdigital.com
blog.oasisdigital.com
modl.oasisdigital.com
oasisdigital.com
submit.oasisdigital.com
blog.oasisdigital.com
*.oasisdigital.com
oasisdigital.com
modl.oasisdigital.com
www.balamlabs.com
oasisdigital.com
edm.karmayasa.com
oasisdigital.com
media.oasisdigital.com
oasisdigital.com
modl.oasisdigital.com
app-dev.hellodibsly.com
www.anonymitybot.com
modl.oasisdigital.com
pnd-p.dev-ltl-xpo.com
blog.oasisdigital.com
www.notably.app
private-bb-6.oasisdigital.com
modl.oasisdigital.com
blog.oasisdigital.com
blog.oasisdigital.com
featherlessagency.com
www.elsprintfalabella.com
www.partechsystems.com
blog.oasisdigital.com
media.oasisdigital.com
jamiecorkhill.com
blog.oasisdigital.com
*.oasisdigital.com
media.oasisdigital.com
modl.oasisdigital.com
oasisdigital.com
oasisdigital.com
blog.oasisdigital.com
harvey.epidemico.com
oasisdigital.com
thesimpleclub.at
www.hbiba.info
prayertimes.deeniyat.com
blog.oasisdigital.com
amz-club.com
oasisdigital.com
modl.oasisdigital.com
developmentsbyj.com
oasisdigital.com
www.tromero.org
oasisdigital.com
blog.oasisdigital.com
blog.oasisdigital.com
www.turfxl.in
oasisdigital.com
blog.oasisdigital.com
oasisdigital.com
www.mypatriotmobile.com
habitusapp.io
dev-auth.pointaddress.com
blog.oasisdigital.com
www.balamlabs.com
modl.oasisdigital.com
welldeliveryprocess.com
dev-dynamic.popsy.app
modl.oasisdigital.com
sysadmin.ca
devfest.gdgvalencia.es
Certificate
The complete raw certificate details for media.oasisdigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQDEV+artWYwkdlGITZz1XQzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MTMwMDAwMDBaFw0yMDEwMTMx MjAwMDBaMCExHzAdBgNVBAMTFm1lZGlhLm9hc2lzZGlnaXRhbC5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOW+L02RqYHHHmzzGj3n3LUPC5T7eH g2Isg3TzqRmXm0hdZdtT1chf/01CQRpXLBX7KZD0TCcQCuBBl6rdi11ckQqkJzGV zBDVGtnxOdMgPWtcRGyVSrgt7dft85OnKJ19ZOZ6LiwXX/8gyDNEwSfFo09BzDkw /8ciinN2k8orTPfekIzq+I0fNSVtP+shgqPv8h3EWlfTExGjENchOSgxCE8k6zYA YfY6eoGLZJDqmMMd6VP0ndT2oR/pZklrlPjEnOCLe4AE8qFYXQYe5FM66MuCcBy3 tlCiCz7cO7Nij1Y87DOgzKZbs/IEULMjGgNWt886vZjPfQQJEMLxfFzrAgMBAAGj ggGPMIIBizAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUjNd6+ffPc38lqHswGO83s2S1qVIwIQYDVR0RBBowGIIWbWVkaWEub2FzaXNk aWdpdGFsLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqpgBt9qQc8iKm rXHTyz7deGu6S0fzG6qZZdr1DoCbkvrxSOPZ5okYCH8oYDasNrLETg+9quh1Pvyl Gnz4orfko4uE0DyZ1qXv6JX7Jy/qGSrFKFJHaqf04FbEjD73eLX8BSQ3OO5uA2lH 86iqz7eEm7EDNGiZ5/XqBcIXH3x85b0DpmwLHu3kuLrmmWBS7wiU1swtpIe5zQ/i uZRYJf3+2/DB0u2FMgqqmTH4RiG2R7gCujcntKeM4PLCvmwop3u5mYNUh2VGZPpK LQ1dLBO6AUYiCoh0pfU2kMM6i6JHPmGs276DJXUpvjNPiYIKuoeHaFxnMbsB8uhh jXKdg//m -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlvi9NkamBxx5s8xo959 y1DwuU+3h4NiLIN086kZl5tIXWXbU9XIX/9NQkEaVywV+ymQ9EwnEArgQZeq3Ytd XJEKpCcxlcwQ1RrZ8TnTID1rXERslUq4Le3X7fOTpyidfWTmei4sF1//IMgzRMEn xaNPQcw5MP/HIopzdpPKK0z33pCM6viNHzUlbT/rIYKj7/IdxFpX0xMRoxDXITko MQhPJOs2AGH2OnqBi2SQ6pjDHelT9J3U9qEf6WZJa5T4xJzgi3uABPKhWF0GHuRT OujLgnAct7ZQogs+3DuzYo9WPOwzoMymW7PyBFCzIxoDVrfPOr2Yz30ECRDC8Xxc 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16311568472431312343219814317351065411 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.oasisdigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26050401768877385153960217066256959951094622647353862477277887123424255599108913012230572378671731320299784076508893757038018542345049638930759703985821862629720695154980279029484789463592716854662063530483807930135151734657590541796374016531048820168047660677593651100698093617517373120235144118194755255143206296737550095699774573028109043423558052316009862187492720593376949720909385101601727023427432130555080353135734978010013848687158241644925322024380484614881818766245100155651365199006322887678523932536237192829786927844547123032768324831254098843462992604181578639356662914850201785305139537556867544538347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8cd77af9f7cf737f25a87b3018ef37b364b5a952 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oasisdigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006aa6006df6a41cf222a6ad71d3cb3edd786bba4b47f31baa9965daf50e809b92faf148e3d9e68918087f286036ac36b2c44e0fbdaae8753efca51a7cf8a2b7e4a38b84d03c99d6a5efe895fb272fea192ac52852476aa7f4e056c48c3ef778b5fc05243738ee6e036947f3a8aacfb7849bb103346899e7f5ea05c2171f7c7ce5bd03a66c0b1eede4b8bae6996052ef0894d6cc2da487b9cd0fe2b9945825fdfedbf0c1d2ed85320aaa9931f84621b647b802ba3727b4a78ce0f2c2be6c28a77bb999835487654664fa4a2d0d5d2c13ba0146220a8874a5f53690c33a8ba2473e61acdbbe83257529be334f89820aba8787685c6731bb01f2e8618d729d83ffe6