stockcard.io
Issued by Amazon
About this certificate
This digital certificate with serial number 08:3d:45:ff:a2:ba:48:6c:49:3a:2e:ff:70:f5:af:5d was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stockcard.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:3d:45:ff:a2:ba:48:6c:49:3a:2e:ff:70:f5:af:5dSerial Number (int): 10951973814455818372654085795432738653
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a5:3e:0a:f9:b8:2d:95:51:31:77:bc:77:ba:24:63:c2:95:21:60:34
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): cb:48:73:cd:ff:6b:7f:0c:d0:c2:96:57:63:59:d8:fe:12:f2:44:0e
Fingerprint (sha256): 7a:97:16:80:38:48:2c:42:7e:50:8e:29:5e:46:7c:72:78:33:25:3a:db:1d:57:6d:f8:64:f5:4b:ea:77:c9:e9
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate stockcard.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stockcard.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stockcard.io
*.stockcard.io
*.stockcard.io
Other certificates including the domain name stockcard.io
(limited to 100 certificates)
www.sneberger.cz
blog.stockcard.io
stockcard.io
ihsabs.com
stockcard.io
12n.app
stockcard.io
www.byrkje.land
ancla.me
dev.stockcard.io
bodhiblendedlearning.com
agile42.actionableagile.com
thechocolateowl.ca
howtoinvest.stockcard.io
blabla.cam
tridev.jp
hvch.d1.stx.world
widget.stockcard.io
dslpos.com
run.photo
stockcard.io
www.heywork.co
eazyclass.com.br
howtoinvest.stockcard.io
tamadoko.com
galirage.com
stockcard.io
backoffice-staging.towa.network
stockcard.io
giocapadel.it
www.anthonygangel.co.uk
krezus.co
dev.stockcard.io
www.mistymusings.art
funwarioisii.me
app.lendroit-reims.fr
blog.stockcard.io
www.dev.manager.woonig.app
anyhousecafe.com
lwdgo.acaisoft.net
manager.corroo.app
stockcard.io
influenftial.com
chrislr.com
baisetamere.fr
www.mxm2018.com
blog.stockcard.io
ionic-lib-demo.iotize.com
intechligence.com
blog.stockcard.io
delivery.melhorpedida.com.br
koobii.pinco.fit
tour.narimilwaukee.org
gonzalesinquirer.column.us
lwdgo.acaisoft.net
app.bitalpha.com
tridev.jp
stockcard.io
emn.orderq.ai
blog.stockcard.io
manager.corroo.app
onlinegamesinfo.com
blog.stockcard.io
run.photo
www.deeplearners.group
pod.getraddle.com
rentalclub.io
cdn.savedby.io
rentalclub.io
howtoinvest.stockcard.io
casestudies.okbye.io
ganeshkirana.in
manager.corroo.app
manager.corroo.app
howtoinvest.stockcard.io
www.antandtracy.com
blog.stockcard.io
ss-canal.makebetter.co.za
www.readthisover.com
stockcard.io
youjo.sx
maria.chat
dev.stockcard.io
alhadist.com
slimsistemas.com.br
blabla.cam
idleideas.biz
longpham.ca
jmisencoes.com.br
visualyze.es
stockcard.io
blog.stockcard.io
teachlonger.com
stockcard.io
www.kashirajima.work
howtoinvest.stockcard.io
salsanena.stage.freshfox.at
blog.stockcard.io
stockcard.io
ihsabs.com
stockcard.io
12n.app
stockcard.io
www.byrkje.land
ancla.me
dev.stockcard.io
bodhiblendedlearning.com
agile42.actionableagile.com
thechocolateowl.ca
howtoinvest.stockcard.io
blabla.cam
tridev.jp
hvch.d1.stx.world
widget.stockcard.io
dslpos.com
run.photo
stockcard.io
www.heywork.co
eazyclass.com.br
howtoinvest.stockcard.io
tamadoko.com
galirage.com
stockcard.io
backoffice-staging.towa.network
stockcard.io
giocapadel.it
www.anthonygangel.co.uk
krezus.co
dev.stockcard.io
www.mistymusings.art
funwarioisii.me
app.lendroit-reims.fr
blog.stockcard.io
www.dev.manager.woonig.app
anyhousecafe.com
lwdgo.acaisoft.net
manager.corroo.app
stockcard.io
influenftial.com
chrislr.com
baisetamere.fr
www.mxm2018.com
blog.stockcard.io
ionic-lib-demo.iotize.com
intechligence.com
blog.stockcard.io
delivery.melhorpedida.com.br
koobii.pinco.fit
tour.narimilwaukee.org
gonzalesinquirer.column.us
lwdgo.acaisoft.net
app.bitalpha.com
tridev.jp
stockcard.io
emn.orderq.ai
blog.stockcard.io
manager.corroo.app
onlinegamesinfo.com
blog.stockcard.io
run.photo
www.deeplearners.group
pod.getraddle.com
rentalclub.io
cdn.savedby.io
rentalclub.io
howtoinvest.stockcard.io
casestudies.okbye.io
ganeshkirana.in
manager.corroo.app
manager.corroo.app
howtoinvest.stockcard.io
www.antandtracy.com
blog.stockcard.io
ss-canal.makebetter.co.za
www.readthisover.com
stockcard.io
youjo.sx
maria.chat
dev.stockcard.io
alhadist.com
slimsistemas.com.br
blabla.cam
idleideas.biz
longpham.ca
jmisencoes.com.br
visualyze.es
stockcard.io
blog.stockcard.io
teachlonger.com
stockcard.io
www.kashirajima.work
howtoinvest.stockcard.io
salsanena.stage.freshfox.at
Certificate
The complete raw certificate details for stockcard.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQCD1F/6K6SGxJOi7/cPWvXTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MjEwMDAwMDBaFw0xOTEwMjEx MjAwMDBaMBcxFTATBgNVBAMTDHN0b2NrY2FyZC5pbzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMWGsfWGK0YF1YrqUQaqTJyFOhGxgEocgx8xKhFMFy3T jE+KhC7V9pV2UjZ/gPSvJTUgIJRkrq5dSG1dX2x7UH4NjQKwRG6nHK8hfrweQ99j lqKumc9gVWOUXKSvpHVB98gQaGYjsWnI91HVww+J5C58tjulHvIY05PFxpmoChFa ePtxKXMq+GoEWzx9hmiXfpuvCKqLT0uCJKZJIX+VPaeneQKYhKFAlzhhmyG1iO8O 9lfCzrh9iewgdcQhF0ni0KM8KbWWiGCrORBMyp16ctj34UIE82zbANI+hfO+MpF5 YNJIM/8egRn/4pp9HQsVOzEIDVT71bw53zO+Mpe2xhkCAwEAAaOCAokwggKFMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSlPgr5uC2V UTF3vHe6JGPClSFgNDAnBgNVHREEIDAeggxzdG9ja2NhcmQuaW+CDiouc3RvY2tj YXJkLmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNj YTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEFBgor BgEEAdZ5AgQCBIH2BIHzAPEAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O yA3cEAAAAWX8raPQAAAEAwBHMEUCIQDE/tN9j6rQwYns4TFaU4d/gZ3zjROzjwE7 9mGHJ8SbCQIgLBXDDw6ZwGbQivQJhczpUv/ntzdkWIL0GU+WDqF03ycAdwCHdb/n WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWX8raSnAAAEAwBIMEYCIQC8 OCwrgoL0xZL7KYQ6Fjkgf1sA4LzjOHjpwFuCWm2IIgIhAPBAO4MOuDSgVvbA7Yp3 o2tTan4QzURneb4oLLnXkvDmMA0GCSqGSIb3DQEBCwUAA4IBAQAJrzEgRTe71po1 sqBi9Jov6Gqx/lBfCglgPX7VxM+0mIrWfgyJmuHNdg1giK9tox+x/LWXH3KLmBXN oHpPSQYzLMrPrhxhfIB50t9wVEmn6+qEAbsNHuN5I+yAY1p+eL4XtrWb7o7swNKY d7xl0+61TIFYJIJshFTZxQLdg9uWhln4ruT1ZJ7Ri/RkBehO/Q6cxNUXxr0kgFTv 470OaWyngtx6SZTykRgTJ6x41eajxLh3sjReOghcOj5b4VhqcCJ4dojl/y0KTgHF 1szXwoFGfqUXdqNAkkBo0VV9JUlMrjC9jxqWxlOrJDOwcBaUpQK+BXU1O0HGfKSk B22JsFFD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYax9YYrRgXViupRBqpM nIU6EbGAShyDHzEqEUwXLdOMT4qELtX2lXZSNn+A9K8lNSAglGSurl1IbV1fbHtQ fg2NArBEbqccryF+vB5D32OWoq6Zz2BVY5RcpK+kdUH3yBBoZiOxacj3UdXDD4nk Lny2O6Ue8hjTk8XGmagKEVp4+3Epcyr4agRbPH2GaJd+m68IqotPS4Ikpkkhf5U9 p6d5ApiEoUCXOGGbIbWI7w72V8LOuH2J7CB1xCEXSeLQozwptZaIYKs5EEzKnXpy 2PfhQgTzbNsA0j6F874ykXlg0kgz/x6BGf/imn0dCxU7MQgNVPvVvDnfM74yl7bG GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10951973814455818372654085795432738653 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stockcard.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24935366733617194295390627935596481067191980202441234676863837889090429474358116396494899764438030448895162473076453180101041149570384472345107085749876749829344782087306225355965701821431813606285127266173701639256322749134259625687199500435112561391725788965020320583869517283502108158816825362005979732782076333092858753228707791720732011086946973969957658862375646805293044677940002934068173406952644868092770090603985553642856938018875245482299442755200890104365610934527017933262974060891533580277182703621731776206960530770713766448494927458488625578795518326071163374213513297958673810690195353263487713723929 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a53e0af9b82d95513177bc77ba2463c295216034 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockcard.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockcard.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165fcada3d00000040300473045022100c4fed37d8faad0c189ece1315a53877f819df38d13b38f013bf6618727c49b0902202c15c30f0e99c066d08af40985cce952ffe7b737645882f4194f960ea174df270077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165fcada4a70000040300483046022100bc382c2b8282f4c592fb29843a1639207f5b00e0bce33878e9c05b825a6d8822022100f0403b830eb834a056f6c0ed8a77a36b536a7e10cd446779be282cb9d792f0e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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