cdn.yourtrip.mtrip.com
Issued by Amazon
About this certificate
This digital certificate with serial number 01:da:d5:07:05:6a:68:9c:c9:96:4d:89:93:9f:71:41 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdn.yourtrip.mtrip.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:da:d5:07:05:6a:68:9c:c9:96:4d:89:93:9f:71:41Serial Number (int): 2465469420464288905892172058729607489
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 71:70:73:39:e3:39:f7:56:3a:4b:05:88:12:e9:3a:69:43:fb:76:b2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 2b:b2:7e:5a:10:70:5b:5d:87:bb:8a:7e:16:1b:30:bb:10:60:06:66
Fingerprint (sha256): 7e:cd:fa:2f:2b:d6:15:6a:76:55:26:8b:fa:43:8e:27:9d:11:9c:1e:58:aa:93:8f:29:b5:92:b9:a2:cd:f4:14
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate cdn.yourtrip.mtrip.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.yourtrip.mtrip.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.yourtrip.mtrip.com
Other certificates including the domain name mtrip.com
(limited to 100 certificates)
api.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
cdnyourtrip.mtrip.com
doc.mtrip.com
mytrip.tripagent.com
suggest.mtrip.com
mytrip.tripagent.com
mtrip.com
trips.misterfly.com
trips.misterfly.com
mytrip.tripagent.com
mytrip.tripagent.com
sni.cloudflaressl.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
trips.misterfly.com
mytrip.tripagent.com
*.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
*.mtrip.com
api.mtrip.com
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
trips.misterfly.com
trips.misterfly.com
mtrip.com
mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
investor.mtrip.com
mtrip.com
api.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
*.mtrip.com
mytrip.tripagent.com
sni.cloudflaressl.com
trips.misterfly.com
mytrip.tripagent.com
sni.cloudflaressl.com
api.mtrip.com
*.mtrip.com
api.mtrip.com
*.mtrip.com
trips.misterfly.com
trips.misterfly.com
api.mtrip.com
cdn.yourtrip.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
mytrip.tripagent.com
*.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
trips.misterfly.com
sni.cloudflaressl.com
mytrip.tripagent.com
mtrip.com
mtrip.com
mytrip.tripagent.com
suggest.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
test.mtrip.com
trips.misterfly.com
mtrip.com
trips.misterfly.com
mytrip.tripagent.com
cdn.watermark.mtrip.com
investor.mtrip.com
mytrip.tripagent.com
status.mtrip.com
mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
iosd.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
trips.misterfly.com
cdn.mtrip.com
cdnyourtrip.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
cdnyourtrip.mtrip.com
doc.mtrip.com
mytrip.tripagent.com
suggest.mtrip.com
mytrip.tripagent.com
mtrip.com
trips.misterfly.com
trips.misterfly.com
mytrip.tripagent.com
mytrip.tripagent.com
sni.cloudflaressl.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
trips.misterfly.com
mytrip.tripagent.com
*.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
*.mtrip.com
api.mtrip.com
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
trips.misterfly.com
trips.misterfly.com
mtrip.com
mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
investor.mtrip.com
mtrip.com
api.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
*.mtrip.com
mytrip.tripagent.com
sni.cloudflaressl.com
trips.misterfly.com
mytrip.tripagent.com
sni.cloudflaressl.com
api.mtrip.com
*.mtrip.com
api.mtrip.com
*.mtrip.com
trips.misterfly.com
trips.misterfly.com
api.mtrip.com
cdn.yourtrip.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
mytrip.tripagent.com
*.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
trips.misterfly.com
sni.cloudflaressl.com
mytrip.tripagent.com
mtrip.com
mtrip.com
mytrip.tripagent.com
suggest.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
trips.misterfly.com
trips.misterfly.com
test.mtrip.com
trips.misterfly.com
mtrip.com
trips.misterfly.com
mytrip.tripagent.com
cdn.watermark.mtrip.com
investor.mtrip.com
mytrip.tripagent.com
status.mtrip.com
mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
iosd.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
trips.misterfly.com
cdn.mtrip.com
cdnyourtrip.mtrip.com
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.com
Certificate
The complete raw certificate details for cdn.yourtrip.mtrip.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQAdrVBwVqaJzJlk2Jk59xQTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMTkwMDAwMDBaFw0yMTA0MTkx MjAwMDBaMCExHzAdBgNVBAMTFmNkbi55b3VydHJpcC5tdHJpcC5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbcRmWPGquSHuGUld8JRy/6xb29Xv Hm9CFB+hBoc1HY2RhjfGptLhdQFJ9Pfn6XwtA2/MadOLCwzin0pxk/XHBDHNhN/y XBJARdCbTTw5xP3e9Qpd730oaNiA0lu2hkiM5iD9XRPoRgejNfbEAqBI0JU/R/ir hxSMdTAROal39j8QG6PcacapK6XVbVWe5peHL+XDyuapGFOyCTx1ULUq8ZkIeG3M HB+rnQrX11PCIKoqc+GOVj8TIVFYcE/H5aq/dch27msh1/9zy7B5nn2hyNVbg1Es hyzzZ6RAcp6mP7fcSzy9VxE3/qgRA+yBP44rDMk/cL6qxhkMck7ng4fvAgMBAAGj ggGPMIIBizAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUcXBzOeM591Y6SwWIEuk6aUP7drIwIQYDVR0RBBowGIIWY2RuLnlvdXJ0cmlw Lm10cmlwLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeQtOREJmwFdQd 2D6hH9u/Ev04MImE2RnO4/msX7sOMXHjw3jqnOu+SO0crBQFiv8s5x19KHzBCGhD IzUj/gJeYzB10xCU0noa97I69DqgMCgV6uBAHpVDhB9h7rE112GIJgatto+mbLhn Pen5mVzCtPDBfhYTc55GSjeuRc3sWBPBr3xr+r8+ROpN7KBex0pOg8ChGIozmOlk bWie4L3O/rkNHb/NFjQKHQTT+GPHa31NfDVLu/5iXjAaXdJYMjl0/3RLoHxerI40 HfZaNLzmUMGxSr4tGMHJ/wgqf0JNREf4zo8fXSCQNy1DXj0FaiNV//w6EYHWyzU9 wy/TDZpD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G3EZljxqrkh7hlJXfCU cv+sW9vV7x5vQhQfoQaHNR2NkYY3xqbS4XUBSfT35+l8LQNvzGnTiwsM4p9KcZP1 xwQxzYTf8lwSQEXQm008OcT93vUKXe99KGjYgNJbtoZIjOYg/V0T6EYHozX2xAKg SNCVP0f4q4cUjHUwETmpd/Y/EBuj3GnGqSul1W1VnuaXhy/lw8rmqRhTsgk8dVC1 KvGZCHhtzBwfq50K19dTwiCqKnPhjlY/EyFRWHBPx+Wqv3XIdu5rIdf/c8uweZ59 ocjVW4NRLIcs82ekQHKepj+33Es8vVcRN/6oEQPsgT+OKwzJP3C+qsYZDHJO54OH 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2465469420464288905892172058729607489 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.yourtrip.mtrip.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28836461749408410564864135148871288148421083784686130984475560103310311597975117722507473732672799352694864954945049627923820098580665863288384297168419316785547502112803563073474750890076387444329696003156545067979773821298291211494807648655224115264513758614252606904417804168723810193128628999097212544444242048820965242097269277491983948959539467447764888367239221890796041657244312666095088356739932499534218987866807480516440589590614984945718106920856046211753138019759340466824054449355159775370482101640460705523559265341984550434055540401375606387102779506286766291391824821607854465303390438060947082020847 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71707339e339f7563a4b058812e93a6943fb76b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.yourtrip.mtrip.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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