*.coinapp.co
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 08:38:20:a1:23:c0:b0:cc:36:bd:31:f5:a7:90:65:85 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.coinapp.co
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:38:20:a1:23:c0:b0:cc:36:bd:31:f5:a7:90:65:85Serial Number (int): 10925254394263682985134309230307730821
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d7:c6:4e:24:07:9a:86:a5:f0:ab:fc:f4:be:96:02:05:e6:53:5e:f6
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 19:26:bf:e5:51:8c:bf:21:de:3b:a1:ed:a0:9b:0a:bc:02:1f:8d:2b
Fingerprint (sha256): 81:2b:df:3e:b0:1f:a5:82:a8:2a:3d:62:d6:f0:61:c4:8a:69:73:71:cf:93:e7:9c:d4:8c:b6:75:0f:bc:2d:2d
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.coinapp.co
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.coinapp.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.coinapp.co
coinapp.co
coinapp.co
Other certificates including the domain name coinapp.co
(limited to 100 certificates)
www.gentlestots.com
*.coinapp.co
www.twinpeaks.dev
www.twinpeaks.dev
daisuzz.dev
clear.io
www.calculategst.co.nz
www.tullamarineairporttransfers.com.au
geriatriacoracaodemaria.com.br
www.broccoli.app
www.freel.app
support.coinapp.co
coinapp.co
www.wasmerize.org
*.coinapp.co
upsquared.com
ssalvail.com
dev.tenantfile.org
huruplay.com
rocketroundingapp.com
special.coinapp.co
www.remifranek.pl
*.app.coinapp.co
my.coinapp.co
www.donaldposkitt.com
www.steps-edu.com
www.selvam.net
support.coinapp.co
www.ruzzll.com
www.hellovallalkozo.hu
bragpot.co.uk
support.coinapp.co
link.pinart.io
*.coinapp.co
kyletrocki.com
mail.swiil.com
setup.coinapp.co
*.coinapp.co
links.ulocal.co
twiirk.com
eventy.co
coinapp.co
auth.heftyverse.xyz
balance.boys-choir-lucerne.ch
ggtk.app
support.coinapp.co
www.momentoswow.com
*.coinapp.co
www.vicpoolcomplianceinspections.com.au
divinationcreations.com
portal.uiclap.com
*.app.coinapp.co
wttech.com.au
www.acepay.com.br
metooalicante.pedidomovil.es
link.pinart.io
step6demo.netlawinc.com
actioniq.ideacloud.com
www.drivool.in
*.coinapp.co
www.shiftstudio.ro
*.services.coinapp.co
www.coinapp.co
grastant.com
www.terpity.com
metalink.dreamwave.live
piratekingdom.net
prave.ca
shop.coinapp.co
my.coinapp.co
productguru.in
*.coinapp.co
sculptorsindia.com
finemaster.app
app.galaxycard.in
auth.heftyverse.xyz
coolespace.com
*.my.coinapp.co
step6demo.netlawinc.com
vizzn.ca
www.coinapp.co
beta.mymorrisons.com
www.wistia.no
links.ulocal.co
coinapp.co
flyrides.joyridecity.bike
special.coinapp.co
ggtk.app
www.coinapp.co
stratice.3diq.com
www.tiki.cl
identity.eatorigami.com
system.coinapp.co
test.eduplanllc.com
content.wat.app
rentkey.co.uk
stratice.3diq.com
dirigeable.ca
xn--ddkyb8bu13q45f.com
orders.herseybins.ca
*.coinapp.co
www.twinpeaks.dev
www.twinpeaks.dev
daisuzz.dev
clear.io
www.calculategst.co.nz
www.tullamarineairporttransfers.com.au
geriatriacoracaodemaria.com.br
www.broccoli.app
www.freel.app
support.coinapp.co
coinapp.co
www.wasmerize.org
*.coinapp.co
upsquared.com
ssalvail.com
dev.tenantfile.org
huruplay.com
rocketroundingapp.com
special.coinapp.co
www.remifranek.pl
*.app.coinapp.co
my.coinapp.co
www.donaldposkitt.com
www.steps-edu.com
www.selvam.net
support.coinapp.co
www.ruzzll.com
www.hellovallalkozo.hu
bragpot.co.uk
support.coinapp.co
link.pinart.io
*.coinapp.co
kyletrocki.com
mail.swiil.com
setup.coinapp.co
*.coinapp.co
links.ulocal.co
twiirk.com
eventy.co
coinapp.co
auth.heftyverse.xyz
balance.boys-choir-lucerne.ch
ggtk.app
support.coinapp.co
www.momentoswow.com
*.coinapp.co
www.vicpoolcomplianceinspections.com.au
divinationcreations.com
portal.uiclap.com
*.app.coinapp.co
wttech.com.au
www.acepay.com.br
metooalicante.pedidomovil.es
link.pinart.io
step6demo.netlawinc.com
actioniq.ideacloud.com
www.drivool.in
*.coinapp.co
www.shiftstudio.ro
*.services.coinapp.co
www.coinapp.co
grastant.com
www.terpity.com
metalink.dreamwave.live
piratekingdom.net
prave.ca
shop.coinapp.co
my.coinapp.co
productguru.in
*.coinapp.co
sculptorsindia.com
finemaster.app
app.galaxycard.in
auth.heftyverse.xyz
coolespace.com
*.my.coinapp.co
step6demo.netlawinc.com
vizzn.ca
www.coinapp.co
beta.mymorrisons.com
www.wistia.no
links.ulocal.co
coinapp.co
flyrides.joyridecity.bike
special.coinapp.co
ggtk.app
www.coinapp.co
stratice.3diq.com
www.tiki.cl
identity.eatorigami.com
system.coinapp.co
test.eduplanllc.com
content.wat.app
rentkey.co.uk
stratice.3diq.com
dirigeable.ca
xn--ddkyb8bu13q45f.com
orders.herseybins.ca
Certificate
The complete raw certificate details for *.coinapp.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIQCDggoSPAsMw2vTH1p5BlhTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDMxOTAwMDAwMFoXDTI1MDQxNjIzNTk1OVowFzEV MBMGA1UEAwwMKi5jb2luYXBwLmNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAm6MaQP+WHw+R51QeVNhIc6Kh0jM12c0od2tfAsfugif+vWCuyJS0tegk JSkHP72t1pESYhgtA/HE9hg6b7oC2aZGO9vZrrlGUn5/DDqa2Ls1Sr4mkY37EOXF slLpbEpyflQXLcb7ht3c7Xp/rpZ71K/QDXuLp+qfdBF85RCUFmY3FZeEAiJBe9FF cVJtJpWsamw91xnd0bEhOg9Je/u8IFp51XYrgDBjjq+C73n/aGek5PM4ZRSkzv77 1BFl+kX3WUy6JvvHpCUtcKAi4avbizs3BRuOh/aXpgNkXCiwl783ICNEkKADN0Zp nQBesfVoKmQzq8Na8WlRxvpHejeL6QIDAQABo4IC7zCCAuswHwYDVR0jBBgwFoAU VdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFNfGTiQHmoal8Kv89L6WAgXm U172MCMGA1UdEQQcMBqCDCouY29pbmFwcC5jb4IKY29pbmFwcC5jbzATBgNVHSAE DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMu YW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2Vy MAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AE51oydc mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjlXKdk0AAAQDAEYwRAIgRglt ov/r6Jmc1NK4WbWdg7M2gxH8ftezmNOh+81arpACIDaymLoWXqO8ge50ZvpCizIk B2gfubeWK6KSBBo/rK5DAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowu ebgAAAGOVcp2TwAABAMARzBFAiEAoxCiIX1979xRu7E4cMGbcGTuLsNekqRRbkrJ 74aIWYECIFLbsH9e3vyTo+e5kTNKgxq1MHQcWSBR+XBMa9bI8tAOAHUA5tIxY0B3 jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGOVcp2VAAABAMARjBEAiAftjFM 6kdhGkFg5jdAASpCOODe7uw47eWjTzRcKU4A8AIgLmexJVkLFJmrBs3IzciB4i9O o0sdj4ABPONovFtHK2AwDQYJKoZIhvcNAQELBQADggEBAE0pp5a7bUgSlg/aQaLO 0eA7hHb8KYiYQeA6tE1jFNNguZCHJYPrdpAd0mDeM9Bc8tgTFeoen9Xa9wzSHTDw dM1+LWXEAPktQ1JBmL2HotAZtTNLCdr4FBji3jlp23Mhywq4WX4QMq86Wu4Juxko HRy7a1vH4MR3V3x2pkXtBo4PCvkOcNqC8d/AJ+LmMgk65JzxY815A1JfSnQ/mtKU AjqcvFw6V+prY6IVhmleWkNyePn2tz/VwpAa8TyexLjX6qpaAdCSr/N9bFI4SW/p WLUuxx4hkQFsMC5WYmjLBldZzbqd1oi8pukctGl2WRY+3vM1gA3uC28RE21E7A/K Qyo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6MaQP+WHw+R51QeVNhI c6Kh0jM12c0od2tfAsfugif+vWCuyJS0tegkJSkHP72t1pESYhgtA/HE9hg6b7oC 2aZGO9vZrrlGUn5/DDqa2Ls1Sr4mkY37EOXFslLpbEpyflQXLcb7ht3c7Xp/rpZ7 1K/QDXuLp+qfdBF85RCUFmY3FZeEAiJBe9FFcVJtJpWsamw91xnd0bEhOg9Je/u8 IFp51XYrgDBjjq+C73n/aGek5PM4ZRSkzv771BFl+kX3WUy6JvvHpCUtcKAi4avb izs3BRuOh/aXpgNkXCiwl783ICNEkKADN0ZpnQBesfVoKmQzq8Na8WlRxvpHejeL 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10925254394263682985134309230307730821 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coinapp.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19647366136887688131265770854952652637630045843590976320153336457542575388320914472676618934391478512949374838929077763544634817080044694328771601785305042042211073298511604651829165875868889528134961223416395581230698372930722707482646088670743142729280235197327485086755580394089863242987954035602824494302016619634708892511452879023923638332763888281887280262395635837734299423048418987535245662001735915062060656349308061239990991597695954122728859344657299137789355389768505661869532774931091891130691772907882963769774199427118895645035461677865627038513946877035052936251020519954554575047508811263591816072169 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7c64e24079a86a5f0abfcf4be960205e6535ef6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinapp.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinapp.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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