api-dev.lct-prime.de
Issued by Amazon
About this certificate
This digital certificate with serial number 07:ff:a3:6f:c7:01:cd:1f:f2:37:92:b5:fd:48:bf:22 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api-dev.lct-prime.de
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:ff:a3:6f:c7:01:cd:1f:f2:37:92:b5:fd:48:bf:22Serial Number (int): 10631946558101921015921420330156474146
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 18:39:0e:b7:71:8e:ae:05:32:de:4d:d4:31:ee:91:81:41:23:4f:02
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 69:34:d9:ee:3a:68:78:c2:4f:5a:73:96:cc:5a:ae:e3:25:b3:34:77
Fingerprint (sha256): 84:a9:20:16:d6:1c:c6:a7:92:41:6f:d1:a3:8d:98:1f:2d:c1:11:aa:39:cb:f5:83:20:f7:1d:bc:b9:39:be:94
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api-dev.lct-prime.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-dev.lct-prime.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-dev.lct-prime.de
Other certificates including the domain name lct-prime.de
(limited to 100 certificates)
luckykittens.io
bariyasui.com
tigontec.com
www.bendayan.com.br
www.under25collegewars.com
www.norso.app
dev.lct-prime.de
www.calendar.maroc-concasseur.com
api-dev.lct-prime.de
www.semrush.vidon.ai
www.despertarya.com
hal-cg.com
lct-prime.de
auth.cryptken.com
epprove.net
ghneurosurgicalalliance.org
www.richard.cash
figmacorp.backpac.co
n.suhail.ai
api.lct-prime.de
systam.mx
uat.lct-prime.de
api.lct-prime.de
visionprofiler.com
www.wuselperium.de
app.yuyusystem.com
www.patpatsafaris.com
ubaidh.com
epprove.net
vpn119.com
beta.exchange.dexkit.com
zingotravel.com
training.danielsuhfitness.com
whiteboard.matthewpaulin.com
promo.shofha.com
albalon.com
kokoroba-zyusetsu.com
link.jimezdrave.cz
macentonjoash.tk
www.chnops42.xyz
visionprofiler.com
api-dev.lct-prime.de
banati.in
www.ryanstest.com
grupomoudo.com.br
otis.hrestart.com.br
variskindo.com
storage.go2s.com
www.sptzone.com
lct-prime.de
ghneurosurgicalalliance.org
register.snap-cash.ca
dev-app.telemetryhq.com
sonarpurchickens.com
api.lct-prime.de
yeowenda.com
api-dev.lct-prime.de
eutrack24.com
worknesty.com
www.avainfo.net
www.wuselperium.de
partenero.com
api.lct-prime.de
www.fcseafoods.in
jklm.co.za
dashboard.firesafe.app
automateit.ai
api-dev.lct-prime.de
www.lct-prime.de
www.moneypawn.ca
plataformaenlace.app
emotioncoach.audeering.com
southernclaimsolutions.com
beachroadarmysupply.com
viralvideoss.com
janardhanpulivarthi.com
hal-cg.com
sl.echochat.live
worldchat.theexhibitionontour.com
worldchat.theexhibitionontour.com
www.appcuadrosycuadros.com
test-admin.cleared4.in
carousel.vanhattum.xyz
smiberts.com
oraclesqltraining.ie
nascernailha.com.br
admin.juniorhighgame.com
www.oppo-studio.com
app.desk-booking.com
liporace.dev
dev.aveti.app
bariyasui.com
tigontec.com
www.bendayan.com.br
www.under25collegewars.com
www.norso.app
dev.lct-prime.de
www.calendar.maroc-concasseur.com
api-dev.lct-prime.de
www.semrush.vidon.ai
www.despertarya.com
hal-cg.com
lct-prime.de
auth.cryptken.com
epprove.net
ghneurosurgicalalliance.org
www.richard.cash
figmacorp.backpac.co
n.suhail.ai
api.lct-prime.de
systam.mx
uat.lct-prime.de
api.lct-prime.de
visionprofiler.com
www.wuselperium.de
app.yuyusystem.com
www.patpatsafaris.com
ubaidh.com
epprove.net
vpn119.com
beta.exchange.dexkit.com
zingotravel.com
training.danielsuhfitness.com
whiteboard.matthewpaulin.com
promo.shofha.com
albalon.com
kokoroba-zyusetsu.com
link.jimezdrave.cz
macentonjoash.tk
www.chnops42.xyz
visionprofiler.com
api-dev.lct-prime.de
banati.in
www.ryanstest.com
grupomoudo.com.br
otis.hrestart.com.br
variskindo.com
storage.go2s.com
www.sptzone.com
lct-prime.de
ghneurosurgicalalliance.org
register.snap-cash.ca
dev-app.telemetryhq.com
sonarpurchickens.com
api.lct-prime.de
yeowenda.com
api-dev.lct-prime.de
eutrack24.com
worknesty.com
www.avainfo.net
www.wuselperium.de
partenero.com
api.lct-prime.de
www.fcseafoods.in
jklm.co.za
dashboard.firesafe.app
automateit.ai
api-dev.lct-prime.de
www.lct-prime.de
www.moneypawn.ca
plataformaenlace.app
emotioncoach.audeering.com
southernclaimsolutions.com
beachroadarmysupply.com
viralvideoss.com
janardhanpulivarthi.com
hal-cg.com
sl.echochat.live
worldchat.theexhibitionontour.com
worldchat.theexhibitionontour.com
www.appcuadrosycuadros.com
test-admin.cleared4.in
carousel.vanhattum.xyz
smiberts.com
oraclesqltraining.ie
nascernailha.com.br
admin.juniorhighgame.com
www.oppo-studio.com
app.desk-booking.com
liporace.dev
dev.aveti.app
Certificate
The complete raw certificate details for api-dev.lct-prime.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIQB/+jb8cBzR/yN5K1/Ui/IjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEyMjgwMDAwMDBaFw0yMDAxMjgx MjAwMDBaMB8xHTAbBgNVBAMTFGFwaS1kZXYubGN0LXByaW1lLmRlMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCIZf2cIUNSwQzhTjF3l5HoTCaOuD7X ThMRXiQy/xRKX5LnK0EyHF5Fp/HZKxZe7IwMESaUpKCTqECYPZuddZx2EEtmS3Fe Xi3Fr7JGiRHUu1QeSTuWJ29TzknYJwg6AsrIgzw2OFL06Vm4i1465BzcOl833qpi saEiMN4zWUVk/CpOmozwPAc/nYPCi/rBUfW8D+NY100xw+oxGOgOTYFk73b4ZCUv BWASo8rcnZhf24v/g9aFrm9X9mknaik1eDgNVhS1iUDizEr5uFeN2Skh4s2Tb/fB Gxy1c964UFl1AcgBFEBynr4Pfxf5BsmTJXrBDODyF5r7z9cF8KzxQwIDAQABo4IC gDCCAnwwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FBg5Drdxjq4FMt5N1DHukYFBI08CMB8GA1UdEQQYMBaCFGFwaS1kZXYubGN0LXBy aW1lLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNj YTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt 74uQXgAAAWf1rigEAAAEAwBHMEUCIDwOc3bxMAVFV6gPKQ7vJyfcytL3RLQHiOXe PdAh3J17AiEAkhafQgeP1sR+JTUynXoGFwy4k4vFN8hx/pYEc0xr/TgAdgCHdb/n WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWf1rijYAAAEAwBHMEUCIQDh xRYsGNmjy+KhNdNCxSimGVikan5iN5YZ5D+nun8FIwIgfGpLMfXTU8ZcLqrFExZI qCo6bo34mNLBEj/iweu9PUcwDQYJKoZIhvcNAQELBQADggEBAIutQPYkCnZ3yXgk N8A2oXpdvaQFabX1DraCTSLw5cDjBjIn8M6RuVFjpruiUWEtjJHBs/6Vl+UB3SOM pwteSh0SZ5p6ccXnzGYfsQyzlHdpP+XLD1AqdA4f08+0duaukq/wmUkus8ZKZzim l34AVXbWi2gUnLutM/QluvOU1+SOoi5KD/xO5Cq2so+PwFS39E38YH1/qAY4NP7X B7vsOaAyBN1ysqvE6L+0vl50yblmAVQPTFBB+AgVIFD5/w5USKvyI+ADA0r/twaX L9KSQyZ7N2dNYLI7KDem2dnu6g8ffL3gGZEGfp9JegQ+RMtudcSXuBEtxSjLDEgt F7Tq0gI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCIZf2cIUNSwQzhTjF3 l5HoTCaOuD7XThMRXiQy/xRKX5LnK0EyHF5Fp/HZKxZe7IwMESaUpKCTqECYPZud dZx2EEtmS3FeXi3Fr7JGiRHUu1QeSTuWJ29TzknYJwg6AsrIgzw2OFL06Vm4i146 5BzcOl833qpisaEiMN4zWUVk/CpOmozwPAc/nYPCi/rBUfW8D+NY100xw+oxGOgO TYFk73b4ZCUvBWASo8rcnZhf24v/g9aFrm9X9mknaik1eDgNVhS1iUDizEr5uFeN 2Skh4s2Tb/fBGxy1c964UFl1AcgBFEBynr4Pfxf5BsmTJXrBDODyF5r7z9cF8Kzx QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10631946558101921015921420330156474146 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-dev.lct-prime.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24829759344567839201293691631815776811491698110864861363489347355607901854528867142795543034513273955372153817220043199069132041281386500979928873647916707437494813456395523179379877367523178187785645911159910234603713041653598512376005727826677226771226285549027502205521479022959211871895065599003361982123395658521908357387353798291289488379876939919451741313941903236676680634757469703617424952152462265020686934514961037549392990058001501057919318576903911540217281092246775931833489492433743310908968711166352817001122460507085985399587157501576832219441481792644012844419313413529463280527493016453535884964163 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 18390eb7718eae0532de4dd431ee918141234f02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.lct-prime.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000167f5ae2804000004030047304502203c0e7376f130054557a80f290eef2727dccad2f744b40788e5de3dd021dc9d7b02210092169f42078fd6c47e2535329d7a06170cb8938bc537c871fe9604734c6bfd380076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167f5ae28d80000040300473045022100e1c5162c18d9a3cbe2a135d342c528a61958a46a7e62379619e43fa7ba7f052302207c6a4b31f5d353c65c2eaac5131648a82a3a6e8df898d2c1123fe2c1ebbd3d47 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008bad40f6240a7677c9782437c036a17a5dbda40569b5f50eb6824d22f0e5c0e3063227f0ce91b95163a6bba251612d8c91c1b3fe9597e501dd238ca70b5e4a1d12679a7a71c5e7cc661fb10cb39477693fe5cb0f502a740e1fd3cfb476e6ae92aff099492eb3c64a6738a6977e005576d68b68149cbbad33f425baf394d7e48ea22e4a0ffc4ee42ab6b28f8fc054b7f44dfc607d7fa8063834fed707bbec39a03204dd72b2abc4e8bfb4be5e74c9b96601540f4c5041f808152050f9ff0e5448abf223e003034affb706972fd29243267b37674d60b23b2837a6d9d9eeea0f1f7cbde01991067e9f497a043e44cb6e75c497b8112dc528cb0c482d17b4ead202