*.oaisd.org
Issued by Amazon
About this certificate
This digital certificate with serial number 07:99:60:fc:e6:57:b4:ec:af:7a:be:9d:77:3f:9e:2e was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.oaisd.org
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:99:60:fc:e6:57:b4:ec:af:7a:be:9d:77:3f:9e:2eSerial Number (int): 10100984537956727089724572833339645486
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 45:c2:75:1f:1e:c9:c8:81:b3:7e:e5:2f:17:10:ae:87:11:d9:4c:dc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ab:95:73:55:90:be:9d:7b:df:53:8e:29:15:22:00:16:a8:c1:ce:8b
Fingerprint (sha256): 86:cc:7b:fb:7c:33:2d:cc:dd:f6:28:94:5a:bf:92:3b:fe:fb:51:0d:11:05:57:b2:ac:f7:fd:0c:c4:70:2f:31
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.oaisd.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.oaisd.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.oaisd.org
Other certificates including the domain name oaisd.org
(limited to 100 certificates)
www.oaisd.org
www.oaisd.org
ic.oaisd.org
luxottica.gpsdigital.com.au
www.oaisd.org
www.oaisd.org
seastar.life
www.oaisd.org
www.oaisd.org
*.oaisd.org
www.oaisd.org
www.oaisd.org
*.jibe.collaborate.oaisd.org
www.oaisd.org
irisdata.oaisd.org
www.oaisd.org
cri.oaisd.org
*.oaisd.org
*.oaisd.org
lingon.app
www.oaisd.org
sepbot.com
techsolutions.oaisd.org
www.oaisd.org
*.oaisd.org
www.oaisd.org
www.oaisd.org
quasar-legal.com
www.oaisd.org
jibe.collaborate.oaisd.org
www.lifetheapp.com
*.oaisd.org
www.oaisd.org
tax-ledger.com
www.oaisd.org
www.oaisd.org
www.theantiquearcade.co.za
www.oaisd.org
www.oaisd.org
www.bontebode.nl
www.oaisd.org
*.oaisd.org
www.oaisd.org
www.techsolutions.oaisd.org
www.oaisd.org
bothma-wedding.com
jibe.collaborate.oaisd.org
*.oaisd.org
www.oaisd.org
*.oaisd.org
www.oaisd.org
inqwizit.oaisd.org
www.oaisd.org
www.oaisd.org
jibe.collaborate.oaisd.org
www.oaisd.org
htmlhandbook.com
www.oaisd.org
www.robotics101.com
buttons.bombers.space
cri.oaisd.org
www.oaisd.org
*.oaisd.org
k.cotori.cc
*.oaisd.org
www.oaisd.org
www.opcovid.com
whoami.oaisd.org
www.oaisd.org
electsure.app
www.darryl-brooks.com
*.oaisd.org
whoami-demo.oaisd.org
www.oaisd.org
www.oaisd.org
nexus.oaisd.org
techsolutions.oaisd.org
whoami-demo.oaisd.org
*.oaisd.org
www.oaisd.org
techsolutions.oaisd.org
www.oaisd.org
*.oaisd.org
inqwizit.oaisd.org
www.oaisd.org
www.oaisd.org
irisdata.oaisd.org
www.oaisd.org
irisdata.oaisd.org
techsolutions.oaisd.org
www.oaisd.org
cri.oaisd.org
*.oaisd.org
techsolutions.oaisd.org
www.oaisd.org
www.oaisd.org
www.oaisd.org
www.oaisd.org
paypix.io
cri.oaisd.org
www.oaisd.org
ic.oaisd.org
luxottica.gpsdigital.com.au
www.oaisd.org
www.oaisd.org
seastar.life
www.oaisd.org
www.oaisd.org
*.oaisd.org
www.oaisd.org
www.oaisd.org
*.jibe.collaborate.oaisd.org
www.oaisd.org
irisdata.oaisd.org
www.oaisd.org
cri.oaisd.org
*.oaisd.org
*.oaisd.org
lingon.app
www.oaisd.org
sepbot.com
techsolutions.oaisd.org
www.oaisd.org
*.oaisd.org
www.oaisd.org
www.oaisd.org
quasar-legal.com
www.oaisd.org
jibe.collaborate.oaisd.org
www.lifetheapp.com
*.oaisd.org
www.oaisd.org
tax-ledger.com
www.oaisd.org
www.oaisd.org
www.theantiquearcade.co.za
www.oaisd.org
www.oaisd.org
www.bontebode.nl
www.oaisd.org
*.oaisd.org
www.oaisd.org
www.techsolutions.oaisd.org
www.oaisd.org
bothma-wedding.com
jibe.collaborate.oaisd.org
*.oaisd.org
www.oaisd.org
*.oaisd.org
www.oaisd.org
inqwizit.oaisd.org
www.oaisd.org
www.oaisd.org
jibe.collaborate.oaisd.org
www.oaisd.org
htmlhandbook.com
www.oaisd.org
www.robotics101.com
buttons.bombers.space
cri.oaisd.org
www.oaisd.org
*.oaisd.org
k.cotori.cc
*.oaisd.org
www.oaisd.org
www.opcovid.com
whoami.oaisd.org
www.oaisd.org
electsure.app
www.darryl-brooks.com
*.oaisd.org
whoami-demo.oaisd.org
www.oaisd.org
www.oaisd.org
nexus.oaisd.org
techsolutions.oaisd.org
whoami-demo.oaisd.org
*.oaisd.org
www.oaisd.org
techsolutions.oaisd.org
www.oaisd.org
*.oaisd.org
inqwizit.oaisd.org
www.oaisd.org
www.oaisd.org
irisdata.oaisd.org
www.oaisd.org
irisdata.oaisd.org
techsolutions.oaisd.org
www.oaisd.org
cri.oaisd.org
*.oaisd.org
techsolutions.oaisd.org
www.oaisd.org
www.oaisd.org
www.oaisd.org
www.oaisd.org
paypix.io
cri.oaisd.org
Certificate
The complete raw certificate details for *.oaisd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQB5lg/OZXtOyver6ddz+eLjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMTQwMDAwMDBaFw0xOTEyMTQx MjAwMDBaMBYxFDASBgNVBAMMCyoub2Fpc2Qub3JnMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA8VkAj/mHoAnmtn9D/HvYVbUnFwYXt+nZ37BXlFo0TgnI 0gEpVyRMfltI+BBQXls6HR+JISjDqOrRYPbzTmSwXmT0wXfZhkCY9GhrPQDpaoH/ t7Daxuz1CPlTTDqvtf/7YdZG5LVfzhpTGK7Cv7rmEWmXD5tCrRqNyU2fpAZwUiZi mMkCMhRJYyfNlLBtXfx65M++PAkGNmWKt9uyu9BCmcxPs+HDojTKJEB8Arfhlv0m khIzy5DxZ+W1Dddh6rN24rl9vXBuTbABIZEV/VeZt/iEaZWYbzAu/O1qh2DkJG0X EHvKVcK3NyKPW5+BnjUxGWacDeuUreZnl8pFogXACwIDAQABo4ICeDCCAnQwHwYD VR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFEXCdR8eyciB s37lLxcQrocR2UzcMBYGA1UdEQQPMA2CCyoub2Fpc2Qub3JnMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw oC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3Js MCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20v c2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWcTdJcnAAAEAwBH MEUCIQDEKtlZX3wnrm2aOPwnoPeVS3hb/E5hdfr7efJgiezpDwIgW58Ktjk3FuDX iAYBXsjmvrLcTv961AcbTtmYjjDfZjEAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9K tWDBtOr/XqCDDwAAAWcTdJfbAAAEAwBIMEYCIQDlhsBy7AN16w7kZRHRYtex7qZy czHmTwVguO/6fuclLwIhALuRr91XyU+m3IrrFMSY7qO3wHY1OOHD+F4EcUqbCgzl MA0GCSqGSIb3DQEBCwUAA4IBAQCfotgg+td+bjKm9/sen+SqGNjeXxHjrh+exslc j5mL+Jj7u1Ar/IA7BaLCHV8krzvewTRz4azDswnuk6AoPuP04fjD7dbuLdZ5zc2Q ASTf2t667M20kzeUeX2p7J1Tq/Q4RU6eRKPBxap0m2imoIBV6AVgPfGOHNxqr2yT mYLMUU/Oh8JHmDaV9RqvhsYI216sBIWsSocJor84KXGPXeN7lmwyQwSS+59iSP2p m5kyQiX9fwfImka0nbpHcnlIurnXDOfc9VF/rXe/EG3X/8kJ5lT9w2xy60cX88ly WR2Nx/MuEciFesQ04jlZUWZufy0tkN1BnDMLzSkVva9brv8e -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VkAj/mHoAnmtn9D/HvY VbUnFwYXt+nZ37BXlFo0TgnI0gEpVyRMfltI+BBQXls6HR+JISjDqOrRYPbzTmSw XmT0wXfZhkCY9GhrPQDpaoH/t7Daxuz1CPlTTDqvtf/7YdZG5LVfzhpTGK7Cv7rm EWmXD5tCrRqNyU2fpAZwUiZimMkCMhRJYyfNlLBtXfx65M++PAkGNmWKt9uyu9BC mcxPs+HDojTKJEB8Arfhlv0mkhIzy5DxZ+W1Dddh6rN24rl9vXBuTbABIZEV/VeZ t/iEaZWYbzAu/O1qh2DkJG0XEHvKVcK3NyKPW5+BnjUxGWacDeuUreZnl8pFogXA CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10100984537956727089724572833339645486 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.oaisd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30467320115852873539001204778691145425020985613773029215711341093576829766738986278207198662230253489674760031966576639176665587567393808859097569025469673251391063587997950355539995413800331992737435183473387390388303349718664865852309277931080711876765623654999909282938628340568900899967426574009870663234700264440813054860508832196845578433735555001985766604710414503357362893483239669502790015875770573054338130229509814338258877668244877135936148257281789709938773504198574446154346217743539739743665019033164843203881724710322319485371303326463344969460018920714239934227260850100934994667256546084255208685579 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45c2751f1ec9c881b37ee52f1710ae8711d94cdc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oaisd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167137497270000040300473045022100c42ad9595f7c27ae6d9a38fc27a0f7954b785bfc4e6175fafb79f26089ece90f02205b9f0ab6393716e0d78806015ec8e6beb2dc4eff7ad4071b4ed9988e30df66310077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167137497db0000040300483046022100e586c072ec0375eb0ee46511d162d7b1eea6727331e64f0560b8effa7ee7252f022100bb91afdd57c94fa6dc8aeb14c498eea3b7c0763538e1c3f85e04714a9b0a0ce5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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