magazine.evvai.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:7e:29:42:ec:58:02:9a:93:2d:2a:31:cf:ce:a7:61 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=magazine.evvai.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:7e:29:42:ec:58:02:9a:93:2d:2a:31:cf:ce:a7:61Serial Number (int): 20593486221946462120785867220829775713
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: bc:9e:48:4b:bc:f6:b4:c5:aa:a6:61:14:d9:4a:8f:10:0f:6f:b7:94
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): c8:8a:5b:35:4f:83:9d:30:20:87:2a:ce:b8:20:64:97:11:35:86:8d
Fingerprint (sha256): 93:c3:75:91:e7:56:12:ed:75:cf:2d:1e:b2:97:89:af:ac:ab:47:5f:96:9a:06:a9:3d:7d:e1:0a:45:91:cf:31
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate magazine.evvai.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for magazine.evvai.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
magazine.evvai.com
Other certificates including the domain name evvai.com
(limited to 100 certificates)
www.marco.dev.evvai.com
sgboxportal.sgbox.it
support.eposnw.com
assistenza.edilbruny.it
assistenza.cmstlc.it
support.seosmash.it
*.evvai.com
soporte.fifa23legacycup.pro
support.inovatraining.com
asup.fancom.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.edilbruny.it
support.despeelgoedschuit.nl
assistenza.edilbruny.it
magazine.evvai.com
mailview.verkaufemehr.de
users.digitrame.fr
ticket.widemann.gmbh
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
support.inovatraining.com
assistenza.edilbruny.it
support.medianit.co.uk
www.evvai.com
www.evvai.com
assistenza.edilbruny.it
evvai.com
evvai.com
support.medianit.co.uk
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
evvai.com
www.evvai.com
magazine.evvai.com
asup.fancom.com
support.manstein.at
support.medianit.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.medianit.co.uk
helpdesk.dataroad.pt
sgboxportal.sgbox.it
cetec.support.arlian.fr
help.syntomax.com
track.weblims.it
support.inovatraining.com
rh.zagora.fr
support.eposnw.com
support.airgp.co.uk
magazine.evvai.com
support.manstein.at
helpdesk.itconsulting.cologne
users.digitrame.fr
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
track.netherfind.nl
support.manstein.at
assistenza.edilbruny.it
cetec.support.arlian.fr
support.les7royaumes.com
support.justin-legal.com
magazine.evvai.com
users.digitrame.fr
staging.evvai.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.cmstlc.it
helpdesk.pumtrix.com
*.evvai.com
support.seosmash.it
support.despeelgoedschuit.nl
www.evvai.com
support.lnmlaser.com
magazine.evvai.com
helpdesk.phc.parts
*.evvai.com
servizioclienti.evvai.com
support.seosmash.it
helpdesk.pumtrix.com
assistenza.edilbruny.it
www.evvai.com
support.inovatraining.com
hseq.naturalpower.com
evvai.com
servizioclienti.evvai.com
assistenza.edilbruny.it
ticket.widemann.gmbh
cetec.support.arlian.fr
support.eposnw.com
support.manstein.at
helpdesk.dataroad.pt
assistenza.edilbruny.it
evvai.com
helpdesk.dataroad.pt
sgboxportal.sgbox.it
support.eposnw.com
assistenza.edilbruny.it
assistenza.cmstlc.it
support.seosmash.it
*.evvai.com
soporte.fifa23legacycup.pro
support.inovatraining.com
asup.fancom.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.edilbruny.it
support.despeelgoedschuit.nl
assistenza.edilbruny.it
magazine.evvai.com
mailview.verkaufemehr.de
users.digitrame.fr
ticket.widemann.gmbh
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
support.inovatraining.com
assistenza.edilbruny.it
support.medianit.co.uk
www.evvai.com
www.evvai.com
assistenza.edilbruny.it
evvai.com
evvai.com
support.medianit.co.uk
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
evvai.com
www.evvai.com
magazine.evvai.com
asup.fancom.com
support.manstein.at
support.medianit.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.medianit.co.uk
helpdesk.dataroad.pt
sgboxportal.sgbox.it
cetec.support.arlian.fr
help.syntomax.com
track.weblims.it
support.inovatraining.com
rh.zagora.fr
support.eposnw.com
support.airgp.co.uk
magazine.evvai.com
support.manstein.at
helpdesk.itconsulting.cologne
users.digitrame.fr
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
track.netherfind.nl
support.manstein.at
assistenza.edilbruny.it
cetec.support.arlian.fr
support.les7royaumes.com
support.justin-legal.com
magazine.evvai.com
users.digitrame.fr
staging.evvai.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.cmstlc.it
helpdesk.pumtrix.com
*.evvai.com
support.seosmash.it
support.despeelgoedschuit.nl
www.evvai.com
support.lnmlaser.com
magazine.evvai.com
helpdesk.phc.parts
*.evvai.com
servizioclienti.evvai.com
support.seosmash.it
helpdesk.pumtrix.com
assistenza.edilbruny.it
www.evvai.com
support.inovatraining.com
hseq.naturalpower.com
evvai.com
servizioclienti.evvai.com
assistenza.edilbruny.it
ticket.widemann.gmbh
cetec.support.arlian.fr
support.eposnw.com
support.manstein.at
helpdesk.dataroad.pt
assistenza.edilbruny.it
evvai.com
helpdesk.dataroad.pt
Certificate
The complete raw certificate details for magazine.evvai.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEejCCA2KgAwIBAgIQD34pQuxYApqTLSoxz86nYTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMjEwMDAwMDBaFw0yMTAyMjEx MjAwMDBaMB0xGzAZBgNVBAMTEm1hZ2F6aW5lLmV2dmFpLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOJy0nlZSvszKehBcIegcosGWMmUQMCcjEkn KMGRZTWMHG/U9Ai/jJb7TzzkBlR5Js6HDzkWLzlw4+M4H8aoAjD6Khq4VC1pjkr4 /DdaU+tXoDMKvtBDMLjiZeR2ZDmPOOp0OdgtQaG6/LUPo/W9lM/dDh59PmenUutp I81O8YFK4c52iAmKKiN9+JVf4vC1Y4o4NWIsf7JybH6dUZaCdTczKmeBN2/X4tj+ x4o0f2B2fxJyD8YijX5wyUUn8b9NAs0xRwmqmoVNZmyoRu0SPw1Za9oBWtCuuSqC CX2Wq0lWL4bWbQaRcxA/4j0wspsTQ4TURuCsGGc0sTGvDzaeMPMCAwEAAaOCAYsw ggGHMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBS8 nkhLvPa0xaqmYRTZSo8QD2+3lDAdBgNVHREEFjAUghJtYWdhemluZS5ldnZhaS5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyICgA3y64MsfvOsoaKc0YLK VnIzyfnWgn0ChbIsANTwhvtzuC5KunFYPB11Y8qXoZ+6cPCq/VIuMOe3ZoPrJz2l DLVSeLINg9/atV9O7nNaKM1/lGIArpQkSeezPl6PsMDx4YOb6x154byJ/VzJggqC oj6R7vYC7Y5IBLBVNBIltb1OSjZnn1c9Ba8OwlTu3EkJiSX58c2VQggP9wEvCjlQ 8JzhsXInOXSrhYuYinWMf5t5LHDkXPfB9nHMldcbNHNaMnKwmkEiuKbp76TW/gIs 00rSwW+gyDYnqfchcMDWInK3QvuyMJUqdtqbAXpoWSPFM4HG0CAoLkP1TrzR3w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nLSeVlK+zMp6EFwh6By iwZYyZRAwJyMSScowZFlNYwcb9T0CL+MlvtPPOQGVHkmzocPORYvOXDj4zgfxqgC MPoqGrhULWmOSvj8N1pT61egMwq+0EMwuOJl5HZkOY846nQ52C1Bobr8tQ+j9b2U z90OHn0+Z6dS62kjzU7xgUrhznaICYoqI334lV/i8LVjijg1Yix/snJsfp1RloJ1 NzMqZ4E3b9fi2P7HijR/YHZ/EnIPxiKNfnDJRSfxv00CzTFHCaqahU1mbKhG7RI/ DVlr2gFa0K65KoIJfZarSVYvhtZtBpFzED/iPTCymxNDhNRG4KwYZzSxMa8PNp4w 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20593486221946462120785867220829775713 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.evvai.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28586477841755152460177148685978533219128910966383872552572965359981183554959973035236921372867884570175081460114036395859700779560919800599105968333688271873084083868888858462349338242149938504684403648529220381655423872167453295696656687627924289409574242765790541509604076623705837799315396540077454936718917570694568053050889010533894390001013422961527810289852622555871908240840091004999483262251728612103267679974040727154278577755543714004857834260223082767534212979465975875056567439620071275329882572099392049982725429086270250813072357543857317611183306642899304282868445720349748068544540900316693135241459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bc9e484bbcf6b4c5aaa66114d94a8f100f6fb794 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.evvai.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004b2202800df2eb832c7ef3aca1a29cd182ca567233c9f9d6827d0285b22c00d4f086fb73b82e4aba71583c1d7563ca97a19fba70f0aafd522e30e7b76683eb273da50cb55278b20d83dfdab55f4eee735a28cd7f946200ae942449e7b33e5e8fb0c0f1e1839beb1d79e1bc89fd5cc9820a82a23e91eef602ed8e4804b055341225b5bd4e4a36679f573d05af0ec254eedc49098925f9f1cd9542080ff7012f0a3950f09ce1b172273974ab858b988a758c7f9b792c70e45cf7c1f671cc95d71b34735a3272b09a4122b8a6e9efa4d6fe022cd34ad2c16fa0c83627a9f72170c0d62272b742fbb230952a76da9b017a685923c53381c6d020282e43f54ebcd1df