ct.footlocker.nl
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 07:0a:73:27:74:6d:1e:73:72:b0:4b:69:e1:3d:fe:46 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ct.footlocker.nl
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:0a:73:27:74:6d:1e:73:72:b0:4b:69:e1:3d:fe:46Serial Number (int): 9358854542114695239268139819786436166
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0b:68:ca:fa:7f:ec:45:92:91:48:ff:71:39:2c:64:82:00:89:c5:01
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 1e:a7:9c:7c:91:08:c1:b7:03:bd:a6:a2:9c:02:3e:11:75:71:70:e1
Fingerprint (sha256): 93:d1:ae:1c:1a:9c:09:a7:40:27:59:cb:60:60:4f:96:87:1f:77:b3:e3:03:2a:01:84:f7:1e:11:b8:0e:3e:e9
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate ct.footlocker.nl
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ct.footlocker.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ct.footlocker.nl
ct.footlocker.eu
ct-sand.footlocker.eu
ct-sand.footlocker.nl
ct.footlocker.eu
ct-sand.footlocker.eu
ct-sand.footlocker.nl
Other certificates including the domain name footlocker.nl
(limited to 100 certificates)
staging.footlocker.com
answers-texaneyecare.pagescdn.com
www.footlocker.eu
www.footlocker.com
www.footlocker.eu
www.footlocker.com
www.footlocker.com
www.footlocker.eu
*.footlocker.nl
answers.alpinebank.com.pagescdn.com
trk.bc.footlocker.ca
staging.footlocker.com
footlocker.nl
www.footlocker.eu
www.footlocker.com
answers-dallasrenalgroup.pagescdn.com
stores.footlocker.de
www.footlocker.eu
footlocker.nl
www.footlocker.com
answers-texaneyecare.pagescdn.com
staging.footlocker.com
www.footlocker.eu
stores.footlocker.nl
answers.alpinebank.com.pagescdn.com
www.footlocker.com
footlocker.nl
www.footlocker.eu
staging.footlocker.com
www.footlocker.eu
www.footlocker.com
locations.aussiegrill.com
www.footlocker.eu
www.footlocker.com
staging.footlocker.com
answers.westmichiganderm.com
footlocker.nl
ct.footlocker.nl
locations.aussiegrill.com
stores.footlocker.nl
staging.footlocker.com
www.footlocker.eu
target.footlocker.nl
footlocker.nl
www.footlocker.eu
target.footlocker.nl
dealers.poolguardusa.com
www.footlocker.eu
sanl.footlocker.nl
answers.entenmanns.com.yext-cdn.com
footlocker.nl
www.footlocker.eu
www.footlocker.eu
www.footlocker.eu
*.footlocker.nl
staging.footlocker.com
www.footlocker.eu
staging.footlocker.com
staging.footlocker.com
location.eastdevoncrematorium.co.uk
www.footlocker.eu
stores.footlocker.de
www.footlocker.com
www.footlocker.eu
www.footlocker.com
*.footlocker.nl
location.eastdevoncrematorium.co.uk
www.footlocker.com
footlocker.nl
www.footlocker.eu
footlocker.nl
www.stage.api.footlocker.com
staging.footlocker.com
www.footlocker.eu
ct.footlocker.nl
www.footlocker.com
ct.footlocker.nl
www.footlocker.eu
www.footlocker.eu
www.footlocker.com
www.footlocker.com
stores.footlocker.de
stores.footlocker.de
target.footlocker.nl
*.footlocker.nl
ct.footlocker.nl
www.footlocker.com
www.footlocker.eu
staging.footlocker.com
dealers.poolguardusa.com
www.footlocker.com
trk.bc.footlocker.ca
www.footlocker.eu
footlocker.nl
footlocker.nl
staging.footlocker.com
www.footlocker.com
www.footlocker.eu
www.footlocker.com
www.footlocker.eu
answers-texaneyecare.pagescdn.com
www.footlocker.eu
www.footlocker.com
www.footlocker.eu
www.footlocker.com
www.footlocker.com
www.footlocker.eu
*.footlocker.nl
answers.alpinebank.com.pagescdn.com
trk.bc.footlocker.ca
staging.footlocker.com
footlocker.nl
www.footlocker.eu
www.footlocker.com
answers-dallasrenalgroup.pagescdn.com
stores.footlocker.de
www.footlocker.eu
footlocker.nl
www.footlocker.com
answers-texaneyecare.pagescdn.com
staging.footlocker.com
www.footlocker.eu
stores.footlocker.nl
answers.alpinebank.com.pagescdn.com
www.footlocker.com
footlocker.nl
www.footlocker.eu
staging.footlocker.com
www.footlocker.eu
www.footlocker.com
locations.aussiegrill.com
www.footlocker.eu
www.footlocker.com
staging.footlocker.com
answers.westmichiganderm.com
footlocker.nl
ct.footlocker.nl
locations.aussiegrill.com
stores.footlocker.nl
staging.footlocker.com
www.footlocker.eu
target.footlocker.nl
footlocker.nl
www.footlocker.eu
target.footlocker.nl
dealers.poolguardusa.com
www.footlocker.eu
sanl.footlocker.nl
answers.entenmanns.com.yext-cdn.com
footlocker.nl
www.footlocker.eu
www.footlocker.eu
www.footlocker.eu
*.footlocker.nl
staging.footlocker.com
www.footlocker.eu
staging.footlocker.com
staging.footlocker.com
location.eastdevoncrematorium.co.uk
www.footlocker.eu
stores.footlocker.de
www.footlocker.com
www.footlocker.eu
www.footlocker.com
*.footlocker.nl
location.eastdevoncrematorium.co.uk
www.footlocker.com
footlocker.nl
www.footlocker.eu
footlocker.nl
www.stage.api.footlocker.com
staging.footlocker.com
www.footlocker.eu
ct.footlocker.nl
www.footlocker.com
ct.footlocker.nl
www.footlocker.eu
www.footlocker.eu
www.footlocker.com
www.footlocker.com
stores.footlocker.de
stores.footlocker.de
target.footlocker.nl
*.footlocker.nl
ct.footlocker.nl
www.footlocker.com
www.footlocker.eu
staging.footlocker.com
dealers.poolguardusa.com
www.footlocker.com
trk.bc.footlocker.ca
www.footlocker.eu
footlocker.nl
footlocker.nl
staging.footlocker.com
www.footlocker.com
www.footlocker.eu
www.footlocker.com
www.footlocker.eu
Certificate
The complete raw certificate details for ct.footlocker.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnzCCA4egAwIBAgIQBwpzJ3RtHnNysEtp4T3+RjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxODAwMDAwMFoXDTI1MDExNTIzNTk1OVowGzEZ MBcGA1UEAxMQY3QuZm9vdGxvY2tlci5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKn5XmB3whiHTjADsqncPDxKRnPC1UzLkzgMzbYHYg71Nx566Kow dUZ4zW01Sa9rf3tR2h+BI8kVKQlBYVWcIG+bbYvii9BNFCbrv1goN1bCqxSm60Bo uT2v5FS9n5c54Fv5Oxaj3b5Az22H2VNK92TFoUUF+h2rgmWr4EIwM5ymoEskNkNU UVgWe+VPDBFKQCxqFONt5A7xqYpDT45zUuKhELsub6t/I/phM2Xw7R8F84NIBXFZ whV329HtHQtGUkL6jxG8wMxzF0veX16o0a1jqpnIE0cO2estX07nzeIK+QelSGeu DCbOJLoFsqIqaXLEGyH+4woNf9e05YaYaKsCAwEAAaOCAbwwggG4MB8GA1UdIwQY MBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQLaMr6f+xFkpFI/3E5 LGSCAInFATBbBgNVHREEVDBSghBjdC5mb290bG9ja2VyLm5sghBjdC5mb290bG9j a2VyLmV1ghVjdC1zYW5kLmZvb3Rsb2NrZXIuZXWCFWN0LXNhbmQuZm9vdGxvY2tl ci5ubDATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5j b20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAIlGuUtlvQW3MnuIsr+T6uNV6n2OXxsM4mr48a/E NrQVXi1I5+qXIwyHYX6uoJzcdcgrSHcmvOb0zwIjIWnzd0wy5r7NutPfrHzaCWgO w81aHaZ4Dvzs28BkKLTLEdEy4pQtUMSsINoWql5gAts/qn0cCQKzTnDhEQxsBoNN ey8+WcYw8VKawtjb48fRg6mAF2cpTI6rholSBlyDqQPeij4Wa4KU4YrNQntXLbTV XDAeh02vtGrg6mrf5lLqBPBz/mN4mNOk77G8aFePqp4o0AP3xgquAOpGE6v7Ewuu 8PQmug/VOCCOw/OvczWi8BuV3vGBtT+mlw/5OhhcLBzTu1Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfleYHfCGIdOMAOyqdw8 PEpGc8LVTMuTOAzNtgdiDvU3HnroqjB1RnjNbTVJr2t/e1HaH4EjyRUpCUFhVZwg b5tti+KL0E0UJuu/WCg3VsKrFKbrQGi5Pa/kVL2flzngW/k7FqPdvkDPbYfZU0r3 ZMWhRQX6HauCZavgQjAznKagSyQ2Q1RRWBZ75U8MEUpALGoU423kDvGpikNPjnNS 4qEQuy5vq38j+mEzZfDtHwXzg0gFcVnCFXfb0e0dC0ZSQvqPEbzAzHMXS95fXqjR rWOqmcgTRw7Z6y1fTufN4gr5B6VIZ64MJs4kugWyoippcsQbIf7jCg1/17Tlhpho qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9358854542114695239268139819786436166 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ct.footlocker.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21457241808344581318921614177228321881154322765601615802555563866551129505270143975646371462037712777267906520825664385503323786704979048854221917407459535273725389168161191417008346726540392208914287222903554949157736547094953035278760680939042829024821377946013933512476056906624044572281823082384515513268422219544584371570314547281337815866327404034947904269400932792993824497027226040578905509445889060473085987420007081184067751012353185476419918873600595200910460707223333128011904820999545478312219132325665854551591403023764731975597274789624690310219801267522161849376890828534227670409370543932346457417899 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0b68cafa7fec45929148ff71392c64820089c501 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.footlocker.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.footlocker.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct-sand.footlocker.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct-sand.footlocker.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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