aem.co.uk
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:06:87:86:1d:94:0a:a5:18:39:a0:70:06:47:9a:42 was issued on by Amazon.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aem.co.uk
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:06:87:86:1d:94:0a:a5:18:39:a0:70:06:47:9a:42Serial Number (int): 13326182490024674156982899697579956802
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9a:ac:2f:f1:3a:34:48:93:3d:7a:2a:5d:f3:a2:08:43:f9:c5:28:a6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e2:84:a2:ce:47:7e:ac:f6:e5:26:83:fa:26:93:9b:34:d5:a5:83:60
Fingerprint (sha256): 96:09:8d:8b:da:8b:e2:41:2f:3e:44:b0:fe:8a:a7:b4:25:b7:b0:9b:2e:5d:aa:50:21:b6:c4:03:c4:c1:76:8f
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate aem.co.uk
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aem.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aem.co.uk
ameron-agps.com
ameronglobal.com
ametek.co.jp
ametek.co.kr
ametek.co.uk
ametek.com
ametek.com.tw
ametek.fr
ametek.in
ametek.tw
ametekaerospaceanddefense.com
ametek-airtechnology.com
ametekams.com
ametekcalibration.de
ametekcalibration.dk
ametek-ct.com
ametekdfs.com
ametekdistributor.com
ametek-ecp.com
ameron-agps.com
ameronglobal.com
ametek.co.jp
ametek.co.kr
ametek.co.uk
ametek.com
ametek.com.tw
ametek.fr
ametek.in
ametek.tw
ametekaerospaceanddefense.com
ametek-airtechnology.com
ametekams.com
ametekcalibration.de
ametekcalibration.dk
ametek-ct.com
ametekdfs.com
ametekdistributor.com
ametek-ecp.com
Other certificates including the domain name aem.co.uk
(limited to 100 certificates)
solartronmetrology.jp
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
www.aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
www.aem.co.uk
aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
www.aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
aem.co.uk
www.aem.co.uk
www.aem.co.uk
aem.co.uk
Certificate
The complete raw certificate details for aem.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIQCgaHhh2UCqUYOaBwBkeaQjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMTkwMDAwMDBaFw0xOTEyMTkx MjAwMDBaMBQxEjAQBgNVBAMTCWFlbS5jby51azCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALH7AdgEXpj+hfpxtVrvj1s9K07nPxmAL6Ty0uomMBanNc9B +ES6YsgH+whqSLM50/6TmlqMCgXVEJedn98xULPE58pbrVTVz3Xa7l7TFzXHQSJt RCJJeSewK+2eRPNmxlnRmc9VeeeT4lzetBQEwKeqlBK5Oz7eb2sU57Ilcf++5nw1 mXT0OGWVXV/iN5tJRXDUKfmka7ke2NsewIf2G7lDV1m/ybRVRJ1JNTzTogVy3TgS YhIfyknI32SErWBcnlrA/xf/Va+nOvRP8rdEEJlUW9cYg2TIymuaV7RJJIep7AyH yxRY3FM1tS3PPz9iQr2PkhQ/EYPGo/3bVaGq2U8CAwEAAaOCAsowggLGMB8GA1Ud IwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSarC/xOjRIkz16 Kl3zoghD+cUopjCCAVoGA1UdEQSCAVEwggFNgglhZW0uY28udWuCD2FtZXJvbi1h Z3BzLmNvbYIQYW1lcm9uZ2xvYmFsLmNvbYIMYW1ldGVrLmNvLmpwggxhbWV0ZWsu Y28ua3KCDGFtZXRlay5jby51a4IKYW1ldGVrLmNvbYINYW1ldGVrLmNvbS50d4IJ YW1ldGVrLmZygglhbWV0ZWsuaW6CCWFtZXRlay50d4IdYW1ldGVrYWVyb3NwYWNl YW5kZGVmZW5zZS5jb22CGGFtZXRlay1haXJ0ZWNobm9sb2d5LmNvbYINYW1ldGVr YW1zLmNvbYIUYW1ldGVrY2FsaWJyYXRpb24uZGWCFGFtZXRla2NhbGlicmF0aW9u LmRrgg1hbWV0ZWstY3QuY29tgg1hbWV0ZWtkZnMuY29tghVhbWV0ZWtkaXN0cmli dXRvci5jb22CDmFtZXRlay1lY3AuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov L2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcw CwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH MAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw AoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwG A1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAIIKkBvrVT2RTMzSCG8OCpu6sVyNJFa+91NWCSE3zTkp33nFNsOMFO92MyhQ QeuUqHzTpvYNej5yxOlDbzPfOilbRjBynnAXoXwcTV+fbjMUJd5JTrIgjAXDaxIP u4sOHVrshBIJSuVFVXly8Cyajs6ZIxZdFsvQbk8WZMavHpkvI0hc96hrWJbZvWX/ /rfDsVxWVKZVBhdFMfjzqWGxIzrok/dIljaEel1Ppt3hnDr+Ky/wWq8m+cEzvAgm Rm2k4ehLL3cKIhTd17cCwn+VET8p585lctrqh8GRTl6O5BDUq07Kj00KNUyugADt CyI91qGZbIIMMT6IbTGDdJqQ3ds= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsB2ARemP6F+nG1Wu+P Wz0rTuc/GYAvpPLS6iYwFqc1z0H4RLpiyAf7CGpIsznT/pOaWowKBdUQl52f3zFQ s8TnylutVNXPddruXtMXNcdBIm1EIkl5J7Ar7Z5E82bGWdGZz1V555PiXN60FATA p6qUErk7Pt5vaxTnsiVx/77mfDWZdPQ4ZZVdX+I3m0lFcNQp+aRruR7Y2x7Ah/Yb uUNXWb/JtFVEnUk1PNOiBXLdOBJiEh/KScjfZIStYFyeWsD/F/9Vr6c69E/yt0QQ mVRb1xiDZMjKa5pXtEkkh6nsDIfLFFjcUzW1Lc8/P2JCvY+SFD8Rg8aj/dtVoarZ TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13326182490024674156982899697579956802 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aem.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22467956243704757246500728701211668900512250074272554093708871794245574680687147662911322219710702770531547000845252150228488223498350401042251235171251531111571614027987868492874296460088154811881909395398574797674286507415570247882787120116836428169577197878873247761841772774225382847726372973240957472549456904864896069625266647865370956677338664059466971470367401030209277881375150793537789188610656684800208712264906233651829468122953759585812343544697544318745986199168338856763947029794835535338043702636527230758067777949591807464926344484815665732891197585948268133771792630099341219801504154446104827189583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9aac2ff13a3448933d7a2a5df3a20843f9c528a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (337 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameron-agps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameronglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekaerospaceanddefense.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek-airtechnology.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekams.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekcalibration.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekcalibration.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek-ct.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekdfs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametekdistributor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametek-ecp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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