*.tagheuergolf.com
- TAG Heuer, succursale de LVMH Swiss Manufactures SA -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 08:6b:30:b9:10:f4:fd:ea:14:e0:02:64:93:59:e9:1b was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
TAG Heuer, succursale de LVMH Swiss Manufactures SA
Organization:
TAG Heuer, succursale de LVMH Swiss Manufactures SA
State / Province:
Neuchâtel
Locality: La Chaux-de-Fonds
Country: CH
Locality: La Chaux-de-Fonds
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:6b:30:b9:10:f4:fd:ea:14:e0:02:64:93:59:e9:1bSerial Number (int): 11190387948261531092455998656194668827
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 75:29:cb:30:a9:ce:ba:ad:44:1f:9a:63:52:80:e0:4b:07:b7:1e:89
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 2c:68:71:42:fe:c1:22:61:1f:59:40:86:ea:8b:7d:57:df:c1:94:4b
Fingerprint (sha256): 99:8b:33:6f:08:d2:82:f5:24:a4:31:dc:0f:a3:10:d9:c3:3f:47:eb:9a:87:2a:4d:48:93:a2:c1:ae:b3:91:8a
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate *.tagheuergolf.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.tagheuergolf.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.tagheuergolf.com
tagheuergolf.com
tagheuergolf.com
Other certificates including the domain name tagheuergolf.com
(limited to 100 certificates)
julioorellana.cl
*.tagheuergolf.com
links.tagheuergolf.com
www.recotori.jp
*.tagheuergolf.com
links.tagheuergolf.com
www.diogo.codes
hal-cg.com
*.tagheuergolf.com
finfm.app
softskills.careercrossroadsintl.com
*.tagheuergolf.com
creato.beckerx.dev
*.tagheuergolf.com
links-testing.tagheuergolf.com
www.yichenarts.com
www.aminorewards.com
www.noqueue.ca
design.infurnia.com
preview.arzneiundhaut.de
www.speehive.com
*.tagheuergolf.com
test.sendmi.co
admin.waitless.app
burakbilgin.dev
julioorellana.cl
heracles.fit
www.speehive.com
*.tagheuergolf.com
app.anookahealth.com
dev.bocs.work
web.chikoo.app
www.tunnelwall.com
tupodologa.com
*.tagheuergolf.com
beta.redacted.ai
*.tagheuergolf.com
metaqube.ai
push.notif.nc
hal-cg.com
www.wawsi.com
*.tagheuergolf.com
links.tagheuergolf.com
www.recotori.jp
*.tagheuergolf.com
links.tagheuergolf.com
www.diogo.codes
hal-cg.com
*.tagheuergolf.com
finfm.app
softskills.careercrossroadsintl.com
*.tagheuergolf.com
creato.beckerx.dev
*.tagheuergolf.com
links-testing.tagheuergolf.com
www.yichenarts.com
www.aminorewards.com
www.noqueue.ca
design.infurnia.com
preview.arzneiundhaut.de
www.speehive.com
*.tagheuergolf.com
test.sendmi.co
admin.waitless.app
burakbilgin.dev
julioorellana.cl
heracles.fit
www.speehive.com
*.tagheuergolf.com
app.anookahealth.com
dev.bocs.work
web.chikoo.app
www.tunnelwall.com
tupodologa.com
*.tagheuergolf.com
beta.redacted.ai
*.tagheuergolf.com
metaqube.ai
push.notif.nc
hal-cg.com
www.wawsi.com
Certificate
The complete raw certificate details for *.tagheuergolf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIQCGswuRD0/eoU4AJkk1npGzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA4MjkwMDAwMDBa Fw0yNDA4MjgyMzU5NTlaMIGZMQswCQYDVQQGEwJDSDETMBEGA1UECAwKTmV1Y2jD onRlbDEaMBgGA1UEBxMRTGEgQ2hhdXgtZGUtRm9uZHMxPDA6BgNVBAoTM1RBRyBI ZXVlciwgc3VjY3Vyc2FsZSBkZSBMVk1IIFN3aXNzIE1hbnVmYWN0dXJlcyBTQTEb MBkGA1UEAwwSKi50YWdoZXVlcmdvbGYuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0D AQcDQgAEXjdPY8DXOmopy+Y2zWCE+r0JjZRoT778O1GABkBJ1eQLNX0UUBT1RD+K wyinGlX0PxbYx+OWGsrRJztv03ankKOCA4YwggOCMB8GA1UdIwQYMBaAFLdrouqo qoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBR1Kcswqc66rUQfmmNSgOBLB7ceiTAv BgNVHREEKDAmghIqLnRhZ2hldWVyZ29sZi5jb22CEHRhZ2hldWVyZ29sZi5jb20w DgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCB jwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln aUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3Js MD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNy dDAJBgNVHRMEAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYpBRkQwAAAEAwBIMEYCIQCmrCvr 26z9DgwUTKmo8P6xwh3bPHQ8LfG08luf9F42hAIhANBrpBqlnsQxQ0OaXtEdhoPB hZPUnfjVDhEZ5KwahDFUAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY hHMAAAGKQUZCawAABAMASDBGAiEAoQO2fZol/q++9D4xxlxcSrLdEwYgOCdF+8EC 1Tz7W54CIQCX8Gm//lKwb5lm3DS59L5cXXjVor/ZapKF3awtH4idwgB2ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABikFGQgkAAAQDAEcwRQIgA6vS ogBzMsGiDVQbctimLuPoOY+9czjumLtDnlXRqdACIQDRj6FHCijFoVTVrhP/nct3 uJwxrhZSYFjHr+eXmBZPzjANBgkqhkiG9w0BAQsFAAOCAQEAdc1m1NagK4Sl9l29 r1uq9/1yAA/DM214Xfr0pctkPUV0z5hk7psP02gI2LR2+kKZLjz+GJjGQQZFxNWv 6LfsNJQoIi0xPp5HCpo8zpIKJCVfkAj6pQzxQySeKdgtJMfSGkQrCcAXG5ZL12gk 8n3SIwGUOVexC1MqwpEzKlZ0T6rxvGXMsOB5BEoAio0Y4uxQpk8J3su8F69db3Ge CH6k3QLERTwao3282pvN/ElavNcA9PB7CDpxHM7OsLPBHPI4Jk+fLGXgQQ0/xBTg iaorC7jmBhMe70I1+g8xw1EkeKy9HBzquEoNAu4NDBQxCT97mS2hXTJ1cDZomnBH NlnGFA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXjdPY8DXOmopy+Y2zWCE+r0JjZRo T778O1GABkBJ1eQLNX0UUBT1RD+KwyinGlX0PxbYx+OWGsrRJztv03ankA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11190387948261531092455998656194668827 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neuchâtel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'La Chaux-de-Fonds' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAG Heuer, succursale de LVMH Swiss Manufactures SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tagheuergolf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00045e374f63c0d73a6a29cbe636cd6084fabd098d94684fbefc3b5180064049d5e40b357d145014f5443f8ac328a71a55f43f16d8c7e3961acad1273b6fd376a790 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7529cb30a9cebaad441f9a635280e04b07b71e89 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagheuergolf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagheuergolf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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