ping.paradigmhousing.co.uk
Issued by Amazon
About this certificate
This digital certificate with serial number 07:eb:d0:2c:2b:31:3f:73:81:23:08:1d:aa:27:d0:d5 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ping.paradigmhousing.co.uk
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:eb:d0:2c:2b:31:3f:73:81:23:08:1d:aa:27:d0:d5Serial Number (int): 10529007972854198205358585431082914005
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 97:3a:c5:f8:d6:2a:03:03:bd:12:9a:cb:19:c5:d2:d9:4f:e0:fb:56
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 8c:44:07:1d:a7:f8:f3:66:8d:75:4f:2b:e6:20:5e:57:82:c6:f1:c4
Fingerprint (sha256): 9a:3e:db:e1:77:28:ce:16:36:a0:fe:83:fa:82:04:fc:a1:2a:5a:bf:6a:14:77:05:a3:39:1c:0c:4d:b3:db:7f
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate ping.paradigmhousing.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ping.paradigmhousing.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ping.paradigmhousing.co.uk
Other certificates including the domain name paradigmhousing.co.uk
(limited to 100 certificates)
helpdesk.presto.se
itservicedesk.paradigmhousing.co.uk
servicedesk.iquw.com
soporte.inmocolonial.com
helpdesk.itsligo.ie
servicedesk.iquw.com
servicedesk.alessi.com
Portal.Paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
paradigmhousing.co.uk
www.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
helpdesk.itsligo.ie
paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
itservicedesk.paradigmhousing.co.uk
servicedesk.alessi.com
helpdesk.thomastallis.org.uk
foundation.paradigmhousing.co.uk
paradigmhousing.co.uk
pddevops.clinisys.com
servicedesk.alessi.com
portal.paradigmhousing.co.uk
servicedesk.iquw.com
helpdesk.itsligo.ie
ping.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
*.paradigmhousing.co.uk
*.paradigmhousing.co.uk
helpdesk.thomastallis.org.uk
helpdesk.thomastallis.org.uk
servicedesk.alessi.com
soporte.inmocolonial.com
servicedesk.coinford.co.uk
www.myparadigm.paradigmhousing.co.uk
helpdesk.presto.se
ping.paradigmhousing.co.uk
servicedesk.coinford.co.uk
helpdesk.camagroup.com
paradigmhousing.co.uk
paradigmhousing.co.uk
*.paradigmhousing.co.uk
paradigmhousing.co.uk
servicedesk.iquw.com
Portal.Paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
helpdesk.itsligo.ie
*.paradigmhousing.co.uk
paradigmhousing.co.uk
servicedesk.coinford.co.uk
soporte.inmocolonial.com
soporte.inmocolonial.com
helpdesk.presto.se
paradigmhousing.co.uk
servicedesk.coinford.co.uk
anyconnect.paradigmhousing.co.uk
gateway.paradigmhousing.co.uk
ping.paradigmhousing.co.uk
helpdesk.thomastallis.org.uk
helpdesk.presto.se
paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
ping.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
servicedesk.iquw.com
soporte.inmocolonial.com
helpdesk.itsligo.ie
servicedesk.iquw.com
servicedesk.alessi.com
Portal.Paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
paradigmhousing.co.uk
www.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
helpdesk.itsligo.ie
paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
itservicedesk.paradigmhousing.co.uk
servicedesk.alessi.com
helpdesk.thomastallis.org.uk
foundation.paradigmhousing.co.uk
paradigmhousing.co.uk
pddevops.clinisys.com
servicedesk.alessi.com
portal.paradigmhousing.co.uk
servicedesk.iquw.com
helpdesk.itsligo.ie
ping.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
*.paradigmhousing.co.uk
*.paradigmhousing.co.uk
helpdesk.thomastallis.org.uk
helpdesk.thomastallis.org.uk
servicedesk.alessi.com
soporte.inmocolonial.com
servicedesk.coinford.co.uk
www.myparadigm.paradigmhousing.co.uk
helpdesk.presto.se
ping.paradigmhousing.co.uk
servicedesk.coinford.co.uk
helpdesk.camagroup.com
paradigmhousing.co.uk
paradigmhousing.co.uk
*.paradigmhousing.co.uk
paradigmhousing.co.uk
servicedesk.iquw.com
Portal.Paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
helpdesk.itsligo.ie
*.paradigmhousing.co.uk
paradigmhousing.co.uk
servicedesk.coinford.co.uk
soporte.inmocolonial.com
soporte.inmocolonial.com
helpdesk.presto.se
paradigmhousing.co.uk
servicedesk.coinford.co.uk
anyconnect.paradigmhousing.co.uk
gateway.paradigmhousing.co.uk
ping.paradigmhousing.co.uk
helpdesk.thomastallis.org.uk
helpdesk.presto.se
paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
ping.paradigmhousing.co.uk
Certificate
The complete raw certificate details for ping.paradigmhousing.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIQB+vQLCsxP3OBIwgdqifQ1TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MTIwMDAwMDBaFw0yMDA4MTIx MjAwMDBaMCUxIzAhBgNVBAMTGnBpbmcucGFyYWRpZ21ob3VzaW5nLmNvLnVrMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApstBVGakRWUQjH+b29tr5xRE 3YZf4uOshH1JpbsaMVgiQ58y6EQyxu42244XGFE2Fvi5VQ2pBhS0gpcnFjxV0EEk QbhMxPIfrKFLCC9PSfOjirqhlYdkOzLH778rvXQL8EQWCZu8asygnK1hCIF5AjAG THcUno7e55UbdSIAvzP4AWcBOmUm1GObnIu/at7U67rO5uRXFX1YO2Io2CwdzulT wy1YoJmBD5Mr2iHrh9SCahiyf6/XlQEXjo8XvQaaJqNfBNE6K1SxmzFpB1IvCxe+ BI9r9TXJr3qU4Z1ajmFT/zUg6jkv/NbBhCWHgOzSZ+EKedJBMpR+XAi3jppBVQID AQABo4IChzCCAoMwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYD VR0OBBYEFJc6xfjWKgMDvRKayxnF0tlP4PtWMCUGA1UdEQQeMByCGnBpbmcucGFy YWRpZ21ob3VzaW5nLmNvLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB /wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwC72d+8H4pxtZOUI5eqkntH OFeVCqtS6BqQlmQ2jh7RhQAAAWvjoIskAAAEAwBIMEYCIQDvTMyo2kVG5vNy13iB h/blBPQfGqeuTtcdWOolkmJ3QAIhALj3YTeiHv/EMj8cZVObKzh3WSuplQONVIF8 uzLVlIKnAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFr46CL bQAABAMARzBFAiEA3jVtbpHJx6MGyK7HKGXexBz73g0QOSGRiShH2hxNgNICICLC JF+v2S3aGJ/V36wcnjdpm5h/7Hw1wLCS1HZhvM8EMA0GCSqGSIb3DQEBCwUAA4IB AQB28AFg1EK/kGTBjT9u+LrK0xdQkXTgFOWVhyY26pJ16tu+IVm2NZDv7TjoMssy QED6u7EPJtlkYwlMwzZF582jFA9ok4kBUwnQOxUlgHhc6UENxX6J06f23KmuoanI PrCNu5VyjIohg0f4UKWEdWMct32GxbHhd4fGYQTNaEy2UnTYwRWbUarGhHbCbskv eYMFDJ0GF5IGEa404OCZQXUM8zGnwk/xhLxPwb6g84MvkuzmoKQQzU6L021oPslv 0+ROOaUmcZ44PkTyhWCmvg7H+IgFX3r9Qz3ZayUKvxlkWYii3r+tD5YKEO0atlHU Nr0pMfWPX9pOfwnBsuJnKRT8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApstBVGakRWUQjH+b29tr 5xRE3YZf4uOshH1JpbsaMVgiQ58y6EQyxu42244XGFE2Fvi5VQ2pBhS0gpcnFjxV 0EEkQbhMxPIfrKFLCC9PSfOjirqhlYdkOzLH778rvXQL8EQWCZu8asygnK1hCIF5 AjAGTHcUno7e55UbdSIAvzP4AWcBOmUm1GObnIu/at7U67rO5uRXFX1YO2Io2Cwd zulTwy1YoJmBD5Mr2iHrh9SCahiyf6/XlQEXjo8XvQaaJqNfBNE6K1SxmzFpB1Iv Cxe+BI9r9TXJr3qU4Z1ajmFT/zUg6jkv/NbBhCWHgOzSZ+EKedJBMpR+XAi3jppB VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10529007972854198205358585431082914005 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ping.paradigmhousing.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21055787496160708695756810733526316791191767655730133176629547387840518975071765520264916149452282553453078835106290819186045778657658008304539670393034806219183951739789382241084976204335327719492578143897729212111700116410419494283782406840975685482727965952379547414853271059277112603298969973441893927611043524020415621727024603869662004999582695680939693076018787441892295905502070884809151309572070564273317812606997550392977671412296268825450731650766851889179152269578825274401089628676648123345551821154592845746752563088379069177491979403454997053208371862010970635575316220354086884764539233168102283428181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 973ac5f8d62a0303bd129acb19c5d2d94fe0fb56 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ping.paradigmhousing.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016be3a08b240000040300483046022100ef4ccca8da4546e6f372d7788187f6e504f41f1aa7ae4ed71d58ea2592627740022100b8f76137a21effc4323f1c65539b2b3877592ba995038d54817cbb32d59482a70076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016be3a08b6d0000040300473045022100de356d6e91c9c7a306c8aec72865dec41cfbde0d10392191892847da1c4d80d2022022c2245fafd92dda189fd5dfac1c9e37699b987fec7c35c0b092d47661bccf04 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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