*.upspeak.de
Issued by Amazon
About this certificate
This digital certificate with serial number 01:a7:50:85:54:52:ee:93:70:78:1d:73:bd:74:46:f7 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.upspeak.de
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:a7:50:85:54:52:ee:93:70:78:1d:73:bd:74:46:f7Serial Number (int): 2197974727371138002859162757171005175
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: c5:db:9f:02:3d:25:72:84:0c:09:93:67:f5:5a:93:0e:8c:9c:34:2b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e3:e5:6e:ba:5c:1f:d7:b5:ee:c0:c8:7e:fa:ec:1a:2f:68:46:d7:40
Fingerprint (sha256): a1:40:34:ed:a2:72:03:1e:95:e2:04:dd:38:bc:09:4a:b6:82:68:d9:cd:1d:21:56:9d:d5:23:aa:2a:8f:19:3d
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.upspeak.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.upspeak.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.upspeak.de
*.staging.upspeak.de
*.staging.upspeak.de
Other certificates including the domain name upspeak.de
(limited to 100 certificates)
*.upspeak.de
www.upspeak.de
*.upspeak.de
calendar.skip.work
www.codespurts.com
www.plenitude-ci.com
upspeak.de
imito.ch
prisma.philanthrosphere.com
fikejs.com
www.burzai.app
staginglink.edgypet.com
*.staging.upspeak.de
dev-dashboard.blendid.com
share.upspeak.de
silverback.innovationcrib.be
andreyneto.com.br
*.staging.upspeak.de
apotheken.apoly.at
nagham.ae
auto-motor.de
*.upspeak.de
readwords.ai
imito.ch
embed.upspeak.de
aplano.de
www.codingno.com
*.staging.upspeak.de
*.upspeak.de
*.voctag.com
embed.upspeak.de
*.upspeak.de
koshikawakaikei.lfv.jp
share.upspeak.de
www.apna.co
javascript.cam
*.staging.upspeak.de
mobile.djhealth.com.au
www.easyvendor.in
www.vincentbourdeau.com
twitpile.com
artcity.cz
panel.invent-app.com
*.upspeak.de
www.winds.co.in
swavegames.com
upspeak.de
corps-christ-mouvement.com
loja.construindoosom.com.br
link.upspeak.de
javier-lopez.me
upspeak.de
upspeak.de
*.upspeak.de
www.lemu.org
pruebas.legalapp.com.co
*.upspeak.de
staging.triply.ai
discounts.ai
jaimefriass.es
*.voctag.com
www.bootspruefung.de
dyn-dev.whichone.in
upspeak.de
upspeak.de
andreyneto.com.br
discounts.ai
declanramsay.co.uk
*.upspeak.de
apotheken.apoly.at
avfs.digifacilities.com
staging.triply.ai
sdog.aplicacionesincontacto.com
www.harishsa.com
*.upspeak.de
knollapp.com
buyfrom.africa
melius.app
*.upspeak.de
endocenter.com.mx
callenge.com
app.futselect.com.br
astro.shanimarketanalysis.org
www.casakini.es
*.upspeak.de
upspeak.de
www.winds.co.in
discounts.ai
*.staging.upspeak.de
racana.online
endocenter.com.mx
readwords.ai
link.upspeak.de
pubmash.com
koshikawakaikei.lfv.jp
oakslab.academy
*.upspeak.de
www.devcrewua.com
2019.helswingi.fi
www.jdu-it-consulting.com
www.upspeak.de
*.upspeak.de
calendar.skip.work
www.codespurts.com
www.plenitude-ci.com
upspeak.de
imito.ch
prisma.philanthrosphere.com
fikejs.com
www.burzai.app
staginglink.edgypet.com
*.staging.upspeak.de
dev-dashboard.blendid.com
share.upspeak.de
silverback.innovationcrib.be
andreyneto.com.br
*.staging.upspeak.de
apotheken.apoly.at
nagham.ae
auto-motor.de
*.upspeak.de
readwords.ai
imito.ch
embed.upspeak.de
aplano.de
www.codingno.com
*.staging.upspeak.de
*.upspeak.de
*.voctag.com
embed.upspeak.de
*.upspeak.de
koshikawakaikei.lfv.jp
share.upspeak.de
www.apna.co
javascript.cam
*.staging.upspeak.de
mobile.djhealth.com.au
www.easyvendor.in
www.vincentbourdeau.com
twitpile.com
artcity.cz
panel.invent-app.com
*.upspeak.de
www.winds.co.in
swavegames.com
upspeak.de
corps-christ-mouvement.com
loja.construindoosom.com.br
link.upspeak.de
javier-lopez.me
upspeak.de
upspeak.de
*.upspeak.de
www.lemu.org
pruebas.legalapp.com.co
*.upspeak.de
staging.triply.ai
discounts.ai
jaimefriass.es
*.voctag.com
www.bootspruefung.de
dyn-dev.whichone.in
upspeak.de
upspeak.de
andreyneto.com.br
discounts.ai
declanramsay.co.uk
*.upspeak.de
apotheken.apoly.at
avfs.digifacilities.com
staging.triply.ai
sdog.aplicacionesincontacto.com
www.harishsa.com
*.upspeak.de
knollapp.com
buyfrom.africa
melius.app
*.upspeak.de
endocenter.com.mx
callenge.com
app.futselect.com.br
astro.shanimarketanalysis.org
www.casakini.es
*.upspeak.de
upspeak.de
www.winds.co.in
discounts.ai
*.staging.upspeak.de
racana.online
endocenter.com.mx
readwords.ai
link.upspeak.de
pubmash.com
koshikawakaikei.lfv.jp
oakslab.academy
*.upspeak.de
www.devcrewua.com
2019.helswingi.fi
www.jdu-it-consulting.com
Certificate
The complete raw certificate details for *.upspeak.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIQAadQhVRS7pNweB1zvXRG9zANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA0MTYwMDAwMDBaFw0yMDA1MTYx MjAwMDBaMBcxFTATBgNVBAMMDCoudXBzcGVhay5kZTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAJUZ7x1sZHVSCVpVEfotxEKftJ++bAg+688fsf6bjwmz vUYH2yM6PSBgZqqz5L3nbPDjyO13yRTr6Z1wQ1j95Emq8G+StEsk0bVPn2fwaf1e Aeszi213Vdm2o9jtMhdccPElmwDwh8+Ii1IVSaU2ckr+zr7EDZeRWGxttYg8YSfV pLGK5xEqfoy0nK/Kyq68P2lRgZ5S8jIMbHghP8hTyP0dPHakM4BpbiA3qiMK84Nw qiVl0yopZ0YVYOMne3hEJRw/NVeAioKg6yTVPmuNlJMQ1YZYEdsLYzBPMLoIwWZU MHMWlrDVWOT5o3wIB6e5/9mjkDRkPS0zBk6vHd+meKkCAwEAAaOCApAwggKMMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTF258CPSVy hAwJk2f1WpMOjJw0KzAtBgNVHREEJjAkggwqLnVwc3BlYWsuZGWCFCouc3RhZ2lu Zy51cHNwZWFrLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAEC MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAw ggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS 6BqQlmQ2jh7RhQAAAWooW2GPAAAEAwBIMEYCIQDjnyNqrvfkGU9TpOcZb2T9ijTk QlxfOivwkqU4G/Vm8wIhAP2R5qPSoLW/mMYD5Q9ALvbvZI8V5D2d9Bs7O+sWylY2 AHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFqKFtipQAABAMA SDBGAiEA13O1RamhLfy/Y3APO5b36FdXBYB5WrylnsxGESJbFz8CIQCtqa6PlPi3 uAKBAWNrBeQxsisDz/DGOl1GsP58gLCDUTANBgkqhkiG9w0BAQsFAAOCAQEAPq6N lIu34rgilAmGCHvvY9mcul+AGzTduIpir0ezviQIxvqQ+2uhglfIpFmRKMryo2zh gpEHT/N8LWpqvuOqqQ+9GLBVNO6GQtpcDUcFfsM0bf73/baxdmPs6cqQWuwYrxb+ 0/+1ft1FVd+i15c5UL2LOM+4sbStPP/eWQZiaiuOTo2kkFqz9ex/8VVbCtqsGbWX +mwah0+oYb9/fJZGkg1QHsF5LJI+M1kmv+wgs3A5hWuFwep2paGcp/dkmAQL0s54 BpWCwhORqHi8eTIR/a/9Ge1ZVN5e42XjuqtPuUOganN7JUgh9LRhzurDFfBpRLMX JPsMLUa/TXzdYsfhpg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRnvHWxkdVIJWlUR+i3E Qp+0n75sCD7rzx+x/puPCbO9RgfbIzo9IGBmqrPkveds8OPI7XfJFOvpnXBDWP3k Sarwb5K0SyTRtU+fZ/Bp/V4B6zOLbXdV2baj2O0yF1xw8SWbAPCHz4iLUhVJpTZy Sv7OvsQNl5FYbG21iDxhJ9WksYrnESp+jLScr8rKrrw/aVGBnlLyMgxseCE/yFPI /R08dqQzgGluIDeqIwrzg3CqJWXTKilnRhVg4yd7eEQlHD81V4CKgqDrJNU+a42U kxDVhlgR2wtjME8wugjBZlQwcxaWsNVY5PmjfAgHp7n/2aOQNGQ9LTMGTq8d36Z4 qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2197974727371138002859162757171005175 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.upspeak.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18822295993041685690087233105922528483281572806160766456986274194643715662486290080765039543487730267216529292443875801424602680788389357326691881193482180006285927488658640653633902806578116347771916709400528874418220301432257680898861202456185173497508677368948279536254819896921381144247933167687997647505423761670816406326569148038283276393169112235661569369802356046822416426116518546655638889892591543110931922265970581952236119342579535718849300287797136394378555822408266796749761201731992051555527669029354680074950126685874711940148477946350087848102877492972224015239428646472428529828476700486587388426409 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c5db9f023d2572840c099367f55a930e8c9c342b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upspeak.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.upspeak.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a285b618f0000040300483046022100e39f236aaef7e4194f53a4e7196f64fd8a34e4425c5f3a2bf092a5381bf566f3022100fd91e6a3d2a0b5bf98c603e50f402ef6ef648f15e43d9df41b3b3beb16ca56360077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a285b62a50000040300483046022100d773b545a9a12dfcbf63700f3b96f7e857570580795abca59ecc4611225b173f022100ada9ae8f94f8b7b8028101636b05e431b22b03cff0c63a5d46b0fe7c80b08351 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003eae8d948bb7e2b822940986087bef63d99cba5f801b34ddb88a62af47b3be2408c6fa90fb6ba18257c8a4599128caf2a36ce18291074ff37c2d6a6abee3aaa90fbd18b05534ee8642da5c0d47057ec3346dfef7fdb6b17663ece9ca905aec18af16fed3ffb57edd4555dfa2d7973950bd8b38cfb8b1b4ad3cffde5906626a2b8e4e8da4905ab3f5ec7ff1555b0adaac19b597fa6c1a874fa861bf7f7c9646920d501ec1792c923e335926bfec20b37039856b85c1ea76a5a19ca7f76498040bd2ce78069582c21391a878bc793211fdaffd19ed5954de5ee365e3baab4fb943a06a737b254821f4b461ceeac315f06944b31724fb0c2d46bf4d7cdd62c7e1a6