*.shop123.com.tw
Issued by Amazon
About this certificate
This digital certificate with serial number 08:8e:b2:13:b2:c0:61:82:ee:28:01:85:23:af:b6:b0 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.shop123.com.tw
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:8e:b2:13:b2:c0:61:82:ee:28:01:85:23:af:b6:b0Serial Number (int): 11374741949756716265191630872874301104
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 34:c8:56:dd:4f:05:75:b8:83:49:37:eb:05:c5:f7:27:80:a5:da:dd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): a7:22:d3:49:b8:7d:e3:1e:45:29:0e:74:ef:53:9a:80:9f:ff:c1:65
Fingerprint (sha256): a2:e5:e2:92:21:a0:eb:c1:15:c7:90:8e:e9:c5:ea:31:ee:fa:1e:6e:51:c4:e9:57:1a:42:66:70:8b:d6:c6:12
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.shop123.com.tw
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.shop123.com.tw
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.shop123.com.tw
Other certificates including the domain name shop123.com.tw
(limited to 100 certificates)
www.shop123.com.tw
api-support.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.admin.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
support.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.admin.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
sogo.shop123.com.tw
admin.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
front-support.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
fs1.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
admin.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
front-support.shop123.com.tw
www.shop123.com.tw
fs1.shop123.com.tw
ego888.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
api-support.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.admin.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
support.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.admin.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
sogo.shop123.com.tw
admin.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
front-support.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
fs1.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
admin.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
front-support.shop123.com.tw
www.shop123.com.tw
fs1.shop123.com.tw
ego888.com.tw
www.shop123.com.tw
www.shop123.com.tw
*.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
www.shop123.com.tw
Certificate
The complete raw certificate details for *.shop123.com.tw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdjCCA16gAwIBAgIQCI6yE7LAYYLuKAGFI6+2sDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA2MDUwMDAwMDBaFw0xOTA3MDUx MjAwMDBaMBsxGTAXBgNVBAMMECouc2hvcDEyMy5jb20udHcwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDeBh0sUJ+6tDfvx5PoRgvODuF9rJM7WojH3wcd puPTBk55JwtQI/07gxlpquqqWDdPG3Oq4q59BL6gFC/orNwquwn12w9gftZc7lDJ 02dF5BhxiTuziyrqEQ6sqmRLhsAnneshJw74qhU5wjcJWcHouyUjZ9yoWuBY5Tx6 zVRaEkAGJkvVEK/KS14LfT3UtsltypS/dmB3UVrIadc4QdPZbSYAhuk1igtA0uaI dc1au9IZTPZB61tFSGwjEOWMHEilZPd9vZO+kL4U/ad4FF/39zN0SWKTXjwPPOsG DBVG2r8ex22DRc+PHkIcfeeIW9Enrg4H8DM9nXMx5a/ArYBBAgMBAAGjggGJMIIB hTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUNMhW 3U8FdbiDSTfrBcX3J4Cl2t0wGwYDVR0RBBQwEoIQKi5zaG9wMTIzLmNvbS50dzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqqwPWjdLyg2NUywSBafpnotzG5Wna 4Z22aYeDZkK73OrvkXizFb5fGy03zS/EtsVGA6L2da3BAyycGbqw0Srk0ktxsQWZ B6sIg/tVGkoJjHFmdpH96EzpkZGzkjc6bLI1U/VTGQIBBmWpE9XBqRLunQwJKgnJ mF6ICza/MWL+ELn3qmBtvkgeTY6THnahxUXC6rRHk1IiDTY2o9zBE2vDIdQl7j3T CnSjAVhJlKHqIESa/VQ5Tcx+3nqDjKl0xGuEWcpXKX3/xXs1vbaTRpiB9/ws1hXT q0dKanhn80N8tQjP67oI6jYcM03A1oszWDbgEs/uOul2wP7O4V675GxS -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gYdLFCfurQ378eT6EYL zg7hfayTO1qIx98HHabj0wZOeScLUCP9O4MZaarqqlg3TxtzquKufQS+oBQv6Kzc KrsJ9dsPYH7WXO5QydNnReQYcYk7s4sq6hEOrKpkS4bAJ53rIScO+KoVOcI3CVnB 6LslI2fcqFrgWOU8es1UWhJABiZL1RCvykteC3091LbJbcqUv3Zgd1FayGnXOEHT 2W0mAIbpNYoLQNLmiHXNWrvSGUz2QetbRUhsIxDljBxIpWT3fb2TvpC+FP2neBRf 9/czdElik148DzzrBgwVRtq/Hsdtg0XPjx5CHH3niFvRJ64OB/AzPZ1zMeWvwK2A QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11374741949756716265191630872874301104 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.shop123.com.tw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28027918607246842553700803365292426908799014515148120819732765322427254799774060555183496917468035915407879371341271046211654508862561414462145930954016181648216779192297552908404097530768894633047117500759855533342132768646218326575708884573167864967655688871921592996113793723130897860426465311799053750811261914349420971460518943174863555946105639246646228162604216407959806161029497272099888035864578516638599248000211567459271049420470474500759560984500315418432690341360802155237939959323140364020872673370651800187747663803512367849442424709143763694532478913390259013723720669749479774223554110480167304265793 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 34c856dd4f0575b8834937eb05c5f72780a5dadd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop123.com.tw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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