atmosphere.tv
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:46:7f:da:ce:63:e3:d1:51:9f:76:66:01:52:a4:15 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=atmosphere.tv
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:46:7f:da:ce:63:e3:d1:51:9f:76:66:01:52:a4:15Serial Number (int): 16316789931150191798393861239114736661
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7d:f7:34:73:8e:6e:db:0c:95:aa:19:3d:7f:7f:6c:de:97:6f:ab:8d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): d5:16:ab:dc:eb:b8:63:2e:b2:5d:90:3d:1a:22:a5:99:25:72:6b:be
Fingerprint (sha256): a8:cb:52:43:57:be:8e:79:09:2a:12:a7:9e:0d:69:cc:8e:23:a0:ac:02:86:a2:0d:54:27:85:f9:87:26:82:22
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate atmosphere.tv
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for atmosphere.tv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atmosphere.tv
*.atmosphere.tv
*.atmosphere.tv
Other certificates including the domain name atmosphere.tv
(limited to 100 certificates)
atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
image.e.atmosphere.tv
blog.atmosphere.tv
*.interact.atmosphere.tv
promotions.cdn.atmosphere.tv
*.interact.atmosphere.tv
image.e.atmosphere.tv
*.www.atmosphere.tv
*.internal.atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
analytics-in-api.atmosphere.tv
marketing.atmosphere.tv
help.thechivery.com
promotions.cdn.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
atmosphere.tv
help.thechivery.com
sls-qa.mobilenxt.app
ww.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
promotions.cdn.atmosphere.tv
help.thechivery.com
*.atmosphere.tv
*.atmosphere.tv
atmosphere.tv
email.axioshq.atmosphere.tv
cargillpresentations.cargill.com
ww.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
help.thechivery.com
marketing.atmosphere.tv
help.thechivery.com
atmosphere.tv
analytics-in-api.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
www.wgslabs.com
genetron.o4s.io
image.e.atmosphere.tv
*.interact.atmosphere.tv
*.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
image.e.atmosphere.tv
stage-ad-proxy-api.atmosphere.tv
mntz.atmosphere.tv
atmoshere.tv
san-2-s12.tlsprovisioning.exacttarget.com
immobilier-responsable.civitimeapp.com
image.e.atmosphere.tv
dcs.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
mntz.atmosphere.tv
*.dcs.atmosphere.tv
vecindiario.org
blog.ade-sede.com
analytics-in-api.atmosphere.tv
*.interact.atmosphere.tv
help.thechivery.com
atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
marketing.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
marketing.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
image.e.atmosphere.tv
blog.atmosphere.tv
*.interact.atmosphere.tv
promotions.cdn.atmosphere.tv
*.interact.atmosphere.tv
image.e.atmosphere.tv
*.www.atmosphere.tv
*.internal.atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
analytics-in-api.atmosphere.tv
marketing.atmosphere.tv
help.thechivery.com
promotions.cdn.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
atmosphere.tv
help.thechivery.com
sls-qa.mobilenxt.app
ww.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
promotions.cdn.atmosphere.tv
help.thechivery.com
*.atmosphere.tv
*.atmosphere.tv
atmosphere.tv
email.axioshq.atmosphere.tv
cargillpresentations.cargill.com
ww.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
help.thechivery.com
marketing.atmosphere.tv
help.thechivery.com
atmosphere.tv
analytics-in-api.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
www.wgslabs.com
genetron.o4s.io
image.e.atmosphere.tv
*.interact.atmosphere.tv
*.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
image.e.atmosphere.tv
stage-ad-proxy-api.atmosphere.tv
mntz.atmosphere.tv
atmoshere.tv
san-2-s12.tlsprovisioning.exacttarget.com
immobilier-responsable.civitimeapp.com
image.e.atmosphere.tv
dcs.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
mntz.atmosphere.tv
*.dcs.atmosphere.tv
vecindiario.org
blog.ade-sede.com
analytics-in-api.atmosphere.tv
*.interact.atmosphere.tv
help.thechivery.com
atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
marketing.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
marketing.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
atmosphere.tv
Certificate
The complete raw certificate details for atmosphere.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIQDEZ/2s5j49FRn3ZmAVKkFTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDIyODAwMDAwMFoXDTI1MDMyOTIzNTk1OVowGDEW MBQGA1UEAxMNYXRtb3NwaGVyZS50djCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALiI0GPVAFs5qr04DUnlfC5tB56Iwe9XNL2Im97AmyHcVEVey72EZS/4 mDDPfcnX4Wvi8XjYECbOBHv6dIxLg3cFT69kx+c7/iNFj+2eK9ZY/VgRuoV28man 0eITqCWd32bg97UfL9K1LRbm2wvBIPbovX36A2u9xxT/xzIxnzd6koU5ZlTpWv/b b1OZKs+1OkDxbiULi169TA8IebUZdWCExbTc8A7xnl2VLMeGZEzu2M0KSS05EDLC 3qQVylEeBCE804HA5vINdUrVR0RZ38QCqep5HlVGOcG8e/1wBhZdlNl5/sbKb8Dn aIaj3J1O44H02RMNg8JZGtc/ySIa+WcCAwEAAaOCAvUwggLxMB8GA1UdIwQYMBaA FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBR99zRzjm7bDJWqGT1/f2ze l2+rjTApBgNVHREEIjAggg1hdG1vc3BoZXJlLnR2gg8qLmF0bW9zcGhlcmUudHYw EwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy bTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYA dQBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY3uYdCEAAAEAwBG MEQCIGrJ2RTDviQahHpQRNdAt/CkNadldqkQpksV6Dw8O7wXAiBJe4d7gDeTNnA6 jU3YpHkCLYt8WtzONZXg1fZ4mUMLlwB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWe uQMv2Q6MLnm4AAABje5h0DcAAAQDAEcwRQIhAJ7CkJbmcBAb/jRGJFlK+eyK0gnI ySskc0pyNyRWUkivAiAUBhWAkUB0jrUyrtbW/tPWJQMXMFWjbx/jar2uG6inLAB1 AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABje5h0GIAAAQDAEYw RAIgI8Gi7hNoLVmbSVewh8cVt5OScSPotXjE7Rjs7Zi9GWcCICwpPBCjmHphhOUB 1tO3LBtYCWnIbxbjkFfmYhsEL4ivMA0GCSqGSIb3DQEBCwUAA4IBAQB81d0cxYXT oM+72cZSqiRU2omE10Cs5rQYaKw9vGzWJ2z89tzryNYeNTQ4VmQ9ghn1DumdWgLK IrtHUX51yPMl0+YWMH/LPhibMI6fB2VNg/WXJk0iiqK7/+xM4yZFP3ykXYrSOG7l 2D4jjmmUmAaML/kx5XbJOSzKJ06qRntLEAWF4G2rreUL3ZY/AhkEN9ftkyxUQQ+O j+iz5CAXscDl0jIB+FWWKuiXJuz1lnrjRa7HkSs+i3HE5NhC6pMqN1j6JBOuWz9i USBGhbLeTpp2p20icCrYrePZh5ARO/paVtespt+gKKt6OzoQoV5WW7ZvVL4QNaZm W+R3a4Ec/QsN -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIjQY9UAWzmqvTgNSeV8 Lm0HnojB71c0vYib3sCbIdxURV7LvYRlL/iYMM99ydfha+LxeNgQJs4Ee/p0jEuD dwVPr2TH5zv+I0WP7Z4r1lj9WBG6hXbyZqfR4hOoJZ3fZuD3tR8v0rUtFubbC8Eg 9ui9ffoDa73HFP/HMjGfN3qShTlmVOla/9tvU5kqz7U6QPFuJQuLXr1MDwh5tRl1 YITFtNzwDvGeXZUsx4ZkTO7YzQpJLTkQMsLepBXKUR4EITzTgcDm8g11StVHRFnf xAKp6nkeVUY5wbx7/XAGFl2U2Xn+xspvwOdohqPcnU7jgfTZEw2Dwlka1z/JIhr5 ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16316789931150191798393861239114736661 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atmosphere.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23295313623125869843557737085711205042016931764457745022609385167342664398267524372819621568439696292893013182890469118480373637024790548451954465563277081993639435671789881696534410874786552666423590086117860777461506313537306087280954635840198463662743713687202317332881810661623723892160917780171237231454918616472243820957943926239695684809334483845334398348726818012588235696631653751395387751908254427760573730764743852432137615023897335082948305764773880309243611403569894603314862294317456080239819660463741054306901636418781587398083440055526850026259365509598903700396478033030784393759986180930407390443879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7df734738e6edb0c95aa193d7f7f6cde976fab8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atmosphere.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atmosphere.tv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007cd5dd1cc585d3a0cfbbd9c652aa2454da8984d740ace6b41868ac3dbc6cd6276cfcf6dcebc8d61e35343856643d8219f50ee99d5a02ca22bb47517e75c8f325d3e616307fcb3e189b308e9f07654d83f597264d228aa2bbffec4ce326453f7ca45d8ad2386ee5d83e238e699498068c2ff931e576c9392cca274eaa467b4b100585e06dabade50bdd963f02190437d7ed932c54410f8e8fe8b3e42017b1c0e5d23201f855962ae89726ecf5967ae345aec7912b3e8b71c4e4d842ea932a3758fa2413ae5b3f6251204685b2de4e9a76a76d22702ad8ade3d98790113bfa5a56d7aca6dfa028ab7a3b3a10a15e565bb66f54be1035a6665be4776b811cfd0b0d