agt.mediabrands.com.au
Issued by Amazon
About this certificate
This digital certificate with serial number 08:6d:84:1b:67:01:a2:76:09:52:4f:d9:06:b0:bf:b7 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=agt.mediabrands.com.au
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:6d:84:1b:67:01:a2:76:09:52:4f:d9:06:b0:bf:b7Serial Number (int): 11202463772966625238549226021033394103
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0d:2a:37:57:43:4d:be:81:58:56:ab:1b:26:09:78:d8:b6:ca:2f:88
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): cf:3b:e7:e6:21:03:54:8c:30:43:b3:c0:22:f4:8b:69:a2:11:94:2e
Fingerprint (sha256): a9:a8:d8:3b:b5:be:1e:94:a2:0d:b3:6b:94:62:8a:99:45:03:37:89:04:ff:ae:1f:ac:a3:48:bb:82:3b:74:0c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate agt.mediabrands.com.au
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agt.mediabrands.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agt.mediabrands.com.au
Other certificates including the domain name mediabrands.com.au
(limited to 100 certificates)
mediaxpert.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-42.mxp-government.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-38.mxp-government.mediabrands.com.au
mediaxpert.mediabrands.com.au
*.mediabrands.com.au
agt.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-44.mxp-government.mediabrands.com.au
*.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
carnival.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
mediaxpert-uat.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-37.mxp-government.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
carnival.mediabrands.com.au
central-2-0-sit-0-0-2-42.mxp-government.mediabrands.com.au
agt.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
www.bankdememe.ga
central-2-0-sit-0-0-2-44.mxp-government.mediabrands.com.au
senpaiacademy.org
mediaxpert-uat.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
*.mediabrands.com.au
www.bankdememe.ga
senpaiacademy.org
*.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-36.mxp-government.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-42.mxp-government.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-38.mxp-government.mediabrands.com.au
mediaxpert.mediabrands.com.au
*.mediabrands.com.au
agt.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-44.mxp-government.mediabrands.com.au
*.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
carnival.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
mediaxpert-uat.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-37.mxp-government.mediabrands.com.au
*.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
carnival.mediabrands.com.au
central-2-0-sit-0-0-2-42.mxp-government.mediabrands.com.au
agt.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
*.mediabrands.com.au
*.mediabrands.com.au
www.bankdememe.ga
central-2-0-sit-0-0-2-44.mxp-government.mediabrands.com.au
senpaiacademy.org
mediaxpert-uat.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
*.mediabrands.com.au
www.bankdememe.ga
senpaiacademy.org
*.mediabrands.com.au
central-2-0-sit-0-0-2-20.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-30.mxp-government.mediabrands.com.au
central-2-0-sit-0-0-2-36.mxp-government.mediabrands.com.au
Certificate
The complete raw certificate details for agt.mediabrands.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIQCG2EG2cBonYJUk/ZBrC/tzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MDcwMDAwMDBaFw0yMDA5MDcx MjAwMDBaMCExHzAdBgNVBAMTFmFndC5tZWRpYWJyYW5kcy5jb20uYXUwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBrUzSqlYEYz8XK1/oJC+P+XelG+X K1Q7lFJgGoy4wXkGXPyycLjjWAW7/Oa/VUjwNaLuRG2UztqWlqoFeyBYdddsI//9 gpIuz6nVRE6ljgU4U8crJBVkbbI7JkWdXYHSu8FlnA4ZZVPV5tlFTHRmg+npCb92 NUkrScA2o3Dmax6s+M3CgDHxEmigJUxVFo7e13uJbHAxh3V1wB/9QKcu+8qox3eU sm4HCdLEcZHwHF9oRk+myOdqLZmTaZe4l+lMoTPVKPRRQtVB+xNnM6C5wrhFCq8L G2FFzn3DtAeZO5AI0b6g06TkMWpZ1qEYWABVrKC2sAmYexPDmHpBoXs3AgMBAAGj ggKEMIICgDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUDSo3V0NNvoFYVqsbJgl42LbKL4gwIQYDVR0RBBowGIIWYWd0Lm1lZGlhYnJh bmRzLmNvbS5hdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB BgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiD AMR7iXqo/csAAAFsamESxQAABAMASDBGAiEAvQ+DRarBkdhvD49/mv8p2T2NIo8z PQ3d8dcdcVH5hjwCIQCpTH4WVM8Cvc7U6HV/Ck6/pLnEBQWcguAtx9o9OZd2ugB3 AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbGphExAAAAQDAEgw RgIhANtrH86lR1IpFy+m5H0Z0DJK9hBOM5R8Y6/Dq3YRthEwAiEAz0aUur1lOrZa 2Owzt7SLX3nyZ8l7bz3K27bz2Oyh4/UwDQYJKoZIhvcNAQELBQADggEBAGXWiWJb 9EubOIBdNf/KETMWmUrlQbg8BusxK38GdGpD/EUEoUCykZxYDoo3+abFUGcnepJJ pd1nrUU1iCntZWqCN108SDbuTxXS6a4XPA8fTOQFbZFltBzjhy2OuqFxV5e8Gq+5 OW4G1oKb6KZQbdVfFbW1Xr0SBJMoO5l8ewj/qzNR+k53eSbNJQra1658HwMA10oa ksSbGFtozxsEoOwLssNvYjeSbAfadr4d+PKRINURTroyad0m8l7p61j9+w1iIayL n5OFkQx2S97A62MwdRrwk6WZS9mwXaM3xD0Cl/zv1pY69BIxO0XHM5uDc1fjlLHT D+1mqgihejGSxJQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAa1M0qpWBGM/Fytf6CQ vj/l3pRvlytUO5RSYBqMuMF5Blz8snC441gFu/zmv1VI8DWi7kRtlM7alpaqBXsg WHXXbCP//YKSLs+p1UROpY4FOFPHKyQVZG2yOyZFnV2B0rvBZZwOGWVT1ebZRUx0 ZoPp6Qm/djVJK0nANqNw5mserPjNwoAx8RJooCVMVRaO3td7iWxwMYd1dcAf/UCn LvvKqMd3lLJuBwnSxHGR8BxfaEZPpsjnai2Zk2mXuJfpTKEz1Sj0UULVQfsTZzOg ucK4RQqvCxthRc59w7QHmTuQCNG+oNOk5DFqWdahGFgAVaygtrAJmHsTw5h6QaF7 NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11202463772966625238549226021033394103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agt.mediabrands.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25755921959390660508239052856562173033588181174240943534221075158918002330386664392032262834457668970039776042261047775036097608697554316413701443056334285103807988410136398256051451960473052654676044165657685467753613329372925976783726624696638380724060230381635279836403053832020188240135986621567646337999592819768171393615391768084599449228179399203948949177050594440894521827856245579686873069749914882842136606433769329863469451535417648964168860297743720458021370640004309575332023031538087044679400541815996412631215843033865684237748757778368781473095067401196112483988322795431192484249317452152219524758327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d2a3757434dbe815856ab1b260978d8b6ca2f88 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agt.mediabrands.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c6a6112c50000040300483046022100bd0f8345aac191d86f0f8f7f9aff29d93d8d228f333d0dddf1d71d7151f9863c022100a94c7e1654cf02bdced4e8757f0a4ebfa4b9c405059c82e02dc7da3d399776ba0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c6a6113100000040300483046022100db6b1fcea5475229172fa6e47d19d0324af6104e33947c63afc3ab7611b61130022100cf4694babd653ab65ad8ec33b7b48b5f79f267c97b6f3dcadbb6f3d8eca1e3f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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