cdn.justalk.com
Issued by Amazon
About this certificate
This digital certificate with serial number 03:04:2b:e6:9f:3d:db:4d:67:89:02:f9:58:0f:9d:27 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdn.justalk.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:04:2b:e6:9f:3d:db:4d:67:89:02:f9:58:0f:9d:27Serial Number (int): 4009343590162118894561317375569796391
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 88:8b:91:1c:91:15:8e:97:96:81:cf:37:4d:14:35:35:07:65:79:29
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 14:24:7b:d5:c0:db:09:f5:24:6b:28:40:33:f7:f5:81:c8:50:3a:e9
Fingerprint (sha256): ac:ac:26:4b:46:ac:ad:46:a8:2b:5f:d4:91:29:50:d9:84:ed:2e:ec:84:9b:0c:02:5c:26:df:d0:25:15:1e:64
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate cdn.justalk.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.justalk.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.justalk.com
Other certificates including the domain name justalk.com
(limited to 100 certificates)
nutrition-origin.me2-prd.gmal.app
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
Certificate
The complete raw certificate details for cdn.justalk.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIQAwQr5p89201niQL5WA+dJzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA1MDQwMDAwMDBaFw0xOTA2MDQx MjAwMDBaMBoxGDAWBgNVBAMTD2Nkbi5qdXN0YWxrLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALIJe5SYt6GJHn15XqLJpzRS518lt98PmemmG++s vzYy9m7FH/WLRP68cOHj6HSkWI89CUi/j2GmSJPdfLrmtH5aWQIF4zs23UIhvPZp R74058LZUMhaYjMog8fHyVbLEjVeoP5AWDNrGhdooYZxX1n85W/EbZZP7sNPfh50 Fke7T754lZtJU/ga/krsoX2HjuLSWtDpt22BDsEbP50Egg9q0/5+Y/puihJWOOAn ofzDG9GVoNvw7InGcGdaxgEdEGutYuN9iQShQn9gVJnGj2X8WsG539LJylklKtTR Tjq2c2m1hrPSaXwP3tRT/BJOxlt5nAez7Xc/gZP59rPW9U8CAwEAAaOCAnwwggJ4 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSIi5Ec kRWOl5aBzzdNFDU1B2V5KTAaBgNVHREEEzARgg9jZG4uanVzdGFsay5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z Y2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsG AQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9u dHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRy dXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisGAQQB1nkCBAIE gfYEgfMA8QB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABYyiS 0woAAAQDAEgwRgIhAJDVhB3WFfJNgqb1D5QyEeK0qLoMbuSL9V/rPM3z0FqEAiEA zGq1z2T0+v7jBs6PQt8OX05HcWG4qLQinb5dqHtbnBMAdgCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWMoktL6AAAEAwBHMEUCIFl/74TIsosU0q2d B/OFxdqEpnCxOhKsbLGPEghUsW1dAiEAkWU3aQZPKQ5szTepyuNg/L1xU6n68nmO Iao0RuOhiiwwDQYJKoZIhvcNAQELBQADggEBAGSJz0L0cBgj7FTf8WOuB4TEYKtK 2S6YzsEwlbN5LbRcSttwQL+HzCG2SJrwwzSAbptB08tDpm/lAZWYhNbrA4eM3Ez2 Y+HqkGo0wCOQFwQ8pnHWmxuyBJmQn2CUVfipNHnbtjILkqv/8FxFMX35Qx4adxiy iE6pQcH1xjyNUcbjPpYFweH6OqOtyMIJ4OXtx80RmBO6ACIwp5JJOXk9i7AGHAs4 hlS/rGBZPW2lB+Y5sovgxKgBYS+czfVk3T5BKXyc/QyeoXP6YUmXMg7JHzEigp82 0cmeTzocS9fvncpVU64dk4PElIlAbdORa4JBvq2XCRkTj4hzbgf4WP8iOME= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgl7lJi3oYkefXleosmn NFLnXyW33w+Z6aYb76y/NjL2bsUf9YtE/rxw4ePodKRYjz0JSL+PYaZIk918uua0 flpZAgXjOzbdQiG89mlHvjTnwtlQyFpiMyiDx8fJVssSNV6g/kBYM2saF2ihhnFf Wfzlb8Rtlk/uw09+HnQWR7tPvniVm0lT+Br+SuyhfYeO4tJa0Om3bYEOwRs/nQSC D2rT/n5j+m6KElY44Ceh/MMb0ZWg2/DsicZwZ1rGAR0Qa61i432JBKFCf2BUmcaP Zfxawbnf0snKWSUq1NFOOrZzabWGs9JpfA/e1FP8Ek7GW3mcB7Ptdz+Bk/n2s9b1 TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4009343590162118894561317375569796391 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.justalk.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22475094395436758605646630930846360263518936238000533200610218743515525725906768735107886433725247966837477573833140957407328111815987526615678667312566906915364580389123955544421741009939011869818280014878576443460593470967630850381688779008564788582788353344472055810197960677485999587370743809934566497167710414130582815174556832066495509743540410268112081520846509072568713664584124929998057227541031718922976830080268541007353800935723396722667796341749833337002982668409474965272647936940966989532126018100253851001156399055539172596426272718930508526015773610572279786081080348932443447757680947920225227437391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 888b911c91158e979681cf374d14353507657929 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.justalk.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001632892d30a000004030048304602210090d5841dd615f24d82a6f50f943211e2b4a8ba0c6ee48bf55feb3ccdf3d05a84022100cc6ab5cf64f4fafee306ce8f42df0e5f4e477161b8a8b4229dbe5da87b5b9c130076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001632892d2fa00000403004730450220597fef84c8b28b14d2ad9d07f385c5da84a670b13a12ac6cb18f120854b16d5d02210091653769064f290e6ccd37a9cae360fcbd7153a9faf2798e21aa3446e3a18a2c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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