cdn.mtrip.me
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:8f:a7:f2:98:a9:b8:94:01:a5:9d:68:bd:c5:5f:15 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdn.mtrip.me
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:8f:a7:f2:98:a9:b8:94:01:a5:9d:68:bd:c5:5f:15Serial Number (int): 19355096774625342454492624386410241813
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: aa:ca:bd:f4:92:c1:76:96:0b:62:80:58:ce:64:b3:d8:23:ce:df:1a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 94:e8:dc:4a:68:df:dc:f3:0f:0f:1b:37:c2:bf:f7:4a:fe:0a:c6:30
Fingerprint (sha256): b8:66:20:9a:3a:55:ce:b5:fc:43:cd:43:5e:a8:cd:7e:39:63:2b:4c:5c:de:0f:99:b2:e3:6b:d1:02:b0:35:dd
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate cdn.mtrip.me
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.mtrip.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.mtrip.me
Other certificates including the domain name mtrip.me
(limited to 100 certificates)
js.mtrip.me
api.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
www.shard1.cdn.mtrip.me
androiddata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
iosdata.mtrip.me
tripagent.com
tripagent.com
testcloudflare.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
tripagent.com
mtrip.me
api.mtrip.com
mytrip.tripagent.com
androiddata.mtrip.me
iosdata.mtrip.me
tripagent.com
cdn.mtrip.me
androiddata.mtrip.me
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
api.mtrip.com
mytrip.tripagent.com
iosdata.mtrip.me
tripagent.com
mtrip.me
js.mtrip.me
tripagent.com
mytrip.tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
api.mtrip.com
mtrip.me
api.mtrip.com
tripagent.com
api.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
js.mtrip.me
tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
tripagent.com
mytrip.tripagent.com
js.mtrip.me
testcloudflare.mtrip.me
dev.mtrip.me
tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
tripagent.com
androiddata.mtrip.me
mytrip.tripagent.com
cdn.mtrip.me
iosdata.mtrip.me
cdn.mtrip.me
cdn.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
api.mtrip.com
dev.mtrip.me
mytrip.tripagent.com
www.shard1.cdn.mtrip.me
androiddata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
iosdata.mtrip.me
tripagent.com
tripagent.com
testcloudflare.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
tripagent.com
mtrip.me
api.mtrip.com
mytrip.tripagent.com
androiddata.mtrip.me
iosdata.mtrip.me
tripagent.com
cdn.mtrip.me
androiddata.mtrip.me
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
api.mtrip.com
mytrip.tripagent.com
iosdata.mtrip.me
tripagent.com
mtrip.me
js.mtrip.me
tripagent.com
mytrip.tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
api.mtrip.com
mtrip.me
api.mtrip.com
tripagent.com
api.mtrip.com
mytrip.tripagent.com
dev.mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
tripagent.com
js.mtrip.me
tripagent.com
iosdata.mtrip.me
mytrip.tripagent.com
iosdata.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
tripagent.com
mytrip.tripagent.com
js.mtrip.me
testcloudflare.mtrip.me
dev.mtrip.me
tripagent.com
mytrip.tripagent.com
mytrip.tripagent.com
mtrip.me
mytrip.tripagent.com
mytrip.tripagent.com
cdn.mtrip.me
tripagent.com
androiddata.mtrip.me
mytrip.tripagent.com
cdn.mtrip.me
iosdata.mtrip.me
cdn.mtrip.me
cdn.mtrip.me
mtrip.me
mytrip.tripagent.com
mtrip.me
Certificate
The complete raw certificate details for cdn.mtrip.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIQDo+n8pipuJQBpZ1ovcVfFTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMDMwMDAwMDBaFw0yMDAyMDMx MjAwMDBaMBcxFTATBgNVBAMTDGNkbi5tdHJpcC5tZTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALcon9RWtP/+bM28SHV1CEonLOpcRY6/FGrLYifd0suR y5Dowx8j3xusrshxxDqXDO1Y9I1/etjUlU/4lWbFHEfeHcHX9iYtZfgCZXPbJ59u z+SsdRtvQ1gjKPLFXEm0InUiGBC12N20pvrRlCiMBYDBebwNEiMcj25h30SbR33s cmy20e7JVFx/6dbE5Jsz2a6WUnKn959cFcJ1S91y+h4AbcwEEzaUzehEqbj8itzG +WmUY51+rXMExZpHnPwumEZaHdK97JlQQcSaSMH9SptV0BWGWOGV283P9DHbAvOM e+2l+0fONI9ycTBF70+JuqZMX2cK3p3eMaVM012TjXECAwEAAaOCAnowggJ2MB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSqyr30ksF2 lgtigFjOZLPYI87fGjAXBgNVHREEEDAOggxjZG4ubXRyaXAubWUwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQYGCisGAQQB1nkCBAIEgfcEgfQA 8gB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABaBUAhh8AAAQD AEgwRgIhAJhxs6Llci5IaBinKvi+jjHn5V3Hh3T1DqzAX6WVLYtKAiEAyzKpz/tx i8RTuSaj7yi9/fLajlBpvnhUnQKM/fFa4tYAdwCHdb/nWXz4jEOZX73zbv9WjUdW Nv9KtWDBtOr/XqCDDwAAAWgVAIb4AAAEAwBIMEYCIQDHEVyPozM+Kt7NGcn2lbx1 s/6QoI2Hurk9aAIJ1AHtpwIhAMN826T/TCS4WgrFgPvpoW31b08MFA5pPp3EDwRt FbuAMA0GCSqGSIb3DQEBCwUAA4IBAQAwGNE4URc6wS3orPkpnedlg/gMZnNiOqHd KiNAhYokWqsAp+8T7gKyq3jf+RrgSj5KKVnUXNH236DNdx/26KPPGcMWW85Tgjau wxuASc7NQ9wuN52Kibc65cD2x0uzpN98nMFGkj6bUuCZnaSQ3bkK49pVDC8zf9ty hyT51LNRyy5KdVVp9+kQ/HwQjiWzsWD7JrBWNgMzDt5FQvKxePgpwOVFjpL72imk TY4SSUGkUFvcJ4y+fhJ7V5hVhd6LgO/ZXJljR4GBynLDDx3XShvEEa0zeEEU4Mdn TzoT8tFoiNk/CBnUrri1v9uR+ztqkDVtM+pa3XKpAPfqBoVws01g -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyif1Fa0//5szbxIdXUI Sics6lxFjr8UastiJ93Sy5HLkOjDHyPfG6yuyHHEOpcM7Vj0jX962NSVT/iVZsUc R94dwdf2Ji1l+AJlc9snn27P5Kx1G29DWCMo8sVcSbQidSIYELXY3bSm+tGUKIwF gMF5vA0SIxyPbmHfRJtHfexybLbR7slUXH/p1sTkmzPZrpZScqf3n1wVwnVL3XL6 HgBtzAQTNpTN6ESpuPyK3Mb5aZRjnX6tcwTFmkec/C6YRlod0r3smVBBxJpIwf1K m1XQFYZY4ZXbzc/0MdsC84x77aX7R840j3JxMEXvT4m6pkxfZwrend4xpUzTXZON cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19355096774625342454492624386410241813 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.mtrip.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23121642414401783497777549098047618069442501278730086982355153803792678144264010998031324510542199800699074145342342069515979244659223407451848244358886118799885738454664530903661249046523693107801196754689296575941840639434061991052400822007574540173228238917875565184513035593076018438129561464586730984495242051432614102782332376683516320015535855091723210177647783248962425620245812375082709682769887910860515907244089538060771242438148267870122483673198431380339073565875014101265771910587252427631626795756135189884567593304381269330766118591779664624643410898720688908009889551067839025362722088015504866512241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aacabdf492c176960b628058ce64b3d823cedf1a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mtrip.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001681500861f00000403004830460221009871b3a2e5722e486818a72af8be8e31e7e55dc78774f50eacc05fa5952d8b4a022100cb32a9cffb718bc453b926a3ef28bdfdf2da8e5069be78549d028cfdf15ae2d60077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168150086f80000040300483046022100c7115c8fa3333e2adecd19c9f695bc75b3fe90a08d87bab93d680209d401eda7022100c37cdba4ff4c24b85a0ac580fbe9a16df56f4f0c140e693e9dc40f046d15bb80 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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