justalk.com
Issued by Encryption Everywhere DV TLS CA - G2
About this certificate
This digital certificate with serial number 02:26:9f:df:f7:45:e0:64:cc:b1:d8:bf:eb:1e:83:72 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=justalk.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:26:9f:df:f7:45:e0:64:cc:b1:d8:bf:eb:1e:83:72Serial Number (int): 2859005919728649469178484087295214450
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 02:6f:b4:ad:78:3a:cf:db:9b:1e:54:7f:d9:01:74:92:d8:f1:5a:e7
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6
Fingerprint (sha1): ff:83:f4:e7:7c:f6:1b:30:6c:cc:13:31:8f:4c:e4:75:7f:72:e8:24
Fingerprint (sha256): bb:9b:3f:f0:c9:a5:36:42:c2:11:a1:68:66:90:fa:cf:1f:b6:f3:a7:f5:b4:6c:9a:46:2a:83:de:f6:b7:16:28
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate justalk.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for justalk.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
justalk.com
www.justalk.com
www.justalk.com
Other certificates including the domain name justalk.com
(limited to 100 certificates)
nutrition-origin.me2-prd.gmal.app
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
daily.justalk.com
rentscore.africa
cdn.justalk.com
daily.justalk.com
h5.justalk.com
proper-ly.com
justalk.com
dev.nomadgrab.com
quiz.justalk.com
mvishal.in
intl.api.duonumber.justalk.com
quiz.justalk.com
www.justalk.com
justalk.com
test.game.justalk.com
app.realtystreem.com
rappisuper.com
cn.h5.justalk.com
static.ig.justalk.com
justalk.com
h5src.justalk.com
www.justalkcloud.com
kids.justalk.com
navmap.kmcat.uk
classify.org.uk
remotedev.co
intl.api.secondphone.justalk.com
khacphucrori.com
www.justalkcloud.com
ll.myroomabroad.com
www.justalk.com
test.game.justalk.com
web.justalk.com
test.intl.api.justalk.com
cdn.justalk.com
h5.justalk.com
justalk.com
web.justalk.com
game.justalk.com
meet.justalk.com
justalk.com
static.ig.justalk.com
justalk.com
cms.justalk.com
static2.ig.justalk.com
kids.justalk.com
engineering.polymerize.io
intl.api.justalk.com
target.dataplace.ai
app.dev.wioski.co
dl.justalk.com
sixwindsorplace.com
test.daq.morgansolar.xyz
kids.justalk.com
app.dimironventures.com
cdn.justalk.com
h5src.justalk.com
gauntletcalendar.com
pushplaydigital.online
cn.h5.justalk.com
alicn.api.justalk.com
justalk.com
old-river-garden-services.com
status.bienparabien.com
static.ig.justalk.com
quiz.justalk.com
www.justalkcloud.com
staging.kurstrainer.fitseveneleven.de
h5.test.justalk.com
cdn.justalk.com
bizzybooks.com
cdn.justalk.com
classify.org.uk
cn.test.justalk.com
kids.justalk.com
cms.justalk.com
api.justalk.com
justalk.com
webhook.justalk.com
announcements.justalk.com
www.pendikkaynarcaasm.com
meet.justalk.com
webhook.justalk.com
www.justalkcloud.com
convert.denzildoyle.me
gift.nairio.com
endoscopes.me
alacarte.app
daily.justalk.com
daily.justalk.com
nidahub.com
cn.h5src.justalk.com
daily.justalk.com
api.mobile.tradesbarn.com
americorps.ink
quiz.justalk.com
whatsonnear.us
test.intl.api.justalk.com
wisphero.com
Certificate
The complete raw certificate details for justalk.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIQAiaf3/dF4GTMsdi/6x6DcjANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzIwHhcNMjMwMzE3MDAwMDAwWhcNMjQwMzE2MjM1OTU5WjAW MRQwEgYDVQQDEwtqdXN0YWxrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANn9vBdhIUocTpcLl9m8th5trlCOYXPCmznp00wjJTFAOgeJcwddEtxX 7ZMBwQjOdcp7bdQPgy5h61sGQghMp/jX5U6i8E2ZkiIO7XiTiFjAujs3M3LCIDt7 v2+4U16W0+6PV3efNKKhG1lGxu7ZC/tdW9AvIzc0PdURFELj79lU2si26vV/IlCX /LQ5XggGFhY3RqR2v5U6ryh0ZUrOkNw92xvB3RH0VKf6dKPC9cy1F5IAWaY+ibG0 lfX4x0YIN62TSBl1ovXxhNrOwu95EhrJ0vFgetIn0RusIkJvk/8M29o4N93f+F/S GjCEPXVMmhV2iEwv5xwSeswY58exEx0CAwEAAaOCAu0wggLpMB8GA1UdIwQYMBaA FHjfkZBf7t6s9sV169VMVVPvJEq2MB0GA1UdDgQWBBQCb7SteDrP25seVH/ZAXSS 2PFa5zAnBgNVHREEIDAeggtqdXN0YWxrLmNvbYIPd3d3Lmp1c3RhbGsuY29tMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYD VR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMIGABggrBgEFBQcBAQR0MHIwJAYIKwYBBQUHMAGGGGh0dHA6 Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBKBggrBgEFBQcwAoY+aHR0cDovL2NhY2VydHMu ZGlnaWNlcnQuY29tL0VuY3J5cHRpb25FdmVyeXdoZXJlRFZUTFNDQS1HMi5jcnQw CQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHUA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGG76JkJgAABAMARjBEAiACStNRKLK7 fNdCd1qUgKrb/k4B+U5qSl/i3PGYAgLJVgIgfBL06PZPqWCaEex6xXhCgHGfnQwL 8+9mCq/v/6zDw1EAdwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAA AYbvomR6AAAEAwBIMEYCIQDKz65smtKvKoNV3pUvVli9toMlCdSM2jMz+JALKi6s 1wIhAPx3aXXQhQy/Jy2VuhPlptY2zMR3w6yLTqnOSc+/XUzcAHcASLDja9qmRzQP 5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGG76JkPwAABAMASDBGAiEAgbn5OzeP C5AZC6ndOnZAZSUiCQJwRZwxnaxKYEBDg04CIQCNUB4/AA+xj7Y7AXqVjaWlvQ3E PqbRSMPYLgmZ48gtaTANBgkqhkiG9w0BAQsFAAOCAQEAIdH3jsD5ssjqcLneuv4d Yr//Myepbbc9V9QX/pXfTr8O8RswCWbZnBDjON58GQCqBbpT+a5Xizf2WQHPNoMz 3VpfZ3hhtng8gt4J6sC3l/+noKYANk8n7UgRRRRITbhAP9hCI5GYJVOKoH8Zcw+Z oll7GhsvRcsVkT+qsaukBGENpPmvGVAc0yKwk66RlkXUraaWNSwdOVE4PX3n5NmY EvBhuX9D1/YIXzwYRR5feZvIJ/zA+8sRzwvl29YXLg+GR6yE0Kbwv3AUM0IFW27z WSCixYLO0u3zbIgZMnlZd2WCMG5J/jluN1BxzcKmTsiQsW1iDsjjX/hCAyX1GVZq zg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f28F2EhShxOlwuX2by2 Hm2uUI5hc8KbOenTTCMlMUA6B4lzB10S3FftkwHBCM51yntt1A+DLmHrWwZCCEyn +NflTqLwTZmSIg7teJOIWMC6OzczcsIgO3u/b7hTXpbT7o9Xd580oqEbWUbG7tkL +11b0C8jNzQ91REUQuPv2VTayLbq9X8iUJf8tDleCAYWFjdGpHa/lTqvKHRlSs6Q 3D3bG8HdEfRUp/p0o8L1zLUXkgBZpj6JsbSV9fjHRgg3rZNIGXWi9fGE2s7C73kS GsnS8WB60ifRG6wiQm+T/wzb2jg33d/4X9IaMIQ9dUyaFXaITC/nHBJ6zBjnx7ET HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2859005919728649469178484087295214450 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justalk.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27518833437189685242545028654025700345362051556024170380529270073180407441788508107663484433145214910849049252070041730982464824549967285925415088387318706338321903680217686982500670841380559295774384947721949236077307444661488988837941993445642245905091531313822711358297347616867639470137505081220214835478390109467030505230084338130332140496942111589214789037510910508819878539820142401648468695849268698923969605570173944488412415073900169062407194938708754391376557788006515774755419903613778282733982244660780684534209086507190078259617571170784180754399907029467117773044314113777253580770930754869165896569629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 026fb4ad783acfdb9b1e547fd9017492d8f15ae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justalk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justalk.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean false . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:29|false] . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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