*.staging.snapscan.io
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:cf:35:15:45:94:c1:38:1f:39:8d:9e:7d:dc:93:26 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.staging.snapscan.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:cf:35:15:45:94:c1:38:1f:39:8d:9e:7d:dc:93:26Serial Number (int): 18355846047955321155913485222365926182
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a8:7d:9b:4b:66:f3:57:77:ae:6c:07:9c:61:40:21:08:75:51:6c:9d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3c:ab:8b:d8:74:48:b1:9d:e4:73:03:e2:80:0c:f2:fa:a3:be:9e:1d
Fingerprint (sha256): bc:e9:fd:8b:33:7f:dd:5f:8d:94:2e:33:ff:92:1d:98:ed:cf:de:87:ce:04:f7:99:91:b3:b1:1c:ea:78:86:2e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.staging.snapscan.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.staging.snapscan.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.staging.snapscan.io
Other certificates including the domain name snapscan.io
(limited to 100 certificates)
api.snapscan.io
assets.snapscan.io
crm.belov.ai
assets.staging.snapscan.io
pay.qa.snapscan.io
*.staging.snapscan.io
pay.staging.snapscan.io
auth-essentials.avertro.com
corporate.rookool.com
app.weloveideas.com
traineeserasaexperian.com.br
status.snapscan.io
scanpay.staging.snapscan.io
qa-snapmin.snapscan.io
snapmin.proddr.snapscan.io
status.snapscan.io
tributary.icewater.money
dash.throw.app
pos.qa.snapscan.io
pos.qa.snapscan.io
hasanli.info
pay.qa.snapscan.io
*.production.snapscan.io
store.snapscan.io
*.production.snapscan.io
qr.hocchoi.com
pos.snapscan.io
staging-pos.snapscan.io
hack-thinking.com
snapmin.qa.snapscan.io
pos.snapscan.io
*.qa.snapscan.io
*.production.snapscan.io
crebo.co.jp
status.snapscan.io
www.shvaana.nl
custom-docs.deepaffects.com
pos-staging.snapscan.io
www.queryconsulting.hu
assets.snapscan.io
pos.stagingdrill.snapscan.io
pay.proddr.snapscan.io
snapmin.production.snapscan.io
*.production.snapscan.io
www.blueeel.co.uk
crebo.co.jp
www.taporty.it
pay.snapscan.io
pro.outflank.com.au
console.production.snapscan.io
open.snapscan.io
pos.snapscan.io
*.production.snapscan.io
snapmin.production.snapscan.io
staging-snapmin.snapscan.io
pay.qa.snapscan.io
www.metropolique.com
pos.proddr.snapscan.io
pos.snapscan.io
james-riggleman.com
open.snapscan.io
assets.snapscan.io
*.production.snapscan.io
ucdavisathleticcamps.com
www.ifortifyfitness.com
pos.snapscan.io
test.landix.io
pos.snapscan.io
pos-staging.snapscan.io
3fexotic.com
*.snapscan.io
skinster.app
pay.snapscan.io
console.staging.snapscan.io
console.staging.snapscan.io
assets.snapscan.io
snapmin.staging.snapscan.io
pos.snapscan.io
data.bitewell.com
cycraft.co
snapmin.qa.snapscan.io
*.production.snapscan.io
open.qa.snapscan.io
pos.snapscan.io
*.staging.snapscan.io
api.snapscan.io
*.staging.snapscan.io
staging-pos.snapscan.io
pos.snapscan.io
pay.staging.snapscan.io
crm.belov.ai
open.staging.snapscan.io
vendor.elitindirim.com
cdn.taskgram.com
www.wieloslowie.pl
driebroek.nl
*.staging.snapscan.io
api.snapscan.io
cookbook.gajdos.sk
staging-pos.snapscan.io
assets.snapscan.io
crm.belov.ai
assets.staging.snapscan.io
pay.qa.snapscan.io
*.staging.snapscan.io
pay.staging.snapscan.io
auth-essentials.avertro.com
corporate.rookool.com
app.weloveideas.com
traineeserasaexperian.com.br
status.snapscan.io
scanpay.staging.snapscan.io
qa-snapmin.snapscan.io
snapmin.proddr.snapscan.io
status.snapscan.io
tributary.icewater.money
dash.throw.app
pos.qa.snapscan.io
pos.qa.snapscan.io
hasanli.info
pay.qa.snapscan.io
*.production.snapscan.io
store.snapscan.io
*.production.snapscan.io
qr.hocchoi.com
pos.snapscan.io
staging-pos.snapscan.io
hack-thinking.com
snapmin.qa.snapscan.io
pos.snapscan.io
*.qa.snapscan.io
*.production.snapscan.io
crebo.co.jp
status.snapscan.io
www.shvaana.nl
custom-docs.deepaffects.com
pos-staging.snapscan.io
www.queryconsulting.hu
assets.snapscan.io
pos.stagingdrill.snapscan.io
pay.proddr.snapscan.io
snapmin.production.snapscan.io
*.production.snapscan.io
www.blueeel.co.uk
crebo.co.jp
www.taporty.it
pay.snapscan.io
pro.outflank.com.au
console.production.snapscan.io
open.snapscan.io
pos.snapscan.io
*.production.snapscan.io
snapmin.production.snapscan.io
staging-snapmin.snapscan.io
pay.qa.snapscan.io
www.metropolique.com
pos.proddr.snapscan.io
pos.snapscan.io
james-riggleman.com
open.snapscan.io
assets.snapscan.io
*.production.snapscan.io
ucdavisathleticcamps.com
www.ifortifyfitness.com
pos.snapscan.io
test.landix.io
pos.snapscan.io
pos-staging.snapscan.io
3fexotic.com
*.snapscan.io
skinster.app
pay.snapscan.io
console.staging.snapscan.io
console.staging.snapscan.io
assets.snapscan.io
snapmin.staging.snapscan.io
pos.snapscan.io
data.bitewell.com
cycraft.co
snapmin.qa.snapscan.io
*.production.snapscan.io
open.qa.snapscan.io
pos.snapscan.io
*.staging.snapscan.io
api.snapscan.io
*.staging.snapscan.io
staging-pos.snapscan.io
pos.snapscan.io
pay.staging.snapscan.io
crm.belov.ai
open.staging.snapscan.io
vendor.elitindirim.com
cdn.taskgram.com
www.wieloslowie.pl
driebroek.nl
*.staging.snapscan.io
api.snapscan.io
cookbook.gajdos.sk
staging-pos.snapscan.io
Certificate
The complete raw certificate details for *.staging.snapscan.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgDCCA2igAwIBAgIQDc81FUWUwTgfOY2efdyTJjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MTgwMDAwMDBaFw0yMDA4MTgx MjAwMDBaMCAxHjAcBgNVBAMMFSouc3RhZ2luZy5zbmFwc2Nhbi5pbzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK4SD2KxGRs/IRtEf25YUeGrWjWVPmGe ZpobEJj6k7Atw/cLmEbVxPyr7k6qXuTlYB59PyaNXhRqPCWN01kL9ooF22dW4Aji tGB0+76bTw9TY+2nV99FEgJqj/ruhKUtNcZoKzYf8LUHp5evVlSm4nwIlbp48yh3 Dafzuq2fbVIv5wW/LDah+eDH0xD4CZny2G9P682VxbiArURBLp3OJMeLMEnMdp2O BOfPqWOGEsh/EzeluLqcdeXPJEDCIUxEyy+vQVU06ymkqKEHcVWyy0J1bkHD2IpI 7qQ/Ek3xQNK9YrbXfFDuIsBjjQ5RJ7oF4dwPxJt57Ad3bts0S0+9hokCAwEAAaOC AY4wggGKMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBSofZtLZvNXd65sB5xhQCEIdVFsnTAgBgNVHREEGTAXghUqLnN0YWdpbmcuc25h cHNjYW4uaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdhr+RJgd0YXLdhT xMbhM3L3F9fOOOVsDsGZPHqhek2/nKKcxaJm0CBDNa8rmvMI1frKf4L0ERvnkOUf 6Dc4QGKXiLynrUcSrZLTVlYKQjjzqNfopjjjx4lfRUomPGOlhvATpoPhcO7V/Z0a kwALJdFz9y5y4hqThwnfLQraAN/U9AtNI9Dk+jXdSxdltTS5Q2Uq/8mPBbPCWZF1 PIEc3QSXFQbMxkFF8pjfYGnrRx/UmdRF0TfZwdRmzgDHJMPNrsvO3Gt1rA7HXg+B fDOU8J+2FgPpxC4/f6Qtgh98lb4bJTgIp8hGePIfnQvvOKKDUqrvvVtfi8C0XX03 xYN5DA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhIPYrEZGz8hG0R/blhR 4ataNZU+YZ5mmhsQmPqTsC3D9wuYRtXE/KvuTqpe5OVgHn0/Jo1eFGo8JY3TWQv2 igXbZ1bgCOK0YHT7vptPD1Nj7adX30USAmqP+u6EpS01xmgrNh/wtQenl69WVKbi fAiVunjzKHcNp/O6rZ9tUi/nBb8sNqH54MfTEPgJmfLYb0/rzZXFuICtREEunc4k x4swScx2nY4E58+pY4YSyH8TN6W4upx15c8kQMIhTETLL69BVTTrKaSooQdxVbLL QnVuQcPYikjupD8STfFA0r1ittd8UO4iwGONDlEnugXh3A/Em3nsB3du2zRLT72G iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18355846047955321155913485222365926182 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.snapscan.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21974370831162578699893320120424022840727243039991839948189015043840959195959568708810907652134736019289242256645676657188958699011160252642619637802612752065557730580694388751427325650018478352765820086226288576617861247911155388100529191200028503108523039852177382294265888728416662956462210069584416860115477825402290347734419025112860122691458765872391262094087901965633606916719224109522056834913646427172926371596997568045133277036953260613369162631202278909865224156971656626469071593064283412358680794690470213129476957276333571111415092156127853925655604517743055163804083196701614809338684663570354111612553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a87d9b4b66f35777ae6c079c6140210875516c9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.snapscan.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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