rengo-staging.rals.biz
Issued by Amazon
About this certificate
This digital certificate with serial number 06:0f:4c:34:33:b6:80:2e:9a:8f:05:72:b7:3e:50:ec was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rengo-staging.rals.biz
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:0f:4c:34:33:b6:80:2e:9a:8f:05:72:b7:3e:50:ecSerial Number (int): 8054798026586211243204196775759859948
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a4:94:66:9c:17:e8:b6:61:15:b2:23:85:38:40:6f:29:9c:29:9e:69
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): bc:a3:8b:6b:ee:97:52:22:c2:29:70:54:70:4a:88:5a:9c:03:fe:e9
Fingerprint (sha256): bd:71:c1:0d:a8:60:6b:e6:c2:b0:03:b1:ff:d7:d4:58:c0:bc:ec:19:c6:ff:25:35:d7:d8:25:5f:44:c2:22:02
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate rengo-staging.rals.biz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rengo-staging.rals.biz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rengo-staging.rals.biz
Other certificates including the domain name rals.biz
(limited to 100 certificates)
contents.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rinqu.rals.biz
musashi-corporation-sample.rals.biz
rinqu.rals.biz
dev-kokai.rals.biz
rinqu.rals.biz
contents-test.rals.biz
contents.rals.biz
musashi-corporation-sample.rals.biz
internal-system-dev.rals.biz
contents.rals.biz
api.rals.biz
dev-kokai.rals.biz
internal-system-dev.rals.biz
rinqu.rals.biz
rocketchat.rals.biz
internal-system.rals.biz
musashi-corporation-sample.rals.biz
contents-test.rals.biz
stg-kokailist.rals.biz
dev-kokailist.rals.biz
top10-history.rals.biz
musashi-corporation-sample.rals.biz
phpxadmin2.rals.biz
rengo-staging.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rengo-cms.rals.biz
musashi-corporation-sample.rals.biz
rinqu.rals.biz
rals-payment-dev.rals.biz
contents-test.rals.biz
rengo-cms.rals.biz
api.rals.biz
rinqu.rals.biz
internal-system.rals.biz
api.rals.biz
rengo-kokai-01.rals.biz
rengo-staging.rals.biz
rengo-dev.rals.biz
log-catch.rals.biz
formatline.clone.rals.biz
internal-system-dev.rals.biz
rengo-kokai-01.rals.biz
rinqu.rals.biz
dev-kokai.rals.biz
internal-system.rals.biz
rengo-staging.rals.biz
rengo-kokai-01.rals.biz
internal-system.rals.biz
api.rals.biz
rinqu.rals.biz
rinqu-ssltest.rals.biz
stg-kokailist.rals.biz
dev-kokai.rals.biz
rengo-staging.rals.biz
contents.rals.biz
rinqu.rals.biz
rinqu.rals.biz
log-catch.rals.biz
stg-kokailist.rals.biz
testpic.rals.biz
dev-kokai.rals.biz
rinqu.rals.biz
rals-payment-staging.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rengo-staging.rals.biz
testmail01-cbizcojp.rals.biz
rocketchat.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rals-payment.rals.biz
contents.rals.biz
rengo-dev.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rinqu.rals.biz
musashi-corporation-sample.rals.biz
rinqu.rals.biz
dev-kokai.rals.biz
rinqu.rals.biz
contents-test.rals.biz
contents.rals.biz
musashi-corporation-sample.rals.biz
internal-system-dev.rals.biz
contents.rals.biz
api.rals.biz
dev-kokai.rals.biz
internal-system-dev.rals.biz
rinqu.rals.biz
rocketchat.rals.biz
internal-system.rals.biz
musashi-corporation-sample.rals.biz
contents-test.rals.biz
stg-kokailist.rals.biz
dev-kokailist.rals.biz
top10-history.rals.biz
musashi-corporation-sample.rals.biz
phpxadmin2.rals.biz
rengo-staging.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rengo-cms.rals.biz
musashi-corporation-sample.rals.biz
rinqu.rals.biz
rals-payment-dev.rals.biz
contents-test.rals.biz
rengo-cms.rals.biz
api.rals.biz
rinqu.rals.biz
internal-system.rals.biz
api.rals.biz
rengo-kokai-01.rals.biz
rengo-staging.rals.biz
rengo-dev.rals.biz
log-catch.rals.biz
formatline.clone.rals.biz
internal-system-dev.rals.biz
rengo-kokai-01.rals.biz
rinqu.rals.biz
dev-kokai.rals.biz
internal-system.rals.biz
rengo-staging.rals.biz
rengo-kokai-01.rals.biz
internal-system.rals.biz
api.rals.biz
rinqu.rals.biz
rinqu-ssltest.rals.biz
stg-kokailist.rals.biz
dev-kokai.rals.biz
rengo-staging.rals.biz
contents.rals.biz
rinqu.rals.biz
rinqu.rals.biz
log-catch.rals.biz
stg-kokailist.rals.biz
testpic.rals.biz
dev-kokai.rals.biz
rinqu.rals.biz
rals-payment-staging.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rengo-staging.rals.biz
testmail01-cbizcojp.rals.biz
rocketchat.rals.biz
rinqu.rals.biz
rinqu.rals.biz
rals-payment.rals.biz
contents.rals.biz
rengo-dev.rals.biz
Certificate
The complete raw certificate details for rengo-staging.rals.biz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgIQBg9MNDO2gC6ajwVytz5Q7DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA0MDYwMDAwMDBaFw0yMDA1MDYx MjAwMDBaMCExHzAdBgNVBAMTFnJlbmdvLXN0YWdpbmcucmFscy5iaXowggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibgsTJI/m77GEUb4asDor6JZnH3Cj A5KrWff9fOFTTMryYhHuHtERbMWDUwOFgPUbM6Hz3CZj/2yChZrj6eydyrsOI6aL hvNPwRPAavF27HKhcsiNJx5O+Wc8xPkn55VwVAfj9Z3NLF+iHCLBzAm9QgajAsr3 4ITqHX9m4C4u2stUOq7yaajZMNv5AmjWbKd8Iv3md+xqpM+A2Fj0w7tzmhePubrt 4kKO+H4WjPOOdV8ly0v5r/bAvYD8+h5sG8N+wNq7FsdAnT2GfEUPcOZDwQP0esfi nPEMXzjRW55VNNVdfBr2sfQsBOoCcHTX3nSS6bbe9MmnN3NHLX9dknFFAgMBAAGj ggKBMIICfTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUpJRmnBfotmEVsiOFOEBvKZwpnmkwIQYDVR0RBBowGIIWcmVuZ28tc3RhZ2lu Zy5yYWxzLmJpejAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUuga kJZkNo4e0YUAAAFp8A96uAAABAMARjBEAiAehNx1Ux3iFFf1L/MxQ6F8R9xL79aN KQmGl0afStdT0gIgQz/AVzTmcJOtMaYo+dWyIJiC6MwvHD55oDeCkSnim2cAdgCH db/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWnwD3vlAAAEAwBHMEUC IQD7jXT4oIkfwaca1oFlH2EOCksc8tj0BYKg2MEM+DAEigIgfg3mYo5+tuG3NiBv 2YHiV+Pe6ZtJ5vGAp2gVVF3saicwDQYJKoZIhvcNAQELBQADggEBABwzvfvGFF7R XEQlTkDa1HwCMA5BgOY5jaaxBtcGvTzGNNc4g2fZrOX2Wd6ziDjpROl/ZoQCcCrY yNAqRenJyJkKTUd+cfcS8nDY2g+95FLavzUaertx6BiNpWsuRJvI8V3unAiuD9iP Cut5IWMI8qz/07ChcWiLO2lY1O49AEs4HS8Jo9PSAcyX/6eNQZVsdMEZSb08Pnth lW/XvlNc24vH2CPxhLPz32WA+hm6VHK295RfNrsknfbwMSWJLWKPgWREp+vENfSU lqYcAdYv0kE00ynPU1jxz9gWu/Qbb9a9/RpbFNhxJQKdo+o6T8F6SAw5WViM4LXg c0/j5XTq+tk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom4LEySP5u+xhFG+GrA6 K+iWZx9wowOSq1n3/XzhU0zK8mIR7h7REWzFg1MDhYD1GzOh89wmY/9sgoWa4+ns ncq7DiOmi4bzT8ETwGrxduxyoXLIjSceTvlnPMT5J+eVcFQH4/WdzSxfohwiwcwJ vUIGowLK9+CE6h1/ZuAuLtrLVDqu8mmo2TDb+QJo1mynfCL95nfsaqTPgNhY9MO7 c5oXj7m67eJCjvh+FozzjnVfJctL+a/2wL2A/PoebBvDfsDauxbHQJ09hnxFD3Dm Q8ED9HrH4pzxDF840VueVTTVXXwa9rH0LATqAnB01950kum23vTJpzdzRy1/XZJx RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8054798026586211243204196775759859948 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rengo-staging.rals.biz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20504869758884974309154715146902031602787364549205123012019702770478421139541708311971647023471101432266886211264661902906717300693659543731870488574350740586569108835284332145328780787235779490510439231000488797551187297158628728600425133474342025686886662345408842906486376182837391712278138887051231243796303291203103133641186367703213673646760394129335668350581854608315595880990139367176494365520204663108510581374638630482602632058137538495832499171794540118273115562344339540635607992762458854055642051488180878929775363757434507135910996745358930821450360912905053623066194024286768339320745934787396695650629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a494669c17e8b66115b2238538406f299c299e69 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rengo-staging.rals.biz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169f00f7ab8000004030046304402201e84dc75531de21457f52ff33143a17c47dc4befd68d29098697469f4ad753d20220433fc05734e67093ad31a628f9d5b2209882e8cc2f1c3e79a037829129e29b670076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169f00f7be50000040300473045022100fb8d74f8a0891fc1a71ad681651f610e0a4b1cf2d8f40582a0d8c10cf830048a02207e0de6628e7eb6e1b736206fd981e257e3dee99b49e6f180a76815545dec6a27 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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