lgp-test-ui.us.convus.nroadcorp.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0b:6e:71:e0:9c:fa:30:1d:8c:5d:93:a5:84:05:3c:c4 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lgp-test-ui.us.convus.nroadcorp.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:6e:71:e0:9c:fa:30:1d:8c:5d:93:a5:84:05:3c:c4Serial Number (int): 15194970316048641680744405825065663684
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ab:37:f1:01:95:01:53:16:96:a5:45:ec:79:29:8f:25:2e:d7:97:16
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): b9:76:6a:0a:52:28:bd:fd:0f:58:2e:63:c9:cf:a0:95:b2:6c:25:9b
Fingerprint (sha256): c9:2f:25:16:91:57:8c:ee:f4:8c:b3:b8:e7:56:4a:d8:82:72:30:9e:df:71:41:34:34:79:71:f7:07:c6:8c:42
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate lgp-test-ui.us.convus.nroadcorp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lgp-test-ui.us.convus.nroadcorp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lgp-test-ui.us.convus.nroadcorp.com
Other certificates including the domain name nroadcorp.com
(limited to 100 certificates)
auth.storewise.app
www.job-in-arabia.com
vote.dayone.com.hk
cwkc.org
controle.votei.app
avaliacao.truliv.com.br
demo.prototypefactory.co
auth.storewise.app
partners.getcallforce.com
memorynotepad.tns-nikkoo.com
nroadcorp.com
lgp-test-svc.us.convus.nroadcorp.com
www.shoppio.co
www.cvcorp.in
matektabor.miklosdanka.com
app.neurau.com.br
ro.test.funeasylearn.com
recover-hub.com
fukuoka.linx.live
lgp-test-be.us.convus.nroadcorp.com
dldev.geniusteacher.in
nroadcorp.com
www.nox.com.ua
nroadcorp.com
tasktracker.dashboard.mindmesh.app
test.us.convus.nroadcorp.com
visa-cms-dev.hicity.world
ervaarteam.com
www.youssryessmatt.com
luniland.halabe.com
www.nroadcorp.com
nroadcorp.com
bridgeshullltd.com
yildizmetaldugme.com
minghongli.com
wedding.milk.sh
straivetest.nroadcorp.com
www.tnirps.com
app.mapaconsultora.com
www.one-sec.app
sumfactor.com
myhw.elpit.sk
agilemapper.dev.roadbotics.com
nroadcorp.com
nroadcorp.com
field.tf
kodeflex.com
www.tnirps.com
nroadcorp.com
www.10msite.app
eli.dowski.com
dldev.geniusteacher.in
playground-documents.moodys-api.nroadcorp.com
staging.counselmore.com
kamay.dev
orgesarizeybek.com
app.iqid.com
qdonomy.com
links.qodwa.app
playground.moodys.nroadcorp.com
username.city
cdn.findq.app
www.en-gager.app
goosetech.app
lgp-test.us.convus.nroadcorp.com
client.dchums.com
stacysinclair.ca
teams-testing.duome.co
coinmap.cash
automatedtesting.us.convus.nroadcorp.com
telus-insights-dev.carto.solutions
april.sither.me
playground.moodys-api.nroadcorp.com
bluestone-prop.sapphire-standard.com
nroadcorp.com
nroadcorp.com
resume.yashanand.work
www.tgid.com.br
www.svanekebio.dk
www.bloggerz.ga
www.evernug.com
csdealfinder.app
app.mentory.in
nroadcorp.com
dev.i-brilli.com
lgp-test-ui.us.convus.nroadcorp.com
go.kubity.com
coimbatore.azhagudroptaxi.in
automatedtesting.us.convus.nroadcorp.com
url.realresponse.ch
demo.getconnect.com.br
patrimobimoveis.com.br
navan.nroadcorp.com
bluestone-prop.sapphire-standard.com
*.nroadcorp.com
csun.no
www.iwayleaves.co.za
test.us.convus.nroadcorp.com
niklaz.xyz
nroadcorp.com
www.job-in-arabia.com
vote.dayone.com.hk
cwkc.org
controle.votei.app
avaliacao.truliv.com.br
demo.prototypefactory.co
auth.storewise.app
partners.getcallforce.com
memorynotepad.tns-nikkoo.com
nroadcorp.com
lgp-test-svc.us.convus.nroadcorp.com
www.shoppio.co
www.cvcorp.in
matektabor.miklosdanka.com
app.neurau.com.br
ro.test.funeasylearn.com
recover-hub.com
fukuoka.linx.live
lgp-test-be.us.convus.nroadcorp.com
dldev.geniusteacher.in
nroadcorp.com
www.nox.com.ua
nroadcorp.com
tasktracker.dashboard.mindmesh.app
test.us.convus.nroadcorp.com
visa-cms-dev.hicity.world
ervaarteam.com
www.youssryessmatt.com
luniland.halabe.com
www.nroadcorp.com
nroadcorp.com
bridgeshullltd.com
yildizmetaldugme.com
minghongli.com
wedding.milk.sh
straivetest.nroadcorp.com
www.tnirps.com
app.mapaconsultora.com
www.one-sec.app
sumfactor.com
myhw.elpit.sk
agilemapper.dev.roadbotics.com
nroadcorp.com
nroadcorp.com
field.tf
kodeflex.com
www.tnirps.com
nroadcorp.com
www.10msite.app
eli.dowski.com
dldev.geniusteacher.in
playground-documents.moodys-api.nroadcorp.com
staging.counselmore.com
kamay.dev
orgesarizeybek.com
app.iqid.com
qdonomy.com
links.qodwa.app
playground.moodys.nroadcorp.com
username.city
cdn.findq.app
www.en-gager.app
goosetech.app
lgp-test.us.convus.nroadcorp.com
client.dchums.com
stacysinclair.ca
teams-testing.duome.co
coinmap.cash
automatedtesting.us.convus.nroadcorp.com
telus-insights-dev.carto.solutions
april.sither.me
playground.moodys-api.nroadcorp.com
bluestone-prop.sapphire-standard.com
nroadcorp.com
nroadcorp.com
resume.yashanand.work
www.tgid.com.br
www.svanekebio.dk
www.bloggerz.ga
www.evernug.com
csdealfinder.app
app.mentory.in
nroadcorp.com
dev.i-brilli.com
lgp-test-ui.us.convus.nroadcorp.com
go.kubity.com
coimbatore.azhagudroptaxi.in
automatedtesting.us.convus.nroadcorp.com
url.realresponse.ch
demo.getconnect.com.br
patrimobimoveis.com.br
navan.nroadcorp.com
bluestone-prop.sapphire-standard.com
*.nroadcorp.com
csun.no
www.iwayleaves.co.za
test.us.convus.nroadcorp.com
niklaz.xyz
nroadcorp.com
Certificate
The complete raw certificate details for lgp-test-ui.us.convus.nroadcorp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQC25x4Jz6MB2MXZOlhAU8xDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDYwMzAwMDAwMFoXDTI1MDcwMjIzNTk1OVowLjEs MCoGA1UEAxMjbGdwLXRlc3QtdWkudXMuY29udnVzLm5yb2FkY29ycC5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYkOyfBieOzQ9UiPHN8o55uGE VfSJOpGW2oVreN6vt+5AJMMdNzhfqkIjSx8eKijBLLtu8ydk3H7sn1RehMn/bZxh qd+tLnhmQ+ysuPmAVN0jgExY6U7maC2sLy7XAlRooSET4ofe5Fp4MgAU8rnS1+G8 uTQd3D4pCjWktIvTHmw3scJwQXsNUOrrO9z5jihqUPnuOvH2Un3oxi0TKnbOhgPw AUdPbOhfX3R44kwWjq4WJkV2XNV0xUJKs95FJiPubuA7ovIodq39bTC9QNV3a7+m W3iDWru/WaYJorcMTvDL0e8o6uWPbiTSI4VTvCXob7DM1zrJBfqFvdqEHRNxAgMB AAGjggGPMIIBizAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNV HQ4EFgQUqzfxAZUBUxaWpUXseSmPJS7XlxYwLgYDVR0RBCcwJYIjbGdwLXRlc3Qt dWkudXMuY29udnVzLm5yb2FkY29ycC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5qHJYvZQj 1FTuqER7lk9RR3TthL6h/uKC6QodJw6VFUI7u3rrOttVZhDxvdd8ElQFQEEKV2Gu axpxy6r6aqoUhdj0uCsf/vd0OlUH3+ooYYXphdkP7bAdWvfv+hxzmszpuEYk/5L6 dBio1TAqcyla1bc6SBpjEh5Yj3o3X8Yplw7jSGCB7ck6A2kj+tJSfjlYcDsgIGTr FhB6nnVqgAhWNMjDpvR/T9jIogBUwPjRe4Zw9HdOH/+sdU0Pv6+W5m0Vi7+nDCh6 QkoT8MyDvpAZDpaCgs+FWElhBtCitUvPk4w/V9WLx8zTbsA0jTuMj422HH8oJxgi xOQazmsDKHyb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mJDsnwYnjs0PVIjxzfK OebhhFX0iTqRltqFa3jer7fuQCTDHTc4X6pCI0sfHioowSy7bvMnZNx+7J9UXoTJ /22cYanfrS54ZkPsrLj5gFTdI4BMWOlO5mgtrC8u1wJUaKEhE+KH3uRaeDIAFPK5 0tfhvLk0Hdw+KQo1pLSL0x5sN7HCcEF7DVDq6zvc+Y4oalD57jrx9lJ96MYtEyp2 zoYD8AFHT2zoX190eOJMFo6uFiZFdlzVdMVCSrPeRSYj7m7gO6LyKHat/W0wvUDV d2u/plt4g1q7v1mmCaK3DE7wy9HvKOrlj24k0iOFU7wl6G+wzNc6yQX6hb3ahB0T cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15194970316048641680744405825065663684 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgp-test-ui.us.convus.nroadcorp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27568406485035045968823451980645245694711707568164595208611139661192416611784241002743705324331629219622232963344024484825849104416406800602892452545708822292454052674268627789482530799781936890976234143673441893621119753090693328755077995683751779859080982286344494908986139544007148332006360272991073138052248420839364888612171679459067351113891559518001505449789914689794292057838519374973286748337942178635967105551020520067178001252755340898012815339619399669873531105555332548959617034673982423138026734554572460183923927944002959043218455662490303799637023738542424611499290458687646969320456415032879504757617 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab37f1019501531696a545ec79298f252ed79716 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgp-test-ui.us.convus.nroadcorp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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