app.positiveprime.com
Issued by Amazon
About this certificate
This digital certificate with serial number 03:eb:50:59:16:da:3e:7f:94:81:cc:e1:b1:41:cd:3f was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=app.positiveprime.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:eb:50:59:16:da:3e:7f:94:81:cc:e1:b1:41:cd:3fSerial Number (int): 5209503400257699199481124834192248127
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 8c:29:10:fa:1c:8d:ff:62:f1:c9:77:43:9e:85:a3:37:fc:a5:03:31
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): f0:16:e8:98:cd:eb:ee:71:de:88:a1:fc:88:6d:31:3c:fe:e9:ec:e3
Fingerprint (sha256): cb:93:ad:cf:24:38:d4:a6:1b:59:94:13:4f:e7:c5:f8:a7:7d:a9:fd:3b:16:d4:3e:3a:4b:92:e4:6e:c9:0d:71
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate app.positiveprime.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.positiveprime.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.positiveprime.com
Other certificates including the domain name positiveprime.com
(limited to 100 certificates)
app.positiveprime.com
positiveprime.com
positiveprime.com
positiveprime.com
myapp.positiveprime.com
positiveprime.com
jikyucho.templat.dev
app.positiveprime.com
daocup.com
onext.gr
positiveprime.com
area51.magicexhibits.com
www.appregistro.it
positiveprime.com
api.positiveprime.com
dev.bestbuymall.pk
www.greenqms.com
entregamovil.com
myapp.positiveprime.com
new.positiveprime.com
www.calvetti3d.com
gsndev.com.br
www.outsyde.app
awscloudpractitionerexamprep.com
conferenceannuelleduleem.org
positiveprime.com
media.positiveprime.com
ada-admin.qikcheck.com
shenaniganizers.com
martinade.com
app.positiveprime.com
fetzeronline.com.br
sni.cloudflaressl.com
jikyucho.templat.dev
uat.mes-rcet.com
webstore.nearbymarts.com
test-app.positiveprime.com
cdn.positiveprime.com
famframes.com
www.positiveprime.com
evanova.paperwebsite.com
merterim.dev
abrahamk.in
app.positiveprime.com
www.meghufoundation.com
www.ecoparchi.com
positiveprime.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.thepaymentbutton.com
www.outsyde.app
positiveprime.com
app-links-test.bkr.com.ar
sni.cloudflaressl.com
www.thepaymentbutton.com
positiveprime.com
tablereservations.anyware.software
positiveprime.com
staging.pennyfs.com
positiveprime.com
sni.cloudflaressl.com
sidecart.thehellopos.com
www.jlukenoff.com
positiveprime.com
vtobe.com.ua
aviatavi.com
positiveprime.com
one-education-stage-3.ischoolconnect.com
appv2.linkshot.io
www.silvercharity.org
www.dungeondashdaily.com
positiveprime.com
link.aark.app
www.survey.koco19.com
niklas-vlach.com
app.positiveprime.com
rivervalleyirregulars.com
aboa-mare-sperry.mari-sto.fi
www.ecoparchi.com
mxm.mafia-games.com
aviatavi.com
myapp.positiveprime.com
positiveprime.com
sni.cloudflaressl.com
www.jlukenoff.com
positiveprime.com
www.perfecttablettools.com
www.perfecttablettools.com
app-links-test.bkr.com.ar
shapeen.com
sni.cloudflaressl.com
app.positiveprime.com
positiveprime.com
positiveprime.com
positiveprime.com
positiveprime.com
myapp.positiveprime.com
positiveprime.com
jikyucho.templat.dev
app.positiveprime.com
daocup.com
onext.gr
positiveprime.com
area51.magicexhibits.com
www.appregistro.it
positiveprime.com
api.positiveprime.com
dev.bestbuymall.pk
www.greenqms.com
entregamovil.com
myapp.positiveprime.com
new.positiveprime.com
www.calvetti3d.com
gsndev.com.br
www.outsyde.app
awscloudpractitionerexamprep.com
conferenceannuelleduleem.org
positiveprime.com
media.positiveprime.com
ada-admin.qikcheck.com
shenaniganizers.com
martinade.com
app.positiveprime.com
fetzeronline.com.br
sni.cloudflaressl.com
jikyucho.templat.dev
uat.mes-rcet.com
webstore.nearbymarts.com
test-app.positiveprime.com
cdn.positiveprime.com
famframes.com
www.positiveprime.com
evanova.paperwebsite.com
merterim.dev
abrahamk.in
app.positiveprime.com
www.meghufoundation.com
www.ecoparchi.com
positiveprime.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.thepaymentbutton.com
www.outsyde.app
positiveprime.com
app-links-test.bkr.com.ar
sni.cloudflaressl.com
www.thepaymentbutton.com
positiveprime.com
tablereservations.anyware.software
positiveprime.com
staging.pennyfs.com
positiveprime.com
sni.cloudflaressl.com
sidecart.thehellopos.com
www.jlukenoff.com
positiveprime.com
vtobe.com.ua
aviatavi.com
positiveprime.com
one-education-stage-3.ischoolconnect.com
appv2.linkshot.io
www.silvercharity.org
www.dungeondashdaily.com
positiveprime.com
link.aark.app
www.survey.koco19.com
niklas-vlach.com
app.positiveprime.com
rivervalleyirregulars.com
aboa-mare-sperry.mari-sto.fi
www.ecoparchi.com
mxm.mafia-games.com
aviatavi.com
myapp.positiveprime.com
positiveprime.com
sni.cloudflaressl.com
www.jlukenoff.com
positiveprime.com
www.perfecttablettools.com
www.perfecttablettools.com
app-links-test.bkr.com.ar
shapeen.com
sni.cloudflaressl.com
app.positiveprime.com
positiveprime.com
Certificate
The complete raw certificate details for app.positiveprime.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQA+tQWRbaPn+UgczhsUHNPzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMDQwMDAwMDBaFw0yMDAyMDQx MjAwMDBaMCAxHjAcBgNVBAMTFWFwcC5wb3NpdGl2ZXByaW1lLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ54xE9wAmt0Ceije5ZNICrvAokvwCLE XNH6BvM0wfa8/T7a11SYKF6LN10iAngn77zaTurKwCyhqGBJjxmChLwFSONcN96t Yyc1AZEkEGwtdL4qcOtNw8QALwLyj9nQp7o5CIxCZLSAlwNSR0A1eeYvvQOWGz1X 2bbRW2N7bk6wlww8GfN7ejHbsGBIfSPsCPqj1S4EJGB33fRK60siq/GqTSZ3UI+C xfyPxxHBbLxXATptQYE9IADY2WBDyWGNxkLHlF+rZ1p9Q/qtJjBgXbgkik81Nh2N ULnSHx4ExP+vrlU62gOLr3LNU+VKEoByFhMyJ1t0CSwmYIE29mPS7SUCAwEAAaOC AoAwggJ8MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBSMKRD6HI3/YvHJd0OehaM3/KUDMTAgBgNVHREEGTAXghVhcHAucG9zaXRpdmVw cmltZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQMG CisGAQQB1nkCBAIEgfQEgfEA7wB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ Uy3vi5BeAAABaBb4/DUAAAQDAEcwRQIgTI/kvLEnu4Cvv2gLyEiWhpnpR7XT2sLV +sxpSaY6oVoCIQCwWEyX9xi8RcU03uc3C6IT00uv7RNGPNSZBBeUUXJGEQB1AId1 v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABaBb4/PgAAAQDAEYwRAIg MVuhB8RIdnTWpC+0DREQUOV5eHVxw1zOVVWsK4ZiYh8CIDwScq6mKowy41lDX4OK I1UZ2CssDLPKOfIfrYMIgBPtMA0GCSqGSIb3DQEBCwUAA4IBAQAmwDDuc7kNI/uE P42bO89Ah/NTvkPCzrBGXzLmIoDKyuUg1Uk3VcdwwraT29XwEEx7LucbWzs1LeJr 693DRhdkIdcRB+wU7oXJCO7ABXuzvhxRqMJdSYoYsVyUT3aCZ9D2OwoQgcPaqy40 mpwTcz1pgiLfI1OB2wdr3TfxrTRhra2ZkKsbcs/AgDORyFi0nI/QXA2bXqwQnlZr xEYn2Xv1TNmjpiXwnRxQkWEM1kGTeQuuPb3BYWnUyMUyT3XKSGR9/ZUqPz/KwBSD WORpfjNn3XnGOn7i7icX77MM/1JlNow45T6znJ8Tbkaqd+AZwq8s7XLo119rep9C o7sBj2o4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnjET3ACa3QJ6KN7lk0g Ku8CiS/AIsRc0foG8zTB9rz9PtrXVJgoXos3XSICeCfvvNpO6srALKGoYEmPGYKE vAVI41w33q1jJzUBkSQQbC10vipw603DxAAvAvKP2dCnujkIjEJktICXA1JHQDV5 5i+9A5YbPVfZttFbY3tuTrCXDDwZ83t6MduwYEh9I+wI+qPVLgQkYHfd9ErrSyKr 8apNJndQj4LF/I/HEcFsvFcBOm1BgT0gANjZYEPJYY3GQseUX6tnWn1D+q0mMGBd uCSKTzU2HY1QudIfHgTE/6+uVTraA4uvcs1T5UoSgHIWEzInW3QJLCZggTb2Y9Lt JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5209503400257699199481124834192248127 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.positiveprime.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20005204531567805672599905416872158026161429322641986111524584076724920482865061854092423846657279487272313177031465049605276184795001558741755691216172523472180711483247019291648047939467290216140846595396099950405924581832395307522969600153957402781901540703950532005069655054302999887170078962922205518440153517989072274692454984175428686525059895671565920054209946017219480175653660194870442491880044470228576051994683107093192139286438812150123006469615504559821764026797330015309172654657144368881803185631792530078934079711863868183858034568876023276804377037694919750282032227069908646768876321270620365188389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c2910fa1c8dff62f1c977439e85a337fca50331 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.positiveprime.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016816f8fc35000004030047304502204c8fe4bcb127bb80afbf680bc848968699e947b5d3dac2d5facc6949a63aa15a022100b0584c97f718bc45c534dee7370ba213d34bafed13463cd499041794517246110075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016816f8fcf800000403004630440220315ba107c4487674d6a42fb40d111050e579787571c35cce5555ac2b8662621f02203c1272aea62a8c32e359435f838a235519d82b2c0cb3ca39f21fad83088013ed . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0026c030ee73b90d23fb843f8d9b3bcf4087f353be43c2ceb0465f32e62280cacae520d5493755c770c2b693dbd5f0104c7b2ee71b5b3b352de26bebddc346176421d71107ec14ee85c908eec0057bb3be1c51a8c25d498a18b15c944f768267d0f63b0a1081c3daab2e349a9c13733d698222df235381db076bdd37f1ad3461adad9990ab1b72cfc0803391c858b49c8fd05c0d9b5eac109e566bc44627d97bf54cd9a3a625f09d1c5091610cd64193790bae3dbdc16169d4c8c5324f75ca48647dfd952a3f3fcac0148358e4697e3367dd79c63a7ee2ee2717efb30cff5265368c38e53eb39c9f136e46aa77e019c2af2ced72e8d75f6b7a9f42a3bb018f6a38