payment.solargis.com
Issued by Amazon
About this certificate
This digital certificate with serial number 01:59:81:be:cd:16:dd:76:c7:f8:72:1f:f3:ae:e1:c9 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=payment.solargis.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:59:81:be:cd:16:dd:76:c7:f8:72:1f:f3:ae:e1:c9Serial Number (int): 1793973963856333523077021511420142025
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: af:67:d0:86:8c:b6:4a:47:0e:99:b8:e9:11:65:2e:52:e2:33:ec:7e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): c5:ae:eb:b3:e5:4f:6c:40:5f:f4:be:21:05:21:9d:56:e9:51:bc:34
Fingerprint (sha256): cb:a8:3f:3a:b2:b9:05:46:dd:8e:34:9b:b4:fa:04:9e:51:4c:39:81:9d:51:8b:a1:49:cd:ce:d1:39:cf:54:98
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate payment.solargis.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for payment.solargis.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
payment.solargis.com
braintree.solargis.com
braintree.solargis.com
Other certificates including the domain name solargis.com
(limited to 100 certificates)
ssl83883.cloudflare.com
api.solargis.com
servicedesk.monaghancoco.ie
helpdesk.porvairfiltration.com
helpdesk.llyc.global
ssl83883.cloudflare.com
*.solargis.com
*.solargis.com
*.solargis.com
maildev.sg1.solargis.com
tiles.solargis.com
pomoc.lekam.pl
*.solargis.com
solargis.com
ssl256094.cloudflaressl.com
servicedesk.monaghancoco.ie
*.sdat.solargis.com
mobile-app.solargis.com
sgmon.solargis.com
solargis.com
*.solargis.com
api.solargis.com
pomoc.lekam.pl
ssl83883.cloudflare.com
ssl256092.cloudflaressl.com
sd.kormotech.com
ssl83883.cloudflare.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
ssl256094.cloudflaressl.com
helpdesk.nauit.lt
ssl256094.cloudflaressl.com
ssl83883.cloudflare.com
ssl83883.cloudflare.com
help.sch1584.ru
apps.solargis.com
*.solargis.com
tiles.solargis.com
payment.solargis.com
api.solargis.com
ssl83883.cloudflare.com
mobile-app.solargis.com
itdesk.solargis.com
api.solargis.com
ssl83883.cloudflare.com
apps.solargis.com
helpdesk.nauit.lt
ssl256094.cloudflaressl.com
*.solargis.com
files.sdat.solargis.com
ssl83883.cloudflare.com
helpdesk.aldaholding.com
servicedesk.monaghancoco.ie
ssl83883.cloudflare.com
itdesk.solargis.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
*.solargis.com
*.solargis.com
api.solargis.com
*.solargis.com
mobile-app.solargis.com
helpdesk.porvairfiltration.com
servicedesk.phmg.com
files.sdat.solargis.com
ssl83883.cloudflare.com
*.solargis.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
payment.solargis.com
payment.solargis.com
*.solargis.com
*.solargis.com
apps.solargis.com
tiles.solargis.com
itdesk.solargis.com
servicedesk.phmg.com
ssl256094.cloudflaressl.com
api.solargis.com
servicedesk.monaghancoco.ie
helpdesk.porvairfiltration.com
helpdesk.llyc.global
ssl83883.cloudflare.com
*.solargis.com
*.solargis.com
*.solargis.com
maildev.sg1.solargis.com
tiles.solargis.com
pomoc.lekam.pl
*.solargis.com
solargis.com
ssl256094.cloudflaressl.com
servicedesk.monaghancoco.ie
*.sdat.solargis.com
mobile-app.solargis.com
sgmon.solargis.com
solargis.com
*.solargis.com
api.solargis.com
pomoc.lekam.pl
ssl83883.cloudflare.com
ssl256092.cloudflaressl.com
sd.kormotech.com
ssl83883.cloudflare.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
ssl256094.cloudflaressl.com
helpdesk.nauit.lt
ssl256094.cloudflaressl.com
ssl83883.cloudflare.com
ssl83883.cloudflare.com
help.sch1584.ru
apps.solargis.com
*.solargis.com
tiles.solargis.com
payment.solargis.com
api.solargis.com
ssl83883.cloudflare.com
mobile-app.solargis.com
itdesk.solargis.com
api.solargis.com
ssl83883.cloudflare.com
apps.solargis.com
helpdesk.nauit.lt
ssl256094.cloudflaressl.com
*.solargis.com
files.sdat.solargis.com
ssl83883.cloudflare.com
helpdesk.aldaholding.com
servicedesk.monaghancoco.ie
ssl83883.cloudflare.com
itdesk.solargis.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
*.solargis.com
*.solargis.com
api.solargis.com
*.solargis.com
mobile-app.solargis.com
helpdesk.porvairfiltration.com
servicedesk.phmg.com
files.sdat.solargis.com
ssl83883.cloudflare.com
*.solargis.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
payment.solargis.com
payment.solargis.com
*.solargis.com
*.solargis.com
apps.solargis.com
tiles.solargis.com
itdesk.solargis.com
servicedesk.phmg.com
ssl256094.cloudflaressl.com
Certificate
The complete raw certificate details for payment.solargis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIQAVmBvs0W3XbH+HIf867hyTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA2MDUwMDAwMDBaFw0yMDA3MDUx MjAwMDBaMB8xHTAbBgNVBAMTFHBheW1lbnQuc29sYXJnaXMuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA072QncM6r6WtRyiEN2avdXdHjzh6M9eg ZhD+SghCHSJrcUxA/o+bL2NsHkDNaz75XKMw4aMhZskZizxES4NjM2ul5WHbWrAv 5wQuiUcAfb7+HQCYnCvtluPC0fS2EiU7i+YItHLHa26qhiLwhXEgWhbO/CYQuCzn XcQwhQ0K2iYznvOff9FgN9iJGytWEqibdTBiBbYaApzIvVAwnpaO1bMCS+JGt0yS o6OaX+3Oj9qaOKY8jhJnyKsm+Xj4JAuhFBZyAG4tbdv3ItBqoeuC9zElmq0vq/lK 6Qm39en/oUy6V3E9hzSMWtWcyPI93g9CF9CGdYbRdagF1YI1f7w3qQIDAQABo4IC lzCCApMwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FK9n0IaMtkpHDpm46RFlLlLiM+x+MDcGA1UdEQQwMC6CFHBheW1lbnQuc29sYXJn aXMuY29tghZicmFpbnRyZWUuc29sYXJnaXMuY29tMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1Ud IAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2Bggr BgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu Y3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDuS723 dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWslG2FsAAAEAwBHMEUCIFon z12T9mNttCeRGjPhy7pf8uDl4YWM5tV5rsyGj5xjAiEApa67hO//GjnCo6A28W9/ XcaJU5gd/M2nIcQ6zhzBdngAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/ XqCDDwAAAWslG2I6AAAEAwBGMEQCIE3x38nFdS6PjQdbGrVZUjkx+tigSu/Tk72b pd943KkdAiAtcoX5r4VmyuPzOeIhbovd97jiuPfFVhQrknUuOkfJejANBgkqhkiG 9w0BAQsFAAOCAQEACBQkctWblTCyxW8vfNdfzNtU40/2o3DkTxqchSUdgdYUT1lV WH2UGlLuPKI+w6nG0sXzTe9Y07qXW2R+sOkTTj0xYjitXjJ4+nQza13RZmm0Yt1h 3hcfX8NpMd4ON/6OWZoxgbG+6Ef3K42kUzHtlWFI+UbbXSBrCZ4GB4+vpNTmv9/I /QD+hZzlTuXwWB6RXBLkV6miGCO9sielraSoVopNfKWNvsK6GOyVH2snKhdnrsAM uBYBBCdESZpWy1YiLaHam7QtF8TaIGnvECf1b0XTQ5Eda4isQ9zZyuc5I8PSEcQe +tZ2wHR1QbF881ob8Ij7fGDmYYs01Ol3yXhDwg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA072QncM6r6WtRyiEN2av dXdHjzh6M9egZhD+SghCHSJrcUxA/o+bL2NsHkDNaz75XKMw4aMhZskZizxES4Nj M2ul5WHbWrAv5wQuiUcAfb7+HQCYnCvtluPC0fS2EiU7i+YItHLHa26qhiLwhXEg WhbO/CYQuCznXcQwhQ0K2iYznvOff9FgN9iJGytWEqibdTBiBbYaApzIvVAwnpaO 1bMCS+JGt0ySo6OaX+3Oj9qaOKY8jhJnyKsm+Xj4JAuhFBZyAG4tbdv3ItBqoeuC 9zElmq0vq/lK6Qm39en/oUy6V3E9hzSMWtWcyPI93g9CF9CGdYbRdagF1YI1f7w3 qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1793973963856333523077021511420142025 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payment.solargis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26729760287581982772097901929891092685060587194240843652897044416204063665377699338069403668831607099738513474863609662151238237772015828362136868365555406105810517207111028958628889104656532128856503905627820650431291120466567507106776020854633931239398262257228168609077403099566200177016484945565347685627386905518138277623095005519978354004474323531348582631902140634092485789958607644091042897345694581807077978385979437672652223535407376711958069141091673720556514232532458321937229362143521166071612205359209488570896189932356198187324086083298522065765248508369419395281927084441975928295162403932957822433193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af67d0868cb64a470e99b8e911652e52e233ec7e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.solargis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braintree.solargis.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b251b616c000004030047304502205a27cf5d93f6636db427911a33e1cbba5ff2e0e5e1858ce6d579aecc868f9c63022100a5aebb84efff1a39c2a3a036f16f7f5dc68953981dfccda721c43ace1cc176780075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b251b623a000004030046304402204df1dfc9c5752e8f8d075b1ab559523931fad8a04aefd393bd9ba5df78dca91d02202d7285f9af8566cae3f339e2216e8bddf7b8e2b8f7c556142b92752e3a47c97a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0008142472d59b9530b2c56f2f7cd75fccdb54e34ff6a370e44f1a9c85251d81d6144f5955587d941a52ee3ca23ec3a9c6d2c5f34def58d3ba975b647eb0e9134e3d316238ad5e3278fa74336b5dd16669b462dd61de171f5fc36931de0e37fe8e599a3181b1bee847f72b8da45331ed956148f946db5d206b099e06078fafa4d4e6bfdfc8fd00fe859ce54ee5f0581e915c12e457a9a21823bdb227a5ada4a8568a4d7ca58dbec2ba18ec951f6b272a1767aec00cb81601042744499a56cb56222da1da9bb42d17c4da2069ef1027f56f45d343911d6b88ac43dcd9cae73923c3d211c41efad676c0747541b17cf35a1bf088fb7c60e6618b34d4e977c97843c2