radius.khipu-networks.com
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 08:16:00:76:51:5d:8e:92:ee:a3:97:60:43:d5:d2:5a was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=radius.khipu-networks.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:16:00:76:51:5d:8e:92:ee:a3:97:60:43:d5:d2:5aSerial Number (int): 10748063871271659057464031012782985818
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 44:03:7e:c7:c9:4f:79:59:37:90:4a:05:e2:e4:cd:16:67:d7:f8:e8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 7d:a6:a0:f7:e1:a2:2b:02:0f:7c:5e:a9:29:68:14:54:4e:8c:01:26
Fingerprint (sha256): d3:e0:16:39:e5:de:93:8d:06:8f:6e:0d:f7:f7:cb:4c:b0:25:86:4a:5a:39:48:79:71:53:71:f9:79:1d:4d:83
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate radius.khipu-networks.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for radius.khipu-networks.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
radius.khipu-networks.com
Other certificates including the domain name khipu-networks.com
(limited to 100 certificates)
support.khipu-networks.com
support.khipu-networks.com
*.khipu-networks.com
mailgw2.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
khipu-networks.com
KHIPU-SA-7010.khipu-networks.com
*.khipu-networks.com
*.khipu-networks.com
*.khipu-networks.com
gateway.khipu-networks.com
*.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
mailgw.khipu-networks.com
khipu-networks.com
radius.khipu-networks.com
khipu-networks.com
khipu-networks.com
khipu-sa-cppm.khipu-networks.com
khipu-networks.com
fdus-69.freshdesk.com
bcm6000.khipu-networks.com
wireless.khipu-networks.com
fdus-69.freshdesk.com
khipu-networks.com
clearpass.khipu-networks.com
khipu-networks.com
clearpass.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
mailgw.khipu-networks.com
*.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
khipu-networks.com
fdus-69.freshdesk.com
support.khipu-networks.com
support.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
*.khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
*.khipu-networks.com
khipu-networks.com
mailgw.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
mailgw.khipu-networks.com
support.khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
fdus-69.freshdesk.com
support.khipu-networks.com
khipu-networks.com
radius.khipu-networks.com
khipu-networks.com
mailgw.khipu-networks.com
khipu-networks.com
mgw.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
gateway.khipu-networks.com
khipu-networks.com
KHIPU-SA-7010.khipu-networks.com
mgw.khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
*.khipu-networks.com
mailgw2.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
khipu-networks.com
KHIPU-SA-7010.khipu-networks.com
*.khipu-networks.com
*.khipu-networks.com
*.khipu-networks.com
gateway.khipu-networks.com
*.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
mailgw.khipu-networks.com
khipu-networks.com
radius.khipu-networks.com
khipu-networks.com
khipu-networks.com
khipu-sa-cppm.khipu-networks.com
khipu-networks.com
fdus-69.freshdesk.com
bcm6000.khipu-networks.com
wireless.khipu-networks.com
fdus-69.freshdesk.com
khipu-networks.com
clearpass.khipu-networks.com
khipu-networks.com
clearpass.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
mailgw.khipu-networks.com
*.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
khipu-networks.com
fdus-69.freshdesk.com
support.khipu-networks.com
support.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
*.khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
*.khipu-networks.com
khipu-networks.com
mailgw.khipu-networks.com
khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
mailgw.khipu-networks.com
support.khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
fdus-69.freshdesk.com
support.khipu-networks.com
khipu-networks.com
radius.khipu-networks.com
khipu-networks.com
mailgw.khipu-networks.com
khipu-networks.com
mgw.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
gateway.khipu-networks.com
khipu-networks.com
KHIPU-SA-7010.khipu-networks.com
mgw.khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
khipu-networks.com
wireless.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
support.khipu-networks.com
khipu-networks.com
Certificate
The complete raw certificate details for radius.khipu-networks.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIQCBYAdlFdjpLuo5dgQ9XSWjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgxMjE0MDAwMDAwWhcNMjAxMjEzMTIwMDAwWjAkMSIwIAYDVQQDExlyYWRpdXMu a2hpcHUtbmV0d29ya3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxohm9W+z+iE3VJxF497+0XnzaUO9YQppSwMuCXOsV1wnVSMWvo9ZG30qYfr2 11UAZvx5jrl4DWq+ZdkA10w/ycOWxK31IxPaw3aZ8iC6dWTfVSE6ruSnX/BgfkNo D7A/d4pSm0F5B6odL8GaPwiygyW3PJ+/mTYq184qB0WkYUXV42OogsgIUCfrxwkE kJyp1y5jHUrO1zj3ptuQgFs19byulxUL36mj6zQCAVT4qqepZqMpEZyCt0wtSb73 9GLXZ29xaiiMbIp0tCxrvcv+ZsRc4ScXy7UUNJNCuQSnL7Pcvz86QuTNG9ag20VW ve7lQz22oVATLp1bTWSbuHXgmQIDAQABo4IBtDCCAbAwHwYDVR0jBBgwFoAUo8he ZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFEQDfsfJT3lZN5BKBeLkzRZn1/jo MCQGA1UdEQQdMBuCGXJhZGl1cy5raGlwdS1uZXR3b3Jrcy5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8EMzAx MC+gLaArhilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNy bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATBvBggrBgEFBQcBAQRjMGEw JAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcw AoYtaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0 MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAIpgovLxqYLDxHuf+nis9CkcxbMCG7t9J3Kv13focB0egVKRe4b9PXkgBmeV /GrZL850oJnuYlOTTolDKQUx4IUamuDzNUcWZ8rcrsdoXZGENLnqCCXROkJANE38 vCaM9CG+RWUTRe9J1kTPCGwgTCy8pQ97Bw0G95QndpOPwH3xF1wHcKdO/1LJ3tl5 vwRwuAl2Zy8FnMXIEteaX16ZFzyJbUXr8VXG7TUpCd3qor0V6qibm6Cfgox+kmmh pb8F2iusL6+QTBCrompnOTrOxmE3XIpiVMiLKxSZ2YDiLokVhZ0g/flPtBS3xOO+ 7dH4E9LdYzQyTyqivSysO/l6cnE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxohm9W+z+iE3VJxF497+ 0XnzaUO9YQppSwMuCXOsV1wnVSMWvo9ZG30qYfr211UAZvx5jrl4DWq+ZdkA10w/ ycOWxK31IxPaw3aZ8iC6dWTfVSE6ruSnX/BgfkNoD7A/d4pSm0F5B6odL8GaPwiy gyW3PJ+/mTYq184qB0WkYUXV42OogsgIUCfrxwkEkJyp1y5jHUrO1zj3ptuQgFs1 9byulxUL36mj6zQCAVT4qqepZqMpEZyCt0wtSb739GLXZ29xaiiMbIp0tCxrvcv+ ZsRc4ScXy7UUNJNCuQSnL7Pcvz86QuTNG9ag20VWve7lQz22oVATLp1bTWSbuHXg mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10748063871271659057464031012782985818 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'radius.khipu-networks.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25062446806405444903028565284917233917116689290121222198866682545939731685337240483119205962185875778779212449464260685547802350644504435775847227643536263724897091890502542380117084738079359729826367653382558015314650900493160050299757487172007359336932037080432398469510506737070855341751850529848704809228082917569249286232689565368876073219655285371059109815008282327844902589790163456331122814738292565257049825905454494576998517438120644211128498597742577784636989257664203800498527581838151949028670649223703468307906063418599181356496634838232561206450798450971033816244257130070947111878486975179273291554969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 44037ec7c94f795937904a05e2e4cd1667d7f8e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radius.khipu-networks.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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