watchdisneyfe.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:02:2b:23:66:e6:ed:69:92:0c:35:46:78:a9:70:6c was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=watchdisneyfe.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:02:2b:23:66:e6:ed:69:92:0c:35:46:78:a9:70:6cSerial Number (int): 17291223487366266112663572853721493612
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1a:0e:d3:62:63:a8:51:b6:9c:4d:60:70:9b:de:79:15:fc:2e:2f:a1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 9c:9f:d1:27:cf:be:ca:f6:d1:a0:9f:2c:05:9e:de:b6:79:ea:0f:20
Fingerprint (sha256): d4:00:92:8c:79:86:af:9b:13:78:e2:00:41:9a:c3:b0:fe:e0:55:dd:5f:41:69:3d:fd:a7:3a:66:1a:f6:b8:70
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate watchdisneyfe.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for watchdisneyfe.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
watchdisneyfe.com
*.watchdisneyfe.com
*.geo.hosted.watchdisneyfe.com
*.aws.hosted.watchdisneyfe.com
*.watchdisneyfe.com
*.geo.hosted.watchdisneyfe.com
*.aws.hosted.watchdisneyfe.com
Other certificates including the domain name watchdisneyfe.com
(limited to 100 certificates)
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
watchdisneyfe.com
Certificate
The complete raw certificate details for watchdisneyfe.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIQDQIrI2bm7WmSDDVGeKlwbDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MDYwMDAwMDBaFw0yMDA2MDYx MjAwMDBaMBwxGjAYBgNVBAMTEXdhdGNoZGlzbmV5ZmUuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58rswfcDShWRbvpU0AW5cQ6JNZ3V6hGMhAIG f3LSz+6+rKTms53JkqinevDSC3fqkpgQApqlyefQZ+I375SiiBsH9XvIogdYhTlI gogixu/vFS8eQWXDDNj9gbBcXBTH4mKdldPKiWWnDQmEI5HndmyOTn71VzRgmEaa oVIrNkIe9L/qc7zt7pOo1WtlIp0AFI+1+W4uuxqXOYb8SCwDbADOVPs7V8V9D3q6 PtbZA4Rgn2NFnlunxoGebWx91WJHwxeMY5wwRWufCTdsmV9ZXbjMKOqVe1f5n9ps gbTEr42wq8JGM0tXJO9w8TWLMuarPLQdgL3VDk4psIu8EQL5owIDAQABo4IB3zCC AdswHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFBoO 02JjqFG2nE1gcJveeRX8Li+hMHEGA1UdEQRqMGiCEXdhdGNoZGlzbmV5ZmUuY29t ghMqLndhdGNoZGlzbmV5ZmUuY29tgh4qLmdlby5ob3N0ZWQud2F0Y2hkaXNuZXlm ZS5jb22CHiouYXdzLmhvc3RlZC53YXRjaGRpc25leWZlLmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy bDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQA4Aw0gjWPM8AcQhMfOQiIYoUDuIujT7dgXHiOvBjvm drVoHP+nsNkKQOtM8XSDo2N8huiHNpqdGgYt9hiJgV9XdJmS8qWDm7fg2iXg9BhL V0rRYVGz43cIYr8js6Ieg8z64ZlgiHjD9gmMhelLw0czwYkCd5rIr1n3w6MMvX9v VipkiQcyHWaIZltUVT6sXWWi233vKUU28/9r+W0Az3a9uIWv34u+eATddY3Yq3yc a/IoFZLagkxPrDiYqx1DgBLlTOyREnI7YdOxXEhrHqJRfp063EucJIQHmm0LPovR 60WdiPqAdpOAqmpg5yFgIZWm2eWrnXFYBvsTTQ/0t5Ru -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58rswfcDShWRbvpU0AW5 cQ6JNZ3V6hGMhAIGf3LSz+6+rKTms53JkqinevDSC3fqkpgQApqlyefQZ+I375Si iBsH9XvIogdYhTlIgogixu/vFS8eQWXDDNj9gbBcXBTH4mKdldPKiWWnDQmEI5Hn dmyOTn71VzRgmEaaoVIrNkIe9L/qc7zt7pOo1WtlIp0AFI+1+W4uuxqXOYb8SCwD bADOVPs7V8V9D3q6PtbZA4Rgn2NFnlunxoGebWx91WJHwxeMY5wwRWufCTdsmV9Z XbjMKOqVe1f5n9psgbTEr42wq8JGM0tXJO9w8TWLMuarPLQdgL3VDk4psIu8EQL5 owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17291223487366266112663572853721493612 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watchdisneyfe.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29261114412644631664966967369093819640697167777148703296336291560726125558223848958144290845295580679956386620672682165260510781168174750019684727093252833438414234690280740042780820818901101700359880342882662178945163042043535123168164988198017099224115129418701943322391126536619902660793733519056710166400800811953437850533969995517019996278924736541823391769076192646509750367538777112608130651931474409724882548434152163590750396014461773470939870555974475616718706437661786904900340692776573212232709790743479824676218863100118758346054316432054199689386207344179008077663987528663976353011478012572287096781219 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a0ed36263a851b69c4d60709bde7915fc2e2fa1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchdisneyfe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchdisneyfe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.watchdisneyfe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.hosted.watchdisneyfe.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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