*.phyrem.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:44:0a:a8:e9:6c:76:4a:07:b9:89:ab:f3:2c:6b:f9 was issued on by Amazon.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.phyrem.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:44:0a:a8:e9:6c:76:4a:07:b9:89:ab:f3:2c:6b:f9Serial Number (int): 8328660367758332311028319736918993913
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 6c:9c:4e:68:51:4a:37:a0:56:44:90:d1:03:a3:50:0f:61:92:c8:52
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 97:91:a1:92:d3:b3:28:04:81:44:b6:9f:2c:5e:8a:72:41:9c:55:72
Fingerprint (sha256): e0:9d:8e:a3:b4:df:85:19:53:0c:a1:cf:77:37:a5:1e:c7:8f:47:11:69:6c:4e:79:29:37:69:e2:bf:1f:53:d5
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.phyrem.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.phyrem.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.phyrem.com
nfo.one
nearbynotifications.org
iotinflux.com
phyrem.com
*.nfo.one
*.nearbynotifications.org
*.iotinflux.com
nfo.one
nearbynotifications.org
iotinflux.com
phyrem.com
*.nfo.one
*.nearbynotifications.org
*.iotinflux.com
Other certificates including the domain name phyrem.com
(limited to 100 certificates)
assist.smargasy.com
nearbynotifications.org
iotinflux.com
*.phyrem.com
support-intl-paydev.shijigroup.com
*.phyrem.com
support.phyrem.com
assist.lightningip.com.au
systemsupport.bickertmanagement.com
support.flip.training
assist.amptelecom.com
support.flip.training
support.shepherd.nz
support.flip.training
assist.ordino.at
nearbynotifications.org
*.phyrem.com
integrationsbase.featureit.co.nz
support.flip.training
iotinflux.com
remote.propelcloud.net
assist.lightningip.com.au
nfo.one
*.phyrem.com
assist.logicalpros.com
iotinflux.com
iotinflux.com
msft-support.emboldhealth.com
assist.starmaninc.com
assist.lightningip.com.au
support-intl-paydev.shijigroup.com
assist.lightningip.com.au
nearbynotifications.org
iotinflux.com
assist.lightningip.com.au
support.flip.training
support.flip.training
support.vabdesigns.com
support.hlfirstaid.com
*.phyrem.com
helpdesk.tapjets.com
support.rentgt.com
assist.netsuccessusa.com
*.phyrem.com
nfo.one
support.flip.training
support.flip.training
abas.outth.ink
support.collexasoft.com
support.flip.training
portal.spc-impact.com
phyrem.com
support.flip.training
support-intl-paydev.shijigroup.com
assist.lightningip.com.au
phyrem.com
*.phyrem.com
*.phyrem.com
assist.integralresearch.com
phyrem.com
phyrem.com
nfo.one
assist.lightningip.com.au
support.flip.training
nfo.one
support-intl-paydev.shijigroup.com
assist.lightningip.com.au
nearbynotifications.org
iotinflux.com
*.phyrem.com
support-intl-paydev.shijigroup.com
*.phyrem.com
support.phyrem.com
assist.lightningip.com.au
systemsupport.bickertmanagement.com
support.flip.training
assist.amptelecom.com
support.flip.training
support.shepherd.nz
support.flip.training
assist.ordino.at
nearbynotifications.org
*.phyrem.com
integrationsbase.featureit.co.nz
support.flip.training
iotinflux.com
remote.propelcloud.net
assist.lightningip.com.au
nfo.one
*.phyrem.com
assist.logicalpros.com
iotinflux.com
iotinflux.com
msft-support.emboldhealth.com
assist.starmaninc.com
assist.lightningip.com.au
support-intl-paydev.shijigroup.com
assist.lightningip.com.au
nearbynotifications.org
iotinflux.com
assist.lightningip.com.au
support.flip.training
support.flip.training
support.vabdesigns.com
support.hlfirstaid.com
*.phyrem.com
helpdesk.tapjets.com
support.rentgt.com
assist.netsuccessusa.com
*.phyrem.com
nfo.one
support.flip.training
support.flip.training
abas.outth.ink
support.collexasoft.com
support.flip.training
portal.spc-impact.com
phyrem.com
support.flip.training
support-intl-paydev.shijigroup.com
assist.lightningip.com.au
phyrem.com
*.phyrem.com
*.phyrem.com
assist.integralresearch.com
phyrem.com
phyrem.com
nfo.one
assist.lightningip.com.au
support.flip.training
nfo.one
support-intl-paydev.shijigroup.com
assist.lightningip.com.au
Certificate
The complete raw certificate details for *.phyrem.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIQBkQKqOlsdkoHuYmr8yxr+TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MTkwMDAwMDBaFw0yMDA5MTkx MjAwMDBaMBcxFTATBgNVBAMMDCoucGh5cmVtLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKrzpJNE8X56YlAT82EPyNG1tFds1zUSbn8Jjt4xEtPc KmhBSplBHSdmplNmZ/McqLv3/oWhYvTAGPLn6FjDsYw6JietH9xkWwFJ1PD+XmVY leXBG5xSM4YBMMdUNTWI0fwFctXNfis8URXbs5FUe/4tX3higFZYrHxbLnjcVP9l I3au6UsNn3JdjPzz+QOif6WXjw3rnGmn0RKZLwwJBezRWbGlQUK4pb1ch5VY93tl 0hbNeT2NAod/k7CRh7ER79JOQL9G2KfUZBr2ixfUHLK4PfSDkmeWtcZHXgNuvZLE 8VFbTgwkAND62dgMbNCdlS2O7j9G1O2ASQAegNboh6ECAwEAAaOCAvEwggLtMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBRsnE5oUUo3 oFZEkNEDo1APYZLIUjCBjQYDVR0RBIGFMIGCggwqLnBoeXJlbS5jb22CB25mby5v bmWCF25lYXJieW5vdGlmaWNhdGlvbnMub3Jngg1pb3RpbmZsdXguY29tggpwaHly ZW0uY29tggkqLm5mby5vbmWCGSoubmVhcmJ5bm90aWZpY2F0aW9ucy5vcmeCDyou aW90aW5mbHV4LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwB AjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAA MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5 G9+443fNDsgN3BAAAAFsqTfDlAAABAMASDBGAiEAlAhqQlOB+0fzpYkW3nkrOMR8 GWD/WWki93Ia5AmKoK8CIQCI4Ga7MaTEXYiOsW+4qvLEqpXWT0aJwRYT16vF1D/x PgB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbKk3w9oAAAQD AEgwRgIhAMuZCpdIQ+YZkOprhD6KOZ3+Y8fIflu+10ma3sp3PJ6AAiEAo8vQqtXz ZGBr1JUWAt6SZ8wTdr9c4WTrEYUQgUwHAR4wDQYJKoZIhvcNAQELBQADggEBADH/ hIo+f0aHJmDeBXR42/HHu9oXBfGr1T6Z7gLuBj2AMg+LgxwnrTpQ6aVztVDUI1OY WUaBFhV6YHfaxzpR9W4nQhbPF47sPJgCjLIMR/VPDNovj3KK+2Mct++aJMAxiB1/ 3Vv2PXyDFbEfS5NlUHxo47lH/FUgoHdCUEftnq6IZJ0Pz40nWehl7ZNnuYEZs4rr jE433KrBOot94nRrbaQqXMUHsJZvIZjann6tPZjisHiQ4LiB/cjeU+mEmwnQHP7A tGoERkwaUGbxBfBAot627ZT0ALe6T4v2gxockj+7ZHt7GzjZg2nfuj4dH0iQuba8 geneLv+xAzgHBy6dV7g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvOkk0TxfnpiUBPzYQ/I 0bW0V2zXNRJufwmO3jES09wqaEFKmUEdJ2amU2Zn8xyou/f+haFi9MAY8ufoWMOx jDomJ60f3GRbAUnU8P5eZViV5cEbnFIzhgEwx1Q1NYjR/AVy1c1+KzxRFduzkVR7 /i1feGKAVlisfFsueNxU/2Ujdq7pSw2fcl2M/PP5A6J/pZePDeucaafREpkvDAkF 7NFZsaVBQrilvVyHlVj3e2XSFs15PY0Ch3+TsJGHsRHv0k5Av0bYp9RkGvaLF9Qc srg99IOSZ5a1xkdeA269ksTxUVtODCQA0PrZ2Axs0J2VLY7uP0bU7YBJAB6A1uiH oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8328660367758332311028319736918993913 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.phyrem.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21580656622344991920392464565097894678656677642542606731563355116123807235816148336000821920772582921905784848947329526988489805737042941095622302293721340195424847157592472958335748440625752050109046320087324001209868301734804433169359584217296371558579883644160943388021964911249833872187223416145914043444193912759028627186927666941024498253131768713099811361927785056418051422356433468108261715949986455515257701329575666317354296206535679337359794341315398296193418543316227791695915151934635624356783540414186691016169457013304346835088498685153548348644204438727631113433662318722519250329953911928267651712929 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6c9c4e68514a37a0564490d103a3500f6192c852 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phyrem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfo.one' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nearbynotifications.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotinflux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyrem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfo.one' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nearbynotifications.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iotinflux.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ca937c394000004030048304602210094086a425381fb47f3a58916de792b38c47c1960ff596922f7721ae4098aa0af02210088e066bb31a4c45d888eb16fb8aaf2c4aa95d64f4689c11613d7abc5d43ff13e0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ca937c3da0000040300483046022100cb990a974843e61990ea6b843e8a399dfe63c7c87e5bbed7499adeca773c9e80022100a3cbd0aad5f364606bd4951602de9267cc1376bf5ce164eb118510814c07011e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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