dev-spectrum.net
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:bf:55:61:61:14:94:52:37:e1:a3:f3:ac:0e:68:43 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dev-spectrum.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:bf:55:61:61:14:94:52:37:e1:a3:f3:ac:0e:68:43Serial Number (int): 19602652360961973469291328543206041667
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d7:7a:44:f1:ff:82:8d:2a:c1:8e:4b:54:2a:84:40:f5:a0:8b:a4:6d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 0d:83:8c:d3:36:1a:f4:ed:5f:ca:1a:41:fb:41:25:ec:e1:14:66:8a
Fingerprint (sha256): f2:25:da:f7:83:74:46:3f:1b:2f:93:58:5d:64:62:1d:81:8a:9c:fd:4a:7f:2d:48:a7:a1:d1:f8:d2:de:29:86
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate dev-spectrum.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev-spectrum.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev-spectrum.net
Other certificates including the domain name dev-spectrum.net
(limited to 100 certificates)
*.portals.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
atvchtr.dev-spectrum.net
*.dev-spectrum.net
advisor2.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
*.shared.dev-spectrum.net
api.engprod-spectrum.net
pci.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
*.shared.dev-spectrum.net
*.dev-spectrum.net
api.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
drupal-cms.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
pcidev.dev-spectrum.net
pci.portals.dev-spectrum.net
*.testing.portals.dev-spectrum.net
*.dev-spectrum.net
testing.portals.dev-spectrum.net
*.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
api.engprod-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
ssltest1.testing.portals.dev-spectrum.net
drupal-cms.spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
*.portals.dev-spectrum.net
id.dev-spectrum.net
engprod-spectrum.net
pci.portals.dev-spectrum.net
hoh.engprod-spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
api.engprod-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
advisor2.engprod-spectrum.net
*.dev-spectrum.net
*.portals.dev-spectrum.net
ssltest2.testing.portals.dev-spectrum.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
troubleshooting.engprod-spectrum.net
api.engprod-spectrum.net
dev-spectrum.net
pci-lbf.dev-spectrum.net
tdcs.engprod-spectrum.net
*.dev-spectrum.net
*.dev-spectrum.net
dev-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
drupal-cms.prd.spectrum.net
*.eos.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
atvchtr.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
atvchtr.dev-spectrum.net
*.dev-spectrum.net
advisor2.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
*.shared.dev-spectrum.net
api.engprod-spectrum.net
pci.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
*.shared.dev-spectrum.net
*.dev-spectrum.net
api.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
drupal-cms.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
pcidev.dev-spectrum.net
pci.portals.dev-spectrum.net
*.testing.portals.dev-spectrum.net
*.dev-spectrum.net
testing.portals.dev-spectrum.net
*.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
api.engprod-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
ssltest1.testing.portals.dev-spectrum.net
drupal-cms.spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
*.portals.dev-spectrum.net
id.dev-spectrum.net
engprod-spectrum.net
pci.portals.dev-spectrum.net
hoh.engprod-spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
api.engprod-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
advisor2.engprod-spectrum.net
*.dev-spectrum.net
*.portals.dev-spectrum.net
ssltest2.testing.portals.dev-spectrum.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
troubleshooting.engprod-spectrum.net
api.engprod-spectrum.net
dev-spectrum.net
pci-lbf.dev-spectrum.net
tdcs.engprod-spectrum.net
*.dev-spectrum.net
*.dev-spectrum.net
dev-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
drupal-cms.prd.spectrum.net
*.eos.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
atvchtr.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
www.public.dev-spectrum.net
Certificate
The complete raw certificate details for dev-spectrum.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdjCCA16gAwIBAgIQDr9VYWEUlFI34aPzrA5oQzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMTEwMDAwMDBaFw0yMDA0MTEx MjAwMDBaMBsxGTAXBgNVBAMTEGRldi1zcGVjdHJ1bS5uZXQwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDGhwTKcQ7eweR4Chmy1bz5ZnRcAlUWZqSUC51S 4yyxkEZD+Co1yUqDG+UmOZ/tAXSJApkDbCJXS6fCcV2jEUNPUSil5OBQqm9xFqzO 3YbHLI4f0JBrdIdlWSZqcn81dk11AeJ1UvEZd74qZz+7cYPCubjo6tZG4vBWXSj1 WxBss0ZTsaqi1E5VoGc2OlTFkQmqow8Pm3Z5MBPe9ayn1aWuGXe40gH6DZR4WPMt x8k444HjDMmilWlII+SUEi0HJQYXjO9ROCvvh3mCY7dB4vKGL+TmCwwSQztcLMEc lqI2yx1MItSZvtSgbDCEGYhYQf9MXz5UBvxxP5aYv0sTNOdhAgMBAAGjggGJMIIB hTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU13pE 8f+CjSrBjktUKoRA9aCLpG0wGwYDVR0RBBQwEoIQZGV2LXNwZWN0cnVtLm5ldDAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn8e//k+MugwvEutFNinaqtpBRa2Oa eQXjeNrOqiIkHlLOpTamsEsKIzi/5k2A4isQ6/6J9XScSfcGGAWoao05ZmH7yxAU 61i/blZUvZ2DE2GusrPRmAfBjzNNnJMU/R4ZKuf6x8uEsb1Kl4JiQIDN6ZSza5xI w5i11jFIyvUJCDTyKwsQpwbqlh9zIFpMx4qRG6VCZRBLQz5vGcWkVa/1UC9CxRpN MdFfnX62xPJdaqbI3xq0sZSYVzBit6um7MnfLY0kS+i58gEzUwib6sdaYcMqVjkR xGZZ5IQ1/z+wwsAPhQpWIszcvayYOOmk+GyVjMrLSTH2W3dOJwt88sK2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxocEynEO3sHkeAoZstW8 +WZ0XAJVFmaklAudUuMssZBGQ/gqNclKgxvlJjmf7QF0iQKZA2wiV0unwnFdoxFD T1EopeTgUKpvcRaszt2GxyyOH9CQa3SHZVkmanJ/NXZNdQHidVLxGXe+Kmc/u3GD wrm46OrWRuLwVl0o9VsQbLNGU7GqotROVaBnNjpUxZEJqqMPD5t2eTAT3vWsp9Wl rhl3uNIB+g2UeFjzLcfJOOOB4wzJopVpSCPklBItByUGF4zvUTgr74d5gmO3QeLy hi/k5gsMEkM7XCzBHJaiNssdTCLUmb7UoGwwhBmIWEH/TF8+VAb8cT+WmL9LEzTn YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19602652360961973469291328543206041667 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-spectrum.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25061764592638383845645382559173266781245710683772936767367084533085428702630319489988330823777606211374628487851354320661344927538208191783743202694546196902853699373791275891635246861601965386715494449486137503362358062343063045788160142617077372966481561834614108817977103802603321384681525276797274992186345717969843099868497902153973328428114363738858140564031522058356304307488790066165898800835474309763278353911978823779827181752569185466741306166434689753784605026080058208550120160963337868108431501314569618783626473084740355349839778773395946471219763993813310835767606424579451574335738780038189485975393 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d77a44f1ff828d2ac18e4b542a8440f5a08ba46d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-spectrum.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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