*.em.chuckschumer.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 08:59:4e:f2:52:9d:ae:f7:4a:ff:e6:40:7a:d9:9b:02 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.em.chuckschumer.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:59:4e:f2:52:9d:ae:f7:4a:ff:e6:40:7a:d9:9b:02Serial Number (int): 11097539613421738336980325361648245506
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 47:5b:d5:ec:59:71:32:35:40:5f:49:ba:42:56:14:0b:e1:b4:a5:35
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 38:7e:f5:db:92:66:06:70:f4:1a:4b:18:b8:60:e7:3e:df:4b:7d:8a
Fingerprint (sha256): f3:00:4d:3b:82:1d:0b:b5:00:b4:af:59:46:3f:98:90:9a:20:c0:bf:db:8c:7e:c0:6c:45:0a:16:af:75:82:a1
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.em.chuckschumer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.em.chuckschumer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.em.chuckschumer.com
Other certificates including the domain name chuckschumer.com
(limited to 100 certificates)
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
chuckschumer.com
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
secure.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
action.chuckschumer.com
sa350gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
chuckschumer.com
sa350gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
links.em.chuckschumer.com
chuckschumer.com
secure.chuckschumer.com
secure.chuckschumer.com
chuckschumer.com
secure.chuckschumer.com
events.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
links.em.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
secure.chuckschumer.com
sni.cloudflaressl.com
*.em.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
chuckschumer.com
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
secure.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
action.chuckschumer.com
sa350gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
chuckschumer.com
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
chuckschumer.com
sa350gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
links.em.chuckschumer.com
chuckschumer.com
secure.chuckschumer.com
secure.chuckschumer.com
chuckschumer.com
secure.chuckschumer.com
events.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
secure.chuckschumer.com
links.em.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sa350gl.wpc.edgecastcdn.net
secure.chuckschumer.com
sni.cloudflaressl.com
*.em.chuckschumer.com
sa8gl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
Certificate
The complete raw certificate details for *.em.chuckschumer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIQCFlO8lKdrvdK/+ZAetmbAjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTEyMjAwMDAwMFoXDTI0MTIyMTIzNTk1OVowIDEe MBwGA1UEAwwVKi5lbS5jaHVja3NjaHVtZXIuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAziaz1UAlTHKBlKm0vBzAV6neWy5PkZT6Fm7xoNPW4URA 3YTPgr2Li6MWqXduLBtwmHJ2iXJDRMiuPBsPRrGEdvYF9TJJtT28tNrQKButkbhB J+5PmYCH5KLoXlBP32YSvNLbX4BS6BFbi2uIWqeYu8BzvPqs5Lm+eCthjJknDi6s Z+3u//GCwdX6HRs/0+oOMaedBWEnYGML5X1d+7HjW3WqPGf9rIXiliDRePpAx/+O priwTjYmhMPdq/4fReIxqzcimt8V6/ZCawZp4Hv6UJ5fNGQxucgaLk62LxqjjlHb Fk5HroYMRxJceRWXheHLqDF2JHzro7Y600CldBFzewIDAQABo4IC7jCCAuowHwYD VR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFEdb1exZcTI1 QF9JukJWFAvhtKU1MCAGA1UdEQQZMBeCFSouZW0uY2h1Y2tzY2h1bWVyLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt MDIuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2 AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi/VanZoAAAQDAEcw RQIgL1hv18gYlf6K5GeYmcO5kLymHD8WiHu/wVf2iJyszs4CIQCn1v+TYCRLBzwn IY1VyAJ1sF/6DfMqrhLl4tK/agnT0gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABi/VanVEAAAQDAEgwRgIhAMBGD5DM08eUSFtUxekmjTRFemxm k8aDVy8f5UEj3JjJAiEAyd2+7M1x1/I+6lCXkDLJl3XvYgkMT+ikLCIqJoA53zYA dQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYv1Wp0mAAAEAwBG MEQCICt8th2TyD5aa1TU2Yho9CDX0kvN0pRMZjp4I2LyJkwaAiAsHgFFrn+O56OZ 1+yXlrBLyAiNQzlio9B0sgMoNIEw1zANBgkqhkiG9w0BAQsFAAOCAQEAgCtG6GIL oHysoVk3Gw3fzjPnl5gEtwg5mjpIhv8jPfjMeC05X46jlsJdtiJ2wydqLwKmfd5Z 60POs9k1n9Y5G1SOUMl1fJMXBj7KpBLH8B3KDUpHRzulmfjLSrI1Bs5py/nL4uFJ HJBb7no0jAccnEXA0J/bt50ilpj/KcWGq0ddBoovy8r335Fvzqj6LRyjHTkSZ8Q5 Lq1D+IKNzFEBd95J63TAIYv92sNHvI1XxPUJSXhmm/s8aNAlNxWRjESv2A9STkFk VsWoEqdW0m3UiF9FchFBSPL0b8d8HOpKF3Z376ccFaE/70AV4uuIRN3yGRHfYi0W 8NvsJRguGb2F1g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziaz1UAlTHKBlKm0vBzA V6neWy5PkZT6Fm7xoNPW4URA3YTPgr2Li6MWqXduLBtwmHJ2iXJDRMiuPBsPRrGE dvYF9TJJtT28tNrQKButkbhBJ+5PmYCH5KLoXlBP32YSvNLbX4BS6BFbi2uIWqeY u8BzvPqs5Lm+eCthjJknDi6sZ+3u//GCwdX6HRs/0+oOMaedBWEnYGML5X1d+7Hj W3WqPGf9rIXiliDRePpAx/+OpriwTjYmhMPdq/4fReIxqzcimt8V6/ZCawZp4Hv6 UJ5fNGQxucgaLk62LxqjjlHbFk5HroYMRxJceRWXheHLqDF2JHzro7Y600CldBFz ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11097539613421738336980325361648245506 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.em.chuckschumer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26024175723598189493111985422254954922405680845187245493682839837961146910936078098866270171785635404470403753699819705535513525712475563486308762187432814833574586786148259660974556430554341180486221708351341949092647196826148162304821645743865723110109916856599045947722257015587361275181886442208440918920125984919115662368438831312040833006357966134517786349263071771938309721503383588902435514552488720875914191570698382589338697580611377595882858878027703503657348317400279400288769455239976748482160497968964326768343643679956709967707124722289471478575914633884332223991464366583710012577813451448261696123771 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 475bd5ec59713235405f49ba4256140be1b4a535 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.em.chuckschumer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00802b46e8620ba07caca159371b0ddfce33e7979804b708399a3a4886ff233df8cc782d395f8ea396c25db62276c3276a2f02a67dde59eb43ceb3d9359fd6391b548e50c9757c9317063ecaa412c7f01dca0d4a47473ba599f8cb4ab23506ce69cbf9cbe2e1491c905bee7a348c071c9c45c0d09fdbb79d229698ff29c586ab475d068a2fcbcaf7df916fcea8fa2d1ca31d391267c4392ead43f8828dcc510177de49eb74c0218bfddac347bc8d57c4f5094978669bfb3c68d0253715918c44afd80f524e416456c5a812a756d26dd4885f4572114148f2f46fc77c1cea4a177677efa71c15a13fef4015e2eb8844ddf21911df622d16f0dbec25182e19bd85d6