buy.spectrummobile.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:5f:09:c3:70:be:da:23:aa:00:cf:c4:07:72:e1:28 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:5f:09:c3:70:be:da:23:aa:00:cf:c4:07:72:e1:28
Serial Number (int): 9798062198126390021113447669724012840
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4b:8c:a6:0c:e4:c0:7e:ff:26:8c:02:20:70:07:43:39:b5:5c:b0:4d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 7f:fd:eb:8c:12:9d:c7:7a:57:84:61:7d:4e:30:34:ce:5c:34:05:8a
Fingerprint (sha256): 13:fe:95:2e:6b:c9:b1:46:e5:28:da:11:55:28:ec:cf:3e:d5:08:54:86:db:31:3c:4f:24:32:98:42:54:ad:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate buy.spectrummobile.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buy.spectrummobile.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buy.spectrummobile.com
buy-nce.spectrummobile.com
buy-ncw.spectrummobile.com
spectrummobile.com
www.spectrummobile.com
buy-eft.spectrummobile.com
agent-eft.spectrummobile.com
origin-mobile.spectrum.com
ds-mobile.spectrum.com
mobile.spectrum.com
retail-mobile.spectrum.com
smbcp-mobile.spectrum.com
smbds-mobile.spectrum.com
mobile-akstage.spectrum.com

Other certificates including the domain name spectrummobile.com

(limited to 100 certificates)
mobileapi.spectrummobile.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
spectrumtvchoice.com
buy-uat.spectrummobile.com
spectrumtvchoice.com
buy-dev1.spectrummobile.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
spectrumtvchoice.com
qa01-entapi.spectrummobile.com
buy.spectrummobile.com
buy.spectrummobile.com
buy-uat.spectrummobile.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
sit.amdocs.spectrummobile.com
spectrum.com
spectrumtvchoice.com
dev2.amdocs.spectrummobile.com
buy.spectrummobile.com
dev1-entapi.spectrummobile.com
spectrum.com
uat1-entapi.spectrummobile.com
spectrumtvchoice.com
mobileapi-dev2.spectrummobile.com
spectrumtvchoice.com
retail.spectrummobile.com
uat1-entapi.spectrummobile.com
spectrum.com
spectrum.com
Hotfix-entapi.spectrummobile.com
spectrum.com
spectrum.com
buy.spectrummobile.com
mobileapi-sit.spectrummobile.com
uat2-entapi.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
retail.spectrummobile.com
uat2-entapi.spectrummobile.com
spectrumtvchoice.com
spectrumtvchoice.com
sit-entapi.spectrummobile.com
dev1-entapi.spectrummobile.com
mobileapi-sit.spectrummobile.com
dev.amdocs.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
spectrum.com
spectrumtvchoice.com
spectrumtvchoice.com
mobileapi-uat.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
dev.amdocs.spectrummobile.com
spectrumtvchoice.com
mobileapi.spectrummobile.com
spectrumtvchoice.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
mobileapi-dev2.spectrummobile.com
spectrumtvchoice.com
sit.amdocs.spectrummobile.com
spectrumtvchoice.com
spectrum.com
dev1-entapi.spectrummobile.com
spectrumtvchoice.com
qa1-entapi.spectrummobile.com
mobileapi.spectrummobile.com
buy.spectrummobile.com
buy.spectrummobile.com
spectrum.com
spectrumtvchoice.com
buy.spectrummobile.com
mobileapi.spectrummobile.com
spectrumtvchoice.com
official.spectrummobile.com
qa2-entapi.spectrummobile.com
spectrumtvchoice.com
uat2-entapi.spectrummobile.com
official.spectrummobile.com
spectrum.com
spectrum.com
spectrumtvchoice.com
spectrum.com
mobileapi-dev2.spectrummobile.com
dev2-entapi.spectrummobile.com
spectrumtvchoice.com
qa2-entapi.spectrummobile.com
spectrumtvchoice.com
buy.spectrummobile.com
mobileapi.spectrummobile.com
mobileapi-sit.spectrummobile.com
spectrumtvchoice.com
spectrum.com
smboaa.spectrummobile.com
buy.spectrummobile.com

Certificate

The complete raw certificate details for buy.spectrummobile.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHNWitORlVd41dcuJ6dw
u5tEe9orBGx9B61GSNGR90V4Bvrd4ASwSWa8Bps5iZ96rbNi3A8lu+/dK73RWGTK
NSDfeRz77ZoN0hqIBG6PN9bqvivnGKeBnSL1n8kXplXNJ1MMZ6JMyQ6Ef1L6AEIr
UQtjTTOtMEU3e3xHu2izRbI4IINhg6omMSiVUnejRjjxD9N9iFD5TUKjAznlnGoc
EWV0m4kKj/cT8cpGLWU1XubGMtNx95XYn1lQx8Uic92bqnXFsOWq9wRJvnGgIofW
4Vq11osvA5ZRzn/xSJ40u2iaC7DvMsfdq4zd/AbrWmLDl0LHdAh/kijsg3LEPS88
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9798062198126390021113447669724012840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buy.spectrummobile.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18740144450075201445558632721514192961128514246305747860192012641811288720823024758111505581584256577019307969470919998799775759135078215261285123120230840340131988301875743770545075197991301356781777979425635604964153735542198055384446148132384906619545010116630039291412144429261625377662104533377999574861317802809298443241548650911527293839365090666163286446628326297097883290957500821062927344388618867603585240637798387624760164869063656477179851164129933059540991572015272300512704464443608170474112341991727790741120616799860711005931804278981090117488325874765397095596966280397806344287570398809656071765051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b8ca60ce4c07eff268c022070074339b55cb04d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy-nce.spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy-ncw.spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy-eft.spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent-eft.spectrummobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mobile.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds-mobile.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-mobile.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smbcp-mobile.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smbds-mobile.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-akstage.spectrum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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