*.mobage.jp

- DeNA Co., Ltd. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:f4:8f:9f:2a:00:2b:30:c8:56:0d:4e:8e:9e:5f:4e was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DeNA Co., Ltd.

Organization: DeNA Co., Ltd.
State / Province: Tokyo
Locality: Shibuya-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:f4:8f:9f:2a:00:2b:30:c8:56:0d:4e:8e:9e:5f:4e
Serial Number (int): 13232885390396477128530718583152336718
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 40:31:06:c5:bf:7e:8c:7d:d1:b5:ca:a9:58:95:f3:29:76:fa:1d:c8
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 70:a3:7d:84:48:ef:93:59:b7:d3:cf:36:26:a8:2c:1d:75:bf:b8:22
Fingerprint (sha256): 21:1b:f8:61:da:c7:ed:ea:11:ed:f0:f7:19:ca:9a:d0:92:1c:dc:e0:f5:70:6d:9b:25:31:17:08:a0:f8:2b:fc

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.mobage.jp

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mobage.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mobage.jp
mobage.jp
*.sp.pf.mbga.jp
*.sb.sp.pf.mbga.jp
*.pf-img.mbga.jp
*.sp.mbga-platform.jp
ssl.sb.sp.mbga-platform.jp
sp.pf.mbga.jp
sb.sp.pf.mbga.jp
sb.api.mobage.jp
sb.mbga-platform.jp
*.app.sb.mbga-platform.jp
mbga-platform.jp
*.app.mbga-platform.jp
*.mbga-platform.jp

Other certificates including the domain name mobage.jp

(limited to 100 certificates)
*.sb-cdn.pf.mobage.jp
sb.squash.mobage.jp
*.sb-cdn.pf.mobage.jp
developers.mobage.jp
squash.mobage.jp
*.sb-cdn.pf.mobage.jp
stamp.mobage.jp
*.mobage.jp
granbluefantasy-campaign.mobage.jp
developers.mobage.jp
sb.api.mobage.jp
*.sb-cdn.pf.mobage.jp
*.mobage.jp
*.mobage.jp
*.mobage.jp
*.sb-cdn.pf.mobage.jp
*.sb-cdn.pf.mobage.jp
*.mobage.jp
tools.mobage.jp
*.sb-cdn.pf.mobage.jp
*.mobage.jp
*.dev.qa.pf.mobage.jp
tools.mobage.jp
granbluefantasy-campaign.mobage.jp
avatar.mobage.jp
avatar.mobage.jp
*.mobage.jp
tools.mobage.jp
sb.api.mobage.jp
*.mobage.jp
*.mobage.jp
stamp.mobage.jp
*.sb-cdn.pf.mobage.jp
developers.mobage.jp
*.mobage.jp
*.mobage.jp
*.sb-cdn.pf.mobage.jp
*.sb-cdn.pf.mobage.jp
dev-avatar.mobage.jp
*.cdn.pf.mobage.jp
*.mobage.jp
squash.mobage.jp
tools.mobage.jp
*.mobage.jp
*.cdn.pf.mobage.jp
stamp.mobage.jp
tools.mobage.jp
tools.mobage.jp
dev-avatar.mobage.jp
granbluefantasy-campaign.mobage.jp
avatar.mobage.jp
*.mobage.jp
static-granbluefantasy-campaign-origin.mobage.jp
*.sb-cdn.pf.mobage.jp
avatar.mobage.jp
*.sb-cdn.pf.mobage.jp
*.mobage.jp
sb.api.mobage.jp
sb.squash.mobage.jp
tools.mobage.jp
dev-avatar.mobage.jp
tools.mobage.jp
stamp.mobage.jp
developers.mobage.jp
*.cdn.pf.mobage.jp
tools.mobage.jp
stamp.mobage.jp
*.sb-cdn.pf.mobage.jp
sb.api.mobage.jp
avatar.mobage.jp
dev-avatar.mobage.jp
*.sb-cdn.pf.mobage.jp
developers.mobage.jp
stamp.mobage.jp
sb.api.mobage.jp
avatar.mobage.jp
*.mobage.jp
avatar.mobage.jp
*.mobage.jp
*.dev.qa.pf.mobage.jp
*.sb-cdn.pf.mobage.jp
dev-granbluefantasy-campaign.mobage.jp
*.sb-cdn.pf.mobage.jp
*.sb-cdn.pf.mobage.jp
*.dev.qa.pf.mobage.jp
tools.mobage.jp
avatar.mobage.jp
tools.mobage.jp
*.qa.pf.mobage.jp
*.mobage.jp
stamp.mobage.jp
sb.api.mobage.jp
stamp.mobage.jp
*.dev.qa.pf.mobage.jp
*.mobage.jp
granbluefantasy-campaign.mobage.jp
*.cdn.pf.mobage.jp
tools.mobage.jp
*.mobage.jp
*.mobage.jp

Certificate

The complete raw certificate details for *.mobage.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAI3Wx6cuenNEK7bwzNP
6lJaEsnyWNx6ZdDRHAwNlEQNrwOlkrzT24IKLWMLOabFuiKEIoYu13JXLylZaom7
LctMDolnkuNsgAnlmm7ZryGRXqRQ9XD/+ZlXKzutahc+dku0riwhJatiilvrVSDi
lp73F7Zjh96gMjvIDhrY/wE/NOW+SfDycZA0vtaaHfITFCrp7laI8PO7b2b0u4l5
qlvZBQhFLjkgGXKvORewY/ueL+ymidCfpSoZcxUFvzIi4dwIQmAMRihiWQRHWOCl
ZKF4Oekcd1xOBju25eiVZfu6IhQJUIVKa22kE4YlFvBF5tcKgLCjUTggbxTCj+bp
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13232885390396477128530718583152336718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shibuya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DeNA Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mobage.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21714081319940507144853373234086046364615763894538202355108636782328480389434997173205274871403623220941817447386416350939161317383256410555100519181863193645141608390545551054943984959030563521976089445985222664071618200464137080078621381147951754351963665284417648105962288919070645161793067701782167238414463394501370061158351882380780028578398298766324198968603641636655085938622341280069257276478053731319998069059211345908094422227616432884030602042891645180709633576346246095349247395405640763384259270113502645580468534459240292918715522826372184438469574832269671855802915543221749284393479923254867058420009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							403106c5bf7e8c7dd1b5caa95895f32976fa1dc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobage.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobage.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.pf.mbga.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sb.sp.pf.mbga.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pf-img.mbga.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.mbga-platform.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.sb.sp.mbga-platform.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pf.mbga.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.sp.pf.mbga.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.api.mobage.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.mbga-platform.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.sb.mbga-platform.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbga-platform.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.mbga-platform.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbga-platform.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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