*.balibola.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:5c:7d:27:55:00:b4:e5:92:7e:bc:e2:1d:3f:af:0c was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.balibola.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:5c:7d:27:55:00:b4:e5:92:7e:bc:e2:1d:3f:af:0c
Serial Number (int): 12443281690455321608712951272610705164
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:7f:47:f8:db:c9:51:64:d3:a3:9a:68:09:a4:b3:85:bc:d1:a6:83
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0a:27:03:57:6a:62:9a:f8:86:9f:72:5a:12:7a:4b:a3:10:50:34:6b
Fingerprint (sha256): 57:0e:d0:ab:28:85:b1:41:a6:d3:04:40:a2:1e:42:c4:a6:30:b9:4d:8b:a1:92:8c:cf:ca:13:f1:dc:9a:94:6d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.balibola.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.balibola.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.balibola.com
*.1bet2uthai.com
1bet2u.asia
*.mynew1b.com
*.1bet2u.asia
mynew1b.com

Other certificates including the domain name balibola.com

(limited to 100 certificates)
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
*.1bet2uthai.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
*.balibola.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
*.1b2u.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
*.1bet2uthai.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
*.new1b.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni90131.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
sni164537.cloudflaressl.com
*.balibola.com
sni164537.cloudflaressl.com

Certificate

The complete raw certificate details for *.balibola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIQCVx9J1UAtOWSfrziHT+vDDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDMxMTAwMDAwMFoXDTI0MDQwOTIzNTk1OVowGTEX
MBUGA1UEAwwOKi5iYWxpYm9sYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC9i+yOWWBokVnT95rTydg3mih78a2V/wm89ALqksnEYEe5BRCqpvW7
7mhtxbpcpvXkt0Fz1e52YG7HLaaXACX0+057SzK2H3F4lojST4rfa7ihx+AGAcBA
c48gznf6ZSTjRXhMpcEE9l0xQZsOGN8Y2fIgRmXoPteXcWXmtcqMTtzetStuJ93W
hegsqtkj2lsCwQgC9oBnT37agBTnMkkkaIweS5BSP91zU0W2omaw7BMbjJTuc9ze
10D2LRfVKEcWvi/G3tOgGLPp/7XjE53D1zIUT4du3SzZHw6GGLdLnActIUrc8lYz
rmEKLwuDJnZ02gioakXYBvKWgHXnI/zbAgMBAAGjggMwMIIDLDAfBgNVHSMEGDAW
gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUeH9H+NvJUWTTo5poCaSz
hbzRpoMwYwYDVR0RBFwwWoIOKi5iYWxpYm9sYS5jb22CECouMWJldDJ1dGhhaS5j
b22CCzFiZXQydS5hc2lhgg0qLm15bmV3MWIuY29tgg0qLjFiZXQydS5hc2lhggtt
eW5ldzFiLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1h
em9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1Bggr
BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpv
bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250
cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQC
BIIBbQSCAWkBZwB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
hs589OMAAAQDAEYwRAIgB5q4HWWFhHX5aU9Vj6gkG1N9qRTIToQAjSxPq5/0piEC
IFrHmKSBRbuoNizwznYQEda057R3Asi2jfyDkjIiHBJVAHYAc9meiRtMlnigIH1H
neayxhzQUV5xGSqMa4AQesF3crUAAAGGznz09wAABAMARzBFAiEA3kyDPY3G6Cfs
ydQ0ZNoYq5nNdjM2KmJW1+EAeFyhk8ECIAfHPi70uMrgVsq62dqISibSwOAH4sLH
byknAdYLTe7lAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGG
znz0vQAABAMARzBFAiAkROckBPDSdAHloNnbomI2KtQ24LdbIpZlKtbeDq7kmQIh
ALC5XJUG8MNMzPNYGJJjIrv8ll1k9i4CheRHt8W/XfaVMA0GCSqGSIb3DQEBCwUA
A4IBAQA0kynk5zXkb4pZNdgC+m6BE8BggkpyVpi82NW5dXmjDs2CKa0lA+ULuOhh
BJ429nxj8F31Ldl9xebytPXHH89R+aJVcI2RFr/drTl0wZjOdzu2m6jylPvxnJoK
IXQ2f/shzflphCb52OkK2G577Vk4Xym4F0JBTIDabYORNT9+3fapklbUu2Mke7S2
GACnGnhvJl0j/lT0mpPQlFYNKTVBrABOA0wgSJ0lNAk/FFlHB1nf2FW3l//5K4v/
PvDrAJEEN4lvHsrt+dKSJCr8P6llS3+3FofYwN3TJmi6iSxaUzsRhxD9POXQNZ6G
ogHCZf4nD76Btp99D67lY4eKYMkX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYvsjllgaJFZ0/ea08nY
N5ooe/Gtlf8JvPQC6pLJxGBHuQUQqqb1u+5obcW6XKb15LdBc9XudmBuxy2mlwAl
9PtOe0syth9xeJaI0k+K32u4ocfgBgHAQHOPIM53+mUk40V4TKXBBPZdMUGbDhjf
GNnyIEZl6D7Xl3Fl5rXKjE7c3rUrbifd1oXoLKrZI9pbAsEIAvaAZ09+2oAU5zJJ
JGiMHkuQUj/dc1NFtqJmsOwTG4yU7nPc3tdA9i0X1ShHFr4vxt7ToBiz6f+14xOd
w9cyFE+Hbt0s2R8Ohhi3S5wHLSFK3PJWM65hCi8LgyZ2dNoIqGpF2AbyloB15yP8
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12443281690455321608712951272610705164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.balibola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23928038757830305239335931173802961492177370134694009341585110761353052460777784283073823363095428878412595589877741017898282371900131400994627411210204169070606439955283523887568285476605277702403195788205305276377448322076499019484821238057081774189796694863122141598256989678948962411721477080253747063394623377227653944601901685936333689943741954236168176358440722649554845690837353166680627427154080351803369470589580975446733169515077133496142594623534948995557236760574525851234158403033025015018919729862513905748002634828456188078139589724575614103470557367727100303875992990591695669224697279966322318638299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							787f47f8dbc95164d3a39a6809a4b385bcd1a683
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balibola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1bet2uthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1bet2u.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynew1b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1bet2u.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynew1b.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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