gmcard.com

- General Motors LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 01:8f:92:a8:60:59:d3:cf:9e:58:78:52:94:e3:89:41 was issued on by DigiCert Inc.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Motors LLC

Organization: General Motors LLC
State / Province: Michigan
Locality: Detroit
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8f:92:a8:60:59:d3:cf:9e:58:78:52:94:e3:89:41
Serial Number (int): 2074701018507987354083019348599081281
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6e:f1:95:eb:37:25:9e:a7:26:ce:f6:58:fb:7c:1a:d0:e0:55:9e:cf
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 8e:a0:3e:f3:7c:d4:14:2a:43:c0:ba:c9:25:43:68:4a:ca:1b:08:3e
Fingerprint (sha256): 5c:61:22:f2:c4:4e:82:18:34:f6:f1:7d:44:ee:f0:14:8a:78:50:4d:71:3f:14:31:e1:f8:2b:74:2b:30:68:61

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate gmcard.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gmcard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gmcard.com
www.gmcard.com
www.gmcbuypowercard.com
gmcbuypowercard.com
www.gmbuypower.com
gmbuypower.com
www.chevroletbuypowercard.com
chevroletbuypowercard.com
www.cadillacbuypowercard.com
cadillacbuypowercard.com
www.buickbuypowercard.com
buickbuypowercard.com
www.buypowercard.com
buypowercard.com
www.gmextendedfamily.com
gmextendedfamily.com
www.gmflexcard.com
gmflexcard.com
www.gmcardmemberservices.com
gmcardmemberservices.com
www.gmcheckcard.com
gmcheckcard.com
www.gmbuypowercard.com
gmbuypowercard.com

Other certificates including the domain name gmcard.com

(limited to 100 certificates)
buypowercard.com
loyalty-redirect-prdmx.ext.gm.com
loyalty-redirect-prdwx.ext.gm.com
card.drmp.gm.com
loyalty-redirect-prdmx.ext.gm.com
buypowercard.com
gmcard.com
gmcard.com
www.gmcard.com
gmcard.com
loyalty-redirect-prdmx.ext.gm.com
loyalty-redirect-prdmx.ext.gm.com
gmcard.com
card.drmp.gm.com
card.gm.com
loyalty-redirect-prdmx.ext.gm.com
www.gmcard.com
card.drmp.gm.com
www.gmcard.com
card.drmp.gm.com
gmcard.com
loyalty-redirect-prdmx.ext.gm.com
loyalty-redirect-prdmx.ext.gm.com
buypowercard.com
www.gmcard.com
loyalty-redirect-prdwx.ext.gm.com
www.gmcard.com
loyalty-redirect-prdwx.ext.gm.com

Certificate

The complete raw certificate details for gmcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPYBknF/BVQ+8ZJdwW08
gwuTrtYIAczCvxrN86/BbKt1C4STq/4F0BOETHSO8L9chlxoj9kZWyhElAIcRmUq
anhgy+Dq70JevhNDHcObd/fk/pi90RrE2o3S8b6K91+2HU+ytTjpI11BeLuiEQuU
3RGh5K2GQ2AUVlxZkuHR99CZqxplfl4cMLiZzFZig8zk9xi8r+dCs1CLlhziqv1Y
fugsA6okMnv9h14F0CQ2f0FM1gHfoNvesW4NKLSN3rYuH+DG1VK3LtcLoY57pQcC
gIksZaLYmxQOmbpS6GPLXZq9t3NI5nr4Np2+daHDXxWU/zL1nSSpGT7Rf1Ij1v8k
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2074701018507987354083019348599081281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Detroit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Motors LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gmcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22844205043209278559644859148429784904728427882722835387656055188446432240460193084683143412009231338882779483620419040172891401968953360316401460980071264116789813897416865193828485857786014093726681311452182484409910078244313351254947378205176013089274516813348862679709226672833850508737857965661977158158460564819740076437590481061052056316447012801407899475043819835372282251633281954884174153586623456860124665838208941840741213111259510010260401026970755614094452547755318278916231840554288596680081097337888827455955193838713105092361887363073829555337698270828370718866235357501920239381155838511846160016519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ef195eb37259ea726cef658fb7c1ad0e0559ecf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (540 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmbuypower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmbuypower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevroletbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevroletbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cadillacbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadillacbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buickbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buickbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmextendedfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmextendedfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmflexcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmflexcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcardmemberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcardmemberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcheckcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcheckcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmbuypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmbuypowercard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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