rsgsecondary.telemovil.com.sv

- Telemovil El Salvador, SA de CV -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:ed:15:ec:5d:51:e6:3f:1b:9c:91:2c:e5:a4:23:6b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Telemovil El Salvador, SA de CV

Organization: Telemovil El Salvador, SA de CV
Organization unit: Seguridad Logica
Locality: San Salvador
Country: SV

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:ed:15:ec:5d:51:e6:3f:1b:9c:91:2c:e5:a4:23:6b
Serial Number (int): 18510982958005806760373232156383912811
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2a:15:9e:ba:16:76:5f:c8:55:02:78:f9:b9:7e:9b:39:c6:08:12:b1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c5:65:91:03:58:53:b4:47:3b:70:96:6e:a5:20:65:77:6a:59:e7:1c
Fingerprint (sha256): 9d:2c:18:1e:c9:7b:f2:b6:36:7a:d4:73:40:f5:43:b8:5b:65:28:89:77:6d:13:0f:42:6d:00:7d:04:2c:0c:a6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate rsgsecondary.telemovil.com.sv

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rsgsecondary.telemovil.com.sv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rsgsecondary.telemovil.com.sv

Other certificates including the domain name telemovil.com.sv

(limited to 100 certificates)
rsgprimary.telemovil.com.sv
rsgprimary.telemovil.com.sv
rsgprimary.telemovil.com.sv
samsgw.millicom.com
samsgw.millicom.com
samsgw.millicom.com
rsgsecondary.telemovil.com.sv
samsgw.millicom.com
samsgw.millicom.com
samsgw.telemovil.com.sv
rsgsecondary.telemovil.com.sv
samsgw.millicom.com

Certificate

The complete raw certificate details for rsgsecondary.telemovil.com.sv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIQDe0V7F1R5j8bnJEs5aQjazANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNjI2MDAwMDAwWhcN
MjAwOTAyMTIwMDAwWjCBkTELMAkGA1UEBhMCU1YxFTATBgNVBAcTDFNhbiBTYWx2
YWRvcjEoMCYGA1UEChMfVGVsZW1vdmlsIEVsIFNhbHZhZG9yLCBTQSBkZSBDVjEZ
MBcGA1UECxMQU2VndXJpZGFkIExvZ2ljYTEmMCQGA1UEAxMdcnNnc2Vjb25kYXJ5
LnRlbGVtb3ZpbC5jb20uc3YwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDjtJYNYUgHM3zSBCySDTvHnz81ASCW59Ifuaag85HXKtep/uH1Yr3cCrj6hyUt
PxgtZk5rUSjqTAbYDcyc0z0x59sEotmtQinC8LkgaQGBpBl8PnfiJVs+t5sjXcPU
+zBBd8VlP+9f6R6tRX0SuC7riU8d13tVVDl1TLOlOwtojyg4wbJ1qBtQ8DI3qRRR
i0SwwXE86/OxRB/4ZEvj8cLJbuvuwBeOmnXo9zS3ZPbjRoVT9hTa3ScBnrlZw2ap
pCaBpR/i2ksm+o8+4+3sDLinrh3UAf+XGiDjhSjIpFOfUIzZaBxSrpl6oS+tsyQV
nrCETGhE2ldbANuymfWnV2cgQdukpz+Fg5vHmow1+udNjk9YKg9HKim7gp2aM3ya
mqemtpsGU5dStb38blbiCh9hq9KuQ61lwfiepG1KlG6O7C86sKg4flgFnZzAkmyN
qPkBZlqiSHNkBXh1cMiLWXpdxFuHE4xV6hswlTsa/u20godykD14LmTgp0XGWALr
b8KUzYTNrCvBe/t65l/NovUBzCVXDmcHcfjRgQB6k0dx1EafnN0onchQfFcEl5gW
KaO3ywUun9XGNsyyL8HJCzO2QJx2a90p5QwxJ2EXVecLavBtKlo2GkpUc12P0H6O
j3YPhzFmyYIs7S8aSLQKQUEWESjIgQsmlqSsgG2CYDG3RwIDAQABo4IB+TCCAfUw
HwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFCoVnroW
dl/IVQJ4+bl+mznGCBKxMCgGA1UdEQQhMB+CHXJzZ3NlY29uZGFyeS50ZWxlbW92
aWwuY29tLnN2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQu
Y29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCow
KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM
AQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln
aWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j
b20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBALkeKmgTwFPg
yTp0Jekndl7ARmTv1jVZu27lbizjg8qbRHUknG5Ur6oNqGdX3tznAW16BjdHWhH7
Sdmg9+/aQBUV4JOWsruyvTqssRvyAuYXid1wxijoYA0eFbv6QVNuHVF32pGOjS4u
pvzhJr1VpYfHKVjOtu5Fww9q+A9lJkbKetek2sAc/vw3LT7a0KIrnxczF2VxklUT
p6deAXZ8Pcoq+clIndz9fvsttp2FvHzmm29IQHavEbXlJI8Cj5c5b2A0JtMMtODQ
NqaKUuGAKMFeiOOGepCrPlKisXjGcDoOjE+gWXSHQkdvTSw5zxQ9E4jVy5q5QGrs
IOZQcbqWCzw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18510982958005806760373232156383912811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Salvador'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telemovil El Salvador, SA de CV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seguridad Logica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rsgsecondary.telemovil.com.sv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 928957043993696908338557325796356478185782957006414421670842714899515774854197262230918000177213644214087432765564576632507764854588056197242822202965857114509875401050031526047951364533865535073218630378977331134424974222166096237422429255226365666773407674223803001178593111203512297191995158144820012089391176700899691104899680220167738908807493429147877678417199906152841994508135413880291270950366368769260490704454763175979176488547357673588646838297781529315713921442475160649269255180044841475346037271647006988520152395291177198890817312865328110597169225133289121177780082461548840898695494985877142957227329175094261413122760173444658839520106445633186869237360971236002558304721602586528154003380803383956222302877148620799868799910972069392831467212232490059622592703830652111268771498153513378290628752267772706274916621926023491234244777766047867134787325415106481653523466701958694970555995348781816802178084642776824624965415959634401634769426895126029093101534591118566348068964054751470236611528296426006554780120236756422077650598461616235590352964077090770151572321244742739672522395115944346698514253650689156810773418398471573203462911792764080137188715240273092148569649300792373014329855490682214605030274887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a159eba16765fc8550278f9b97e9b39c60812b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsgsecondary.telemovil.com.sv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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