corp.roblox.com

- Roblox Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:9f:94:87:d2:8a:a4:40:42:34:1f:d8:96:0a:15:ce was issued on by DigiCert Inc.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Roblox Corporation

Organization: Roblox Corporation
State / Province: California
Locality: San Mateo
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:94:87:d2:8a:a4:40:42:34:1f:d8:96:0a:15:ce
Serial Number (int): 6145499741229440436514463997013661134
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a3:2b:90:3f:fc:0b:43:c6:a1:22:17:44:d3:17:64:05:99:67:97:84
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 1a:8f:6f:6f:2f:85:28:97:22:8b:59:db:46:18:21:8b:5f:c1:c1:02
Fingerprint (sha256): ff:f2:56:d9:4f:2b:42:fb:56:91:cd:c7:01:34:3d:5a:c9:dd:35:dd:3e:e2:a5:c5:ab:f0:6f:cc:65:53:70:11

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate corp.roblox.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corp.roblox.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corp.roblox.com
altdevforum.roblox.com
bash.video
blog.roblox.com
byfron.com
careers.roblox.com
clientsettingscdn.roblox.com
corporate.roblox.com
devforum.roblox.com
education.roblox.com
getsway.app
hamul.gg
headshotz.ai
jidomaps.com
jobs.roblox.com
nakama.us
nakamalabs.com
research.roblox.com
techblog.roblox.com
tripleplay.ai
tym.so
wiki.roblox.com
www.bash.video
www.byfron.com
www.getsway.app
www.hamul.gg
www.headshotz.ai
www.jidomaps.com
www.tym.so

Other certificates including the domain name roblox.com

(limited to 100 certificates)
vpn.cn.roblox.com
roblox.com
devforum.roblox.com
devforum.roblox.com
*.sitetest3.roblox.com
*.rlb.roblox.com
*.eightfold.ai
roblox.com
vpn.roblox.com
*.eightfold.ai
*.eightfold.ai
developer.roblox.com
*.eightfold.ai
datagrail.roblox.com
survey.roblox.com
*.help.roblox.com
devforum.roblox.com
rightsportal.roblox.com
status.roblox.com
advertise.roblox.com
corp.roblox.com
create.roblox.com
*.roblox.com
vpn.cn.roblox.com
email.recruiting.roblox.com
jira.roblox.com
*.eightfold.ai
ir.roblox.com
jira.roblox.com
careers.roblox.com
create.roblox.com
roblox.com
datagrail.roblox.com
*.roblox.com
ir.roblox.com
developer.roblox.com
*.roblox.com
affiliates.roblox.com
*.roblox.com
rightsportal.roblox.com
devforum.roblox.com
vpn.cn.roblox.com
developer.roblox.com
create.roblox.com
fonts.roblox.com
email.recruiting.roblox.com
ir.roblox.com
developer.roblox.com
*.help.roblox.com
*.eightfold.ai
authorize.roblox.com
roblox.com
*.eightfold.ai
*.help.roblox.com
roblox.com
*.roblox.com
roblox.com
talent.roblox.com
services.gametest.roblox.com
devrel.roblox.com
api.roblox.com
vpn.cn.roblox.com
*.roblox.com
altdevforum.roblox.com
upload.crashes.roblox.com
*.roblox.com
corp.roblox.com
careers.roblox.com
talent.roblox.com
jira.roblox.com
*.gametest1.roblox.com
*.gametest2.roblox.com
roblox.com
uiblox.roblox.com
uiblox.roblox.com
*.eightfold.ai
events.roblox.com
authorize.roblox.com
*.eightfold.ai
education.roblox.com
developer.roblox.com
education.roblox.com
status.roblox.com
socialauth.roblox.com
corp.roblox.com
roblox.com
email.recruiting.roblox.com
*.api.gametest4.roblox.com
*.eightfold.ai
devforum.roblox.com
roblox.com
uiblox.roblox.com
prod.docsiteassets.roblox.com
devrel.roblox.com
devforum.roblox.com
roblox.com
*.roblox.com
events.roblox.com
*.api.roblox.com
developer.roblox.com

Certificate

The complete raw certificate details for corp.roblox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDSesxm92mrM6leEUZ6ACw79n5cZT
Txf90Kh/pKIynAwg1JUCYS/16BKZ18S1cMjiTqWrUL1UiXC93KL15HfSVg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6145499741229440436514463997013661134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Mateo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roblox Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corp.roblox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00040d27acc66f769ab33a95e11467a002c3bf67e5c6534f17fdd0a87fa4a2329c0c20d49502612ff5e81299d7c4b570c8e24ea5ab50bd548970bddca2f5e477d256
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32b903ffc0b43c6a1221744d317640599679784
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altdevforum.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bash.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byfron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsettingscdn.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devforum.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsway.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamul.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headshotz.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jidomaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakama.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakamalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techblog.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripleplay.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tym.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bash.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byfron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsway.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamul.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headshotz.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jidomaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tym.so'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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