*.689041cebb754d03be54718997c505d1.plex.direct

- Plex, Inc. -

Issued by Plex Devices High Assurance CA2

About this certificate

This digital certificate with serial number 0d:3e:e9:42:67:76:6a:63:a0:9a:c3:df:8f:86:69:3f was issued on by Plex, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Plex, Inc.

Organization: Plex, Inc.
State / Province: California
Locality: Los Gatos
Country: US

Plex, Inc.

Organization: Plex, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:3e:e9:42:67:76:6a:63:a0:9a:c3:df:8f:86:69:3f
Serial Number (int): 17606617412949554108334136797847513407
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1b:26:e3:4c:e7:85:ce:c8:cc:0b:23:40:64:6e:48:7d:6d:6c:1d:50
AuthorityKeyId: 94:8b:89:f7:48:72:89:f2:51:4a:d9:88:7b:e5:61:b5:aa:9c:d5:01

Fingerprint (sha1): 87:ea:a2:f5:2e:f5:17:17:2d:b3:54:98:b3:32:f0:dc:be:f8:bb:b7
Fingerprint (sha256): 00:00:0c:c9:72:38:7e:b7:e0:cd:ae:29:72:24:0d:5b:66:ac:5d:74:bb:1c:78:98:40:01:a0:fa:2e:ed:21:0e

Issuing Certificate URL: http://cacerts.digicert.com/PlexDevicesHighAssuranceCA2.crt

Revocation information

OCSP Server: http://ocspx.digicert.com

Check the revocation status for certificate *.689041cebb754d03be54718997c505d1.plex.direct

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.689041cebb754d03be54718997c505d1.plex.direct

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.689041cebb754d03be54718997c505d1.plex.direct

Other certificates including the domain name plex.direct

(limited to 100 certificates)
*.6948494af9e34e2a9a66248873656d21.plex.direct
*.156f3038afb54c35aaeb96d15334ef8b.plex.direct
*.aaf07c959eb84c37a3527fbe0543b9ec.plex.direct
*.2be66ab748704ac8aca5da267f8b44db.plex.direct
*.503b16c1893e4f15b26d7ecc47f2b842.plex.direct
*.e1025275f5e44317ac5bedfc0d94e363.plex.direct
*.eb43c3ad22774291b8d3815b7ed4b131.plex.direct
*.f954468eff08493f975a34113fa33fce.plex.direct
*.08b0b8700a4c4493b3b136d563949b83.plex.direct
*.0d408bfec330486cab0be312e50ebbd1.plex.direct
*.6ab947e7d14041f78c10572301e20c73.plex.direct
*.2591dba14c2b48b28f798e6bbf2317c0.plex.direct
*.689041cebb754d03be54718997c505d1.plex.direct
*.ee60787e6b874829a059d6ec6bfdb048.plex.direct
*.87944880b9614afb8e4635d262abf2c5.plex.direct
*.1c05cf359a9e45b39b88b4788368feb3.plex.direct
*.48409f52f6754ddca2d458378290bc03.plex.direct
*.c10313e112fc4c91a7bc651e1f5a0d4b.plex.direct
*.b192b309a4a044cda945c80f9c5beb9c.plex.direct
*.c759ce69e7bc4c189b113f45345bc58b.plex.direct
*.1113a7816f6147ed88fdcea939b1ccc6.plex.direct
*.ffa569f249fb41d2ac4e7929fb0491de.plex.direct
*.6d3cecd41acb4039ad891a8d84bfed9b.plex.direct
*.77fc935bb6e44b0da6975a96262c8cf2.plex.direct
*.b57a4b8c6eb64d7b8408d02c194da047.plex.direct
*.52367bb9354f4f03bcc25908244011ea.plex.direct
*.7ccf5660a506430fab7b142e5ff2d4f4.plex.direct
*.81347c07b88c4d5a9c690d0e630a831b.plex.direct
*.e66b943ebf4d4bcf9a236ef7517a9639.plex.direct
*.cb148000edfc45fa8f822f2e4fa1d81c.plex.direct
*.99607ef7144b4648ab39f3c599bc3c1c.plex.direct
*.798a6c320e36469f94ecdc3ff99c33bf.plex.direct
*.39a2017dd29544b793b46343b3a70c4e.plex.direct
*.7695dcf9f0de44e6a4a6b96bd8be8a68.plex.direct
*.b9d938ff55c949c0bef5815d69dde500.plex.direct
*.a32d7cb792484de4b6ec94d413652ed6.plex.direct
*.97a999d596934ff090a300b433bf76f3.plex.direct
*.1803d4ea0bdd42bcadde6a8b7eb49bc3.plex.direct
*.4a6e8c2866b04158823c7778209fb5db.plex.direct
*.ad6c4caa58e147b0b705e9e1603adf07.plex.direct
*.c3fcb3d9075042748c621b49412cf184.plex.direct
*.8e5ccce59e9e4bf8b2990527d078b950.plex.direct
*.82614734bb6a448990c5b0bad3a1c609.plex.direct
*.d76fa817f36542dc8c7c892acc6538dc.plex.direct
*.0fe37a6aae1c4d4790defec9c56f98e5.plex.direct
*.8f2c7894886548699cec306f6af7663a.plex.direct
*.3550232d63f04e91919349678045a614.plex.direct
*.9330691a2cbc4a52b72a1641041ee351.plex.direct
*.b92f93d37569490f8732e2c3cd7bef44.plex.direct
*.e41f611561a045fa9ab9288b35a0470b.plex.direct
*.d24b9e4d4e544d6fa8083b262c61a68b.plex.direct
*.ecc37258d89e47639f33f415fba92f31.plex.direct
*.a160f419870a42579b0d53605e7e201f.plex.direct
*.cf301be491f24593be83233b36e01675.plex.direct
*.8f0457874cc4497491902449b400ec2e.plex.direct
*.fb58e921909141629786be3c646e25e1.plex.direct
*.e3407f236fdf4042bff6ef89c860b00f.plex.direct
*.63dcf57ecac14243a8ea7239ce8e4b08.plex.direct
*.fc19b9fe1d9c48559e8ec37c382c8224.plex.direct
*.45b00c3417fd43efa13daacc4baa529d.plex.direct
*.b0ee0e88b4a84bea92d7addb813ba8ab.plex.direct
*.87845b68c15c47c48786d3633f909871.plex.direct
*.3464155665c14bc6a652ec18a7c43fd2.plex.direct
*.594cd82d06cd437d93ee9adc630ecf4a.plex.direct
*.b05fae3a9c1f4661a9fde111dcaa9391.plex.direct
*.a118753c7ab544709f8cbdae63643a21.plex.direct
*.8cc06581fca64dfe86b7684ddcfabc00.plex.direct
*.40d5d73f300d4a498dabd090b19e86ec.plex.direct
*.168f1a21ae374e74948061b6003c6f5c.plex.direct
*.6a2f90afbd174262bd6bddefd61d9c4a.plex.direct
*.15edf0e06a214ae8923b60b631240370.plex.direct
*.789346ea68ca4fb29f5791ea46c07cad.plex.direct
*.cd4097a7a02944508f06438e235aeb89.plex.direct
*.ebd61ec1a0fe46fc9589f6bbf8822d76.plex.direct
*.afde2729380a48cdb348b37d4432e9d2.plex.direct
*.ecaf3b536177490a914be5fa9865f1c8.plex.direct
*.88875afd3e8a4279b1c2a8fe056ef9d9.plex.direct
*.0384f8834df5478eb6679c9c6297a727.plex.direct
*.ad7ddbf7082d4c66b4efa6dcbe440888.plex.direct
*.482296ea3d6c4062819e6398071a867c.plex.direct
*.84ec66f34bab4f9caf6d6b324e47e346.plex.direct
*.996de87f069448829e86b33aaca00027.plex.direct
*.475bac569fac40d09c0602a240d9ec74.plex.direct
*.9c6ed7af728f4a03ae4257ef33d3a110.plex.direct
*.a2ef996c57c149fba4c836894f115bd7.plex.direct
*.57d6a5bf840c420fbca156ba328fc935.plex.direct
*.c086f9715ff4405c8cf666aa06467580.plex.direct
*.0f0b72c53f644d64912d36da623e52d1.plex.direct
*.155c879095984cf3bc665125eaddec8c.plex.direct
*.17d2e043392d4a45a4b45d1253a1ff78.plex.direct
*.551872d2203d48fe977e65dc68330874.plex.direct
*.4ee4a0d58764411db8353fd20c14e163.plex.direct
*.ca7a9a29bdd24e06beabfe8bf3c82233.plex.direct
*.bd9fb4ff023f4635960eb905467541a0.plex.direct
*.57fe8148609c4f179dd92f7ea1c44bd3.plex.direct
*.919e800ae5df4228a5c72ca8ecca8b24.plex.direct
*.b28cd7ed230c463cb2134abdd5750195.plex.direct
*.1ff82450527347febb54c477eab45e2b.plex.direct
*.1c14df3eb65b420197fa17c42f4ddfb0.plex.direct
*.22a01b90511244f0a983cb00e066a1bd.plex.direct

Certificate

The complete raw certificate details for *.689041cebb754d03be54718997c505d1.plex.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyzYaHVOGIr+ERrLf2DB
yiUh/D5n3oCwk6LTfT6UWQ5eZynLOq+uGgaiyjnTlpofmZXIS0DyQbjJT054i3Ej
0CwGzo38IfotnwIEaIof31ldKbzhkV8nyOxsshX26te/3AWyXzFmurKZcychh4di
8AUTXSB0lSYRKDRHS54psikT9CzsqySWGrSgyAeFmNjAcBN4MBcoGFj605nyOy4V
Z091V0eoxwMkYP9K2TbJ3fzOTiPskf3D96nokLuAL2HkfAUyQbDRTyzPHTp1Ot7e
wHPrkO6oXbsEXCqz/XRZu/QmRTTLRkBTuX81npItioPnDi3qjdaFu7ZfO8o94U0a
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17606617412949554108334136797847513407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plex, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plex Devices High Assurance CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Gatos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plex, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.689041cebb754d03be54718997c505d1.plex.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21608864212478493252974199140513435089505489230251589385819841068732101629119034757222732213466257078976180443267873192519119100272664467231885729500726185644190124837917426243433262292671285141655898047849893884932039551942620508404332247584570811375503658075633601931200132525911920484364423269848822104740301924179847952061076965886379867264872654720788181838468217715537713667811232097340390553185304183773549292688133768345727606087835582014001215713983221768860212288482760722926189866487238840449817595109432360793100736348698805336384256338880760954587916299617911785842216896015098644014600056762321307769573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 948b89f7487289f2514ad9887be561b5aa9cd501
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b26e34ce785cec8cc0b2340646e487d6d6c1d50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.689041cebb754d03be54718997c505d1.plex.direct'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocspx.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/PlexDevicesHighAssuranceCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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