*.594cd82d06cd437d93ee9adc630ecf4a.plex.direct

- Plex, Inc. -

Issued by Plex Devices High Assurance CA2

About this certificate

This digital certificate with serial number 0a:f6:32:37:ec:9f:4e:59:f0:b9:f3:50:74:aa:ea:7c was issued on by Plex, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Plex, Inc.

Organization: Plex, Inc.
State / Province: California
Locality: Los Gatos
Country: US

Plex, Inc.

Organization: Plex, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f6:32:37:ec:9f:4e:59:f0:b9:f3:50:74:aa:ea:7c
Serial Number (int): 14570603536308898720564549324250999420
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:8c:c4:d9:aa:ad:1c:fd:48:14:53:fc:df:f0:ef:bd:89:3f:4b:89
AuthorityKeyId: 94:8b:89:f7:48:72:89:f2:51:4a:d9:88:7b:e5:61:b5:aa:9c:d5:01

Fingerprint (sha1): 18:cb:48:a0:ea:8a:4f:df:ab:94:49:c4:2f:9a:c4:ce:9f:d2:be:7d
Fingerprint (sha256): 00:00:5f:2c:0a:21:c4:4e:43:8b:2f:5f:80:d7:88:b0:d5:48:ca:63:a8:50:5a:8f:15:19:02:ab:8c:11:88:3d

Issuing Certificate URL: http://cacerts.digicert.com/PlexDevicesHighAssuranceCA2.crt

Revocation information

OCSP Server: http://ocspx.digicert.com

Check the revocation status for certificate *.594cd82d06cd437d93ee9adc630ecf4a.plex.direct

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.594cd82d06cd437d93ee9adc630ecf4a.plex.direct

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.594cd82d06cd437d93ee9adc630ecf4a.plex.direct

Other certificates including the domain name plex.direct

(limited to 100 certificates)
*.6948494af9e34e2a9a66248873656d21.plex.direct
*.156f3038afb54c35aaeb96d15334ef8b.plex.direct
*.aaf07c959eb84c37a3527fbe0543b9ec.plex.direct
*.2be66ab748704ac8aca5da267f8b44db.plex.direct
*.503b16c1893e4f15b26d7ecc47f2b842.plex.direct
*.e1025275f5e44317ac5bedfc0d94e363.plex.direct
*.eb43c3ad22774291b8d3815b7ed4b131.plex.direct
*.f954468eff08493f975a34113fa33fce.plex.direct
*.08b0b8700a4c4493b3b136d563949b83.plex.direct
*.0d408bfec330486cab0be312e50ebbd1.plex.direct
*.6ab947e7d14041f78c10572301e20c73.plex.direct
*.2591dba14c2b48b28f798e6bbf2317c0.plex.direct
*.689041cebb754d03be54718997c505d1.plex.direct
*.ee60787e6b874829a059d6ec6bfdb048.plex.direct
*.87944880b9614afb8e4635d262abf2c5.plex.direct
*.1c05cf359a9e45b39b88b4788368feb3.plex.direct
*.48409f52f6754ddca2d458378290bc03.plex.direct
*.c10313e112fc4c91a7bc651e1f5a0d4b.plex.direct
*.b192b309a4a044cda945c80f9c5beb9c.plex.direct
*.c759ce69e7bc4c189b113f45345bc58b.plex.direct
*.1113a7816f6147ed88fdcea939b1ccc6.plex.direct
*.ffa569f249fb41d2ac4e7929fb0491de.plex.direct
*.6d3cecd41acb4039ad891a8d84bfed9b.plex.direct
*.77fc935bb6e44b0da6975a96262c8cf2.plex.direct
*.b57a4b8c6eb64d7b8408d02c194da047.plex.direct
*.52367bb9354f4f03bcc25908244011ea.plex.direct
*.7ccf5660a506430fab7b142e5ff2d4f4.plex.direct
*.81347c07b88c4d5a9c690d0e630a831b.plex.direct
*.e66b943ebf4d4bcf9a236ef7517a9639.plex.direct
*.cb148000edfc45fa8f822f2e4fa1d81c.plex.direct
*.99607ef7144b4648ab39f3c599bc3c1c.plex.direct
*.798a6c320e36469f94ecdc3ff99c33bf.plex.direct
*.39a2017dd29544b793b46343b3a70c4e.plex.direct
*.7695dcf9f0de44e6a4a6b96bd8be8a68.plex.direct
*.b9d938ff55c949c0bef5815d69dde500.plex.direct
*.a32d7cb792484de4b6ec94d413652ed6.plex.direct
*.97a999d596934ff090a300b433bf76f3.plex.direct
*.1803d4ea0bdd42bcadde6a8b7eb49bc3.plex.direct
*.4a6e8c2866b04158823c7778209fb5db.plex.direct
*.ad6c4caa58e147b0b705e9e1603adf07.plex.direct
*.c3fcb3d9075042748c621b49412cf184.plex.direct
*.8e5ccce59e9e4bf8b2990527d078b950.plex.direct
*.82614734bb6a448990c5b0bad3a1c609.plex.direct
*.d76fa817f36542dc8c7c892acc6538dc.plex.direct
*.0fe37a6aae1c4d4790defec9c56f98e5.plex.direct
*.8f2c7894886548699cec306f6af7663a.plex.direct
*.3550232d63f04e91919349678045a614.plex.direct
*.9330691a2cbc4a52b72a1641041ee351.plex.direct
*.b92f93d37569490f8732e2c3cd7bef44.plex.direct
*.e41f611561a045fa9ab9288b35a0470b.plex.direct
*.d24b9e4d4e544d6fa8083b262c61a68b.plex.direct
*.ecc37258d89e47639f33f415fba92f31.plex.direct
*.a160f419870a42579b0d53605e7e201f.plex.direct
*.cf301be491f24593be83233b36e01675.plex.direct
*.8f0457874cc4497491902449b400ec2e.plex.direct
*.fb58e921909141629786be3c646e25e1.plex.direct
*.e3407f236fdf4042bff6ef89c860b00f.plex.direct
*.63dcf57ecac14243a8ea7239ce8e4b08.plex.direct
*.fc19b9fe1d9c48559e8ec37c382c8224.plex.direct
*.45b00c3417fd43efa13daacc4baa529d.plex.direct
*.b0ee0e88b4a84bea92d7addb813ba8ab.plex.direct
*.87845b68c15c47c48786d3633f909871.plex.direct
*.3464155665c14bc6a652ec18a7c43fd2.plex.direct
*.594cd82d06cd437d93ee9adc630ecf4a.plex.direct
*.b05fae3a9c1f4661a9fde111dcaa9391.plex.direct
*.a118753c7ab544709f8cbdae63643a21.plex.direct
*.8cc06581fca64dfe86b7684ddcfabc00.plex.direct
*.40d5d73f300d4a498dabd090b19e86ec.plex.direct
*.168f1a21ae374e74948061b6003c6f5c.plex.direct
*.6a2f90afbd174262bd6bddefd61d9c4a.plex.direct
*.15edf0e06a214ae8923b60b631240370.plex.direct
*.789346ea68ca4fb29f5791ea46c07cad.plex.direct
*.cd4097a7a02944508f06438e235aeb89.plex.direct
*.ebd61ec1a0fe46fc9589f6bbf8822d76.plex.direct
*.afde2729380a48cdb348b37d4432e9d2.plex.direct
*.ecaf3b536177490a914be5fa9865f1c8.plex.direct
*.88875afd3e8a4279b1c2a8fe056ef9d9.plex.direct
*.0384f8834df5478eb6679c9c6297a727.plex.direct
*.ad7ddbf7082d4c66b4efa6dcbe440888.plex.direct
*.482296ea3d6c4062819e6398071a867c.plex.direct
*.84ec66f34bab4f9caf6d6b324e47e346.plex.direct
*.996de87f069448829e86b33aaca00027.plex.direct
*.475bac569fac40d09c0602a240d9ec74.plex.direct
*.9c6ed7af728f4a03ae4257ef33d3a110.plex.direct
*.a2ef996c57c149fba4c836894f115bd7.plex.direct
*.57d6a5bf840c420fbca156ba328fc935.plex.direct
*.c086f9715ff4405c8cf666aa06467580.plex.direct
*.0f0b72c53f644d64912d36da623e52d1.plex.direct
*.155c879095984cf3bc665125eaddec8c.plex.direct
*.17d2e043392d4a45a4b45d1253a1ff78.plex.direct
*.551872d2203d48fe977e65dc68330874.plex.direct
*.4ee4a0d58764411db8353fd20c14e163.plex.direct
*.ca7a9a29bdd24e06beabfe8bf3c82233.plex.direct
*.bd9fb4ff023f4635960eb905467541a0.plex.direct
*.57fe8148609c4f179dd92f7ea1c44bd3.plex.direct
*.919e800ae5df4228a5c72ca8ecca8b24.plex.direct
*.b28cd7ed230c463cb2134abdd5750195.plex.direct
*.1ff82450527347febb54c477eab45e2b.plex.direct
*.1c14df3eb65b420197fa17c42f4ddfb0.plex.direct
*.22a01b90511244f0a983cb00e066a1bd.plex.direct

Certificate

The complete raw certificate details for *.594cd82d06cd437d93ee9adc630ecf4a.plex.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqGq/1q6X0M0idVFJxak
8m2NRI6LtExSP1UwfZfbxx9Ad+xRaSygW8e4H7WaP8e6KZG3nipSJU/v5CIMehgd
kebtsggTeS0s31hxjWas75nWBzPkIAs8GhB7OWkWYiIL609xNXb2Ee9++Gl6GjKS
vKJIdiDcj+AZWpFSs4cdDZyyRlkpTaZQTeJPi2ZITxWHIJsJiZVK4K2oH2nNSCrt
xsMIovxFcW1H0EQnP7yfyPa2xQneXByAxQric1s/2PGGdhzTmdSdn0lq72aPBX13
y4Wq8SXM7OJ/WMR27LnNpDG1156a50ShevQ+LeimCw2q1+L+F8N9DUWXNhCkBzXq
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14570603536308898720564549324250999420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plex, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plex Devices High Assurance CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Gatos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plex, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.594cd82d06cd437d93ee9adc630ecf4a.plex.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24064999385343071761395276655724441264410744940879313907201448368502895718256024901771076356377718187742031487194169887553650560776468677474445285685615156178282193980590512087730092937046655748137440211808267997640677114257475408120027620513031017165159618673175420081441773215373439951023161752734604908377537874566073417775132546205845579758562084872898244913530653605556799919181804373856051480492028749382658241144939037866088883146669954378753112830621730337664091264685136168563082247784633007566812155991061221626447022907974111063679494483950683855421200162663835821922370609772875186032334013292394908609051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 948b89f7487289f2514ad9887be561b5aa9cd501
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							048cc4d9aaad1cfd481453fcdff0efbd893f4b89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.594cd82d06cd437d93ee9adc630ecf4a.plex.direct'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocspx.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/PlexDevicesHighAssuranceCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ab7d052ce4119a1fc3093c895126c25e120443022f006dc39e00533ffedf7dc4f8e5d59f7542f5fc7277e2bf64e41e28399dc7ee69179d8971b5f56c745a97824c32c120d61526b5210a56c8ed81d190b971ff84f565b2f4b2c24441523e0aa4cec27509bfbcc124f3f09d8ed6b5a6ab1bb9880061ebfc72eb102caeaadf31d73df4bbcb2092cf64fb67bb86c61b17f9863fa3f34ff971f124015c319a1e57bc7250d08d8dfd160b66a8e6c23147f493fde21bb94accd0b80f886efd190276662fa62fa75e11f97a56352f819d0506bbd2b817405305ee62dc882c72a622642a8d0025aac3c0095879f7198b045fbb91bbf47f5bb096944daa38dff0bc0c848