www.ae.secure.barclays.com

- Barclays PLC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 07:00:e2:c0:d3:bd:41:f3:a1:78:08:46:5b:42:84:ec was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:00:e2:c0:d3:bd:41:f3:a1:78:08:46:5b:42:84:ec
Serial Number (int): 9309195072402174626821509050083214572
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 06:4d:c6:84:71:12:65:24:e6:29:cd:58:74:53:42:d5:d4:f0:ba:5b
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): f3:69:cc:06:80:9d:14:61:4f:e4:d8:81:bc:85:19:1f:bd:d3:ae:59
Fingerprint (sha256): 01:41:f1:af:dd:c5:80:a0:3f:39:9b:8b:54:1c:ca:38:a3:81:20:74:18:db:5d:fe:5a:00:e9:09:db:87:14:45

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate www.ae.secure.barclays.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ae.secure.barclays.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ae.secure.barclays.com

Other certificates including the domain name barclays.com

(limited to 100 certificates)
www.barclayswealth.com
mlabs-in-uk-new.barclays.com
onboardingonline.barclays.com
launch.secure.barclays.com
20210614EV.barclays.com
www.zm.secure.barclays.com
ae.employersolutions.barclays.com
imagepay-sl.iportal.barclays.com
myaccessldn.barclays.com
unauth.chat.secure.barclays.com
gloucesterpilot.extranet.barclays.com
www.barclays.co.uk
www.retailmortgages.secure.barclays.com
www.barclaycard.es.secure.barclays.com
investmentbank-uat.barclays.com
mortgageintermediaries.iaportal.barclays.com
myworkspace-hk.barclays.com
juniper.barclays.com
myaccessjhb.barclays.com
ib.mz.secure.barclays.com
token.sandbox.barclays.com
FATCAREPORTING.UK.IDES.BARCLAYS.COM
b2b-bne-imi2way-prod.barclays.com
www.ae.secure.barclays.com
www.barclaycard.pt.secure.barclays.com
www.barclaycard.pt.secure.barclays.com
supplierfinance.barclays.com
SMG-CIPE-PROD.barclays.com
bmb-lcp2.secure.barclays.com
vpn-uk-glo.barclays.com
www.nbc.secure.barclays.com
investmentbank.barclays.com
solicitar.barclaycard.es.secure.barclays.com
bpl.iportal.barclays.com
home.barclays
www.eg.secure.barclays.com
chat-uat.international.barclays.com
bmb.secure.barclays.com
www.ae.secure.barclays.com
iceUA2v3.barclays.com
bwsoa-cdi-uat2.barclays.com
imagepay-gl.iportal.barclays.com
www.ug.barclays.com
www.eg.secure.barclays.com
federate.secure.barclays.com
filegatewaytestentrust.barclays.com
adt.glo.barclays.com
newsroom.barclays.com
overseas.barclays.com
zappapi-inbound-test.barclays.com
api.barclays.com
vidyoccapi.emea-dev.barclays.com
federate.secure.barclays.com
www.ialert.barclays.com
www.barclaycard.pt.secure.barclays.com
giftportal.secure.barclays.com
solicitar.barclaycard.es.secure.barclays.com
www.investmentbank.barclays.com
www.bw.barclays.com
now.barclays.com
myaccessjhb.barclays.com
vidyoportal.emea-dev.barclays.com
www.muon.secure.barclays.com
investmentbank-uat.barclays.com
investmentbank-uat.barclays.com
m.ialert.barclays.com
ics-bir-de.uksloug11li08.barclays.com
hooks.imiconnect.barclays.com
myworkspace-slo.barclays.com
www.ae.secure.barclays.com
www.barclays.co.uk
www.bkey.secure.barclays.com
wcp.barclays.com
myaccesspilot.barclays.com
myaccessldn.barclays.com
puk-lcp.secure.barclays.com
www.ug.barclays.com
smartspend-shopping-soap.barclays.com
www.barclays.co.uk
www.gh.secure.barclays.com
developer-sandbox.barclays.com
www.gh.secure.barclays.com
GProdIPSVerizon.barclays.com
barclays.com
mss.secure.barclays.com
MYWORKSPACEONE.BARCLAYS.COM
iportal.barclays.com
buyit.secure.barclays.com
selfservice.iportal.barclays.com
login.demo.supplierfinance.barclays.com
ldnconnect.barclays.com
federate.secure.barclays.com
vpn-us-cqg-3.barclays.com
oauth-test-tiaa.secure.barclays.com
pref.iportal.barclays.com
zappapidfi-outbound-live.barclays.com
email.barclays.co.uk
auth.chat.secure.barclays.com
vcs-emea4.barclays.com
connect.barclays.com

Certificate

The complete raw certificate details for www.ae.secure.barclays.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ahDM4yaJnsa8Ey+XhTS
7XlSgPW9sd3oBMbdAhP9TfjGEhzW4B56daJY6Cdp9do3Zfpug3FiMUlUn73FyAmK
E5dnlU0+hwBD5SUutw9uY0DTTIpEkaXxrLC/t81WeTmDiAz+NDXzh+X2xtZWgvEc
NfvhaaY4atPtm1h2VC64aOcCRUohci/pxktIc2WdkKWEAHpy+Fra585YgBwJJerF
XOeV9rwPYMh63ob6gJX100LtOMKaLRv1gjaDddQIcr501kPgPfM9avA/tSvtPQiS
pxL2by1Zk8/ByfseugEcaEMjSIJOnf1DYhZ2eYuQGOv2ncby8pbCemd40IoY5+G0
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9309195072402174626821509050083214572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ae.secure.barclays.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28991545171063549575680103051894672845485444059451903493252329036859365118916161295219622122350213898483708412539634087040350420375375323573733868645297031876497937327464244873871192517737140521739214761925353610881108283089963068219656463726793686916875330231873228977283428208695374322750635038114589386056005122158355929737413156691065255924423098854659959669760964443425686247707354252452395718428080822227002714792228072547203064691811486391453392095868598850741119861750433850390168312034559259060504998301789359557308661658651102253085016883865927475705025813980245290780290709781259750326123196818673063015673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							064dc68471126524e629cd58745342d5d4f0ba5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ae.secure.barclays.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e57c7cbe07372902f180ff1f89b26e5375d9b10a80abcbfc82abdb47d3c721dff5328953780e2e2af35e3770ca8ae2f6e757ee26b68907f9fe4ee78798890ec5061953f47df8498985c10af7855603fce07f4145a3ea3767899ec0929037b2ef4172544b767b1f622fef66df3e7e29a831b9eaea0d278f2f87b17f4c5bdfa218fbaec4e69d81d76f0689dd54843ea327f9892884e9cb9c8bf46fb6faf4ab53ed4cdfb9b31f87c2a4cb6e8a3f0f6fefa1bb2f1c3463e0eb801a4ec56bb0e7a97bd43e2eb0efb327e841d368d2fca9a1989533ffe319370e3fc6e266243c4a762b357b3c12b788875f7284cffd6a7fd7fd48c812e8ce50d5fc9255b9cb44bf095