placesmanager.stg.api.here.com

- HERE Global BV -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 18:ac:ba:ac:dc:db:03:ff:89:8c:88:97 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HERE Global BV

Organization: HERE Global BV
State / Province: Noord-Brabant
Locality: Eindhoven
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:ac:ba:ac:dc:db:03:ff:89:8c:88:97
Serial Number (int): 7636457025606110403799845015
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a5:4f:9c:0a:7c:11:93:d6:87:6e:07:7d:f8:7f:f9:9a:c0:f4:f5:ab
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 6b:8f:1e:06:8a:2d:2b:7a:9f:61:38:2c:1c:45:7e:2e:58:41:ec:d5
Fingerprint (sha256): 02:36:6e:bc:25:29:1d:dc:f8:9c:00:21:55:c6:57:1c:44:18:31:5f:70:76:4b:96:21:70:a5:e2:f0:c3:09:0b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate placesmanager.stg.api.here.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for placesmanager.stg.api.here.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

placesmanager.stg.api.here.com

Other certificates including the domain name here.com

(limited to 100 certificates)
qa.rd.account.here.com
proxy.refclient.ext.here.com
xyz.api.here.com
graf.eventbroker.api.here.com
eu.scbe.api.here.com
san3.here.com
test.here.com
cit.ppc.hub.api.here.com
*.tracking.here.com
amum.cit.cc.api.here.com
cloudmaster-staging.thor.data.here.com
artifact.api.platform.here.com
demo.acs.ext.here.com
pchilyncFEpool.ad.here.com
patlmta05.core.in.here.com
*.izumi.ext.here.com
listings.in.here.com
myphone.uc.here.com
st.backstage.here.com
*.slp.pos.here.com
*.stg.navigation-voice.data.here.com
admin-service.api.platform.in.here.com
mgat.ext.here.com
api.release.in.here.com
amum.ctt.cc.api.here.com
stg.mapfeedback.here.com
navigation-voice.data.here.com
scd.pipelines.platform.here.com
Pamsdc22.ad.here.com
corphyperion.ad.here.com
avalon.lastmile.aws.in.here.com
splunkforwarder.ppc.hub.api.here.com
mgat.ext.here.com
pamslyncpool.ad.here.com
splunkforwarder.3dearthcore.here.com
qa.primeplaces.here.com
*.data.api.platform.here.com
image.maps.cit.api.here.com
*.3dmap.here.com
traffic.cit.api.here.com
dv.feedback.here.com
traffic.ctt.api.here.com
mapcreator.here.com
emtadmin-prod.in.here.com
*.dev.had.in.here.com
grafana.metrics.int-2-aws-us-west-2.k8s.in.here.com
jaguarshop.here.com
refroute.routing.in.here.com
partneruniversity.here.com
emprovisioning.prd.prd-1-aws-eu-west-1.k8s.in.here.com
splunkforwarder.cofense.here.com
myphone.uc.here.com
pipelines.api.platform.in.here.com
*.traffic.data.here.com
cap-test.places.dev.api.here.com
uatspca.in.here.com
qa.collector.data.here.com
cpdev.aws.in.here.com
placesmanager.api.here.com
*.apf.in.here.com
access-change.api.platform.here.com
cit.tracks.here.com
intranet.here.com
binary.scbe.sit.api.here.com
rd.account.here.com
*.rendering.in.here.com
mack.it.here.com
PCHIDC03.AD.HERE.COM
int.account.here.com
*.cdn.places.cit.api.here.com
odin.in.here.com
wse.cit.api.here.com
placesmanager.stg.api.here.com
sit.saas.awsmarketplace.here.com
map.hybrid.ccv.api.here.com
route-oet.hybrid.cc.api.here.com
hapi-datastore-proxy-perf.platform.sit.here.com
pipelines.api.platform.here.com
*.consent.api.platform.in.here.com
marketplace.api.platform.in.here.com
saeljira-dev2.it.here.com
san4.here.com
palamida.in.here.com
sca.api.in.here.com
enterprise.here.com
placescontent.nokia.com
*.blob.data.api.platform.here.com
email-quarantine.in.here.com
scbe.api.here.com
maphub.cit.api.here.com
svip.it.here.com
wotan-stg.in.here.com
splunkforwarder.positioningapi.here.com
maphub.cit.api.here.com
resource-access.api.platform.here.com
nps.sit.data.here.com
origin.prd.cld.vcdn.data.here.com
confluence.it.here.com
*.artifact.api.platform.in.here.com
traces.sit.api.here.com

Certificate

The complete raw certificate details for placesmanager.stg.api.here.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIMGKy6rNzbA/+JjIiXMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA2MDQxNTExMDVaFw0y
MDA3MjExNzIxMDlaMHsxCzAJBgNVBAYTAk5MMRYwFAYDVQQIEw1Ob29yZC1CcmFi
YW50MRIwEAYDVQQHEwlFaW5kaG92ZW4xFzAVBgNVBAoTDkhFUkUgR2xvYmFsIEJW
MScwJQYDVQQDEx5wbGFjZXNtYW5hZ2VyLnN0Zy5hcGkuaGVyZS5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfn43GggacfvWtgRVuU1O/8mXwHyz
qdTxrUJy0tXtxsukk3riDud/illiNIG7t8cOtH/Z+P1unY6LRFFgZtFFHjtEYYUW
tY86Di+0Dyqry2FFYwA+UeRXEHangumJBDjKArUJgy0pjTCC9jjTjxExgDs5ziva
dph1Y+NWYnfGQ6S2SUWqYSHGhubhXL761SuU7U1c0e8wJzxwZZi8ZSoqxyTdQexr
PtUwewDL38bjoNI0UAWbBIBDKpEiprTyg6OmSguXr7MUV12T1pDul7kpH3BRrEI5
x9TCbyz3T3b92MMYkLGONC5NO5SgfmcmhuhQ/J9JqRkaL4yUUhQxZ05ZAgMBAAGj
ggGnMIIBozAOBgNVHQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYB
BQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNh
b3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxz
aWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEU
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMCkGA1UdEQQiMCCCHnBsYWNlc21h
bmFnZXIuc3RnLmFwaS5oZXJlLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYE
FKVPnAp8EZPWh24Hffh/+ZrA9PWrMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBdv3oM3d4qAaVGXtrP5WanUgIU59CDczzAEkyBII/opl3M
Z3jS+hF7UYTTBj/sawi9yGE5ALFvXQj6IT7m+6D7gTRVCVA3/KOquJA2ZCwG7EQ2
bM3hJSs4UVrvYwJc4hQPJOVbdysHm+BX7hsH4wyd9vwiPNgn5o2mf5esqCi0WkVT
BvQb0eT14rQBgWVxuwaeUgxP0hoyVf9+hD2IZst8bRJuttI0Sktw9XP4fBV3bjnL
lGugYP8EmeGRC1tHwxxsr2E+g6mp1SjzA3a5j4qcVJRqDWAzyNk5rW/sgeWp4lGU
N3OwZ9DVH4lqd69t8AW8sQrd7UurOlzDBHd34ekk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH5+NxoIGnH71rYEVblN
Tv/Jl8B8s6nU8a1CctLV7cbLpJN64g7nf4pZYjSBu7fHDrR/2fj9bp2Oi0RRYGbR
RR47RGGFFrWPOg4vtA8qq8thRWMAPlHkVxB2p4LpiQQ4ygK1CYMtKY0wgvY4048R
MYA7Oc4r2naYdWPjVmJ3xkOktklFqmEhxobm4Vy++tUrlO1NXNHvMCc8cGWYvGUq
Ksck3UHsaz7VMHsAy9/G46DSNFAFmwSAQyqRIqa08oOjpkoLl6+zFFddk9aQ7pe5
KR9wUaxCOcfUwm8s9092/djDGJCxjjQuTTuUoH5nJoboUPyfSakZGi+MlFIUMWdO
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7636457025606110403799845015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 15:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-21 17:21:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eindhoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HERE Global BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'placesmanager.stg.api.here.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24805083810381563612671417018906528158934427441278947053038280925996666175353873619479614481252277264348271406731462814496151746560639609625167775544407270465672853494071839129471645658455166393165330890263722638040161499830767765216134618524162835712555863370718071818539224974208231402863526863372021945873329455258006051182799983983102575234882605901754362482704717588625259418846407515872575104781352271230312032986442217112868025680777059845946235388728494494446995924103294532327270840271006128362229135651158476280049545837535415695468548280506745947300017653103303482952316558053333601678234004452668080606809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placesmanager.stg.api.here.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a54f9c0a7c1193d6876e077df87ff99ac0f4f5ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005dbf7a0cddde2a01a5465edacfe566a7520214e7d083733cc0124c81208fe8a65dcc6778d2fa117b5184d3063fec6b08bdc8613900b16f5d08fa213ee6fba0fb813455095037fca3aab89036642c06ec44366ccde1252b38515aef63025ce2140f24e55b772b079be057ee1b07e30c9df6fc223cd827e68da67f97aca828b45a455306f41bd1e4f5e2b401816571bb069e520c4fd21a3255ff7e843d8866cb7c6d126eb6d2344a4b70f573f87c15776e39cb946ba060ff0499e1910b5b47c31c6caf613e83a9a9d528f30376b98f8a9c54946a0d6033c8d939ad6fec81e5a9e251943773b067d0d51f896a77af6df005bcb10added4bab3a5cc3047777e1e924