btsqas.tomtom.com

- TomTom International B.V. -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:85:88:76:8a:4c:b9:45:28:8c:8f:8a:14:0f:20 was issued on by IdenTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TomTom International B.V.

Organization: TomTom International B.V.
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:01:85:88:76:8a:4c:b9:45:28:8c:8f:8a:14:0f:20
Serial Number (int): 85078492399286963545097756261416701728
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e1:1d:fb:65:b8:d4:5a:8e:7e:ef:a2:92:05:c0:63:20:e3:f1:8d:5a
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): bf:ee:9b:37:a7:5e:fe:03:53:61:81:89:7a:3e:02:0f:91:ca:c6:04
Fingerprint (sha256): 02:b2:9a:37:98:59:63:60:38:e3:fd:e2:bf:22:d8:21:db:fc:c5:76:c3:e6:20:a0:8f:83:11:62:1f:f4:37:08

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate btsqas.tomtom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for btsqas.tomtom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

btsqas.tomtom.com

Other certificates including the domain name tomtom.com

(limited to 100 certificates)
wadetrim.trubytraining.com
22773.discos.orbis.tomtom.com
tracker.engage.tomtom.com
ind06pr-890.maps-pu-poi.tomtom.com
s1.i.maverick.mep.tomtom.com
*.fcd-ingest.tomtom.com
atom-ws.27373.orbis.tomtom.com
*.tomtom.com
brandguide.tomtom.com
connect-us.tomtom.com
kenai-mod-11943-similar-jobs.preprod.marketing-az.tomtom.com
kenai-master.preprod.marketing-az.tomtom.com
11851.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
reportswithmaps.eu-west-1.maps-central.tomtom.com
fleetsecure.telematics.tomtom.com
6.discos.orbis.tomtom.com
airflow.inc-conf.prod.maps-amf.tomtom.com
bhsa.mysportsanalysis.com
28200.discos.orbis.tomtom.com
backend.pr-44.aqua.poi-dev.orbis.tomtom.com
ns-gss-wfs.inc-conf.dev.maps-amf.tomtom.com
usa06pr-843.maps-pu-poi.tomtom.com
matter-ws.22068.orbis.tomtom.com
fra2409test90-907.maps-pu-poi.tomtom.com
dev.mapexplorer.tomtom.com
atom-ws.67299.orbis.tomtom.com
academy.tomtom.com
atom-ws.20735.orbis.tomtom.com
*.tomtom.com
argo-discos.13999.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
cert00017-azurecdn.akamaized.net
kepler.ts.tomtom.com
mcodnkevtest-901.maps-pu-poi.tomtom.com
alertmanager.test-jk.connected-services.tomtom.com
preprod-vag-hcp3.acs.services.tomtom.com
caesgbitnosw06-844.maps-pu-poi.tomtom.com
wadetrim.trubytraining.com
*.navcloud.tomtom.com
farmviability.oahurcd.org
cert00017-azurecdn.akamaized.net
*.discovery.speech.tomtom.com
aqua-viewer.pr-58.aqua.poi-dev.orbis.tomtom.com
*.fcd-ingest.tomtom.com
alertmanager.prod-blue.connected-services.tomtom.com
api.roadcheck-dev.tomtom.com
backend.pr-47.aqua.poi-dev.orbis.tomtom.com
minerva-rest-api.test-chha.connected-services.tomtom.com
btsqas.tomtom.com
7.discos.orbis.tomtom.com
15408.discos.orbis.tomtom.com
backend.pr-46.aqua.poi-dev.orbis.tomtom.com
kenai-develop.preprod.marketing-az.tomtom.com
cert00017-azurecdn.akamaized.net
vertex.mep.tomtom.com
cert00017-azurecdn.akamaized.net
matter-ws.26195.orbis.tomtom.com
*.fcd-ingest.tomtom.com
*.adas-tile-service.mapcontent-dev.tomtom.com
kenai-mdev-1967-indigo-borders.preprod.marketing-az.tomtom.com
goldstream-develop.prod.marketing-az.tomtom.com
reportswithmaps.maps-central.tomtom.com
aqua-sampler-backend.released.aqua.poi-dev.orbis.tomtom.com
alertmanager.7777.discos-v2.orbis.tomtom.com
22867.discos.orbis.tomtom.com
fra06pr-883.maps-pu-poi.tomtom.com
matter-ws.11100.orbis.tomtom.com
brcachsg06pr-833.maps-pu-poi.tomtom.com
16770.discos-dev.orbis.tomtom.com
preprod-famar-ams.services.tomtom.com
feature-history.mep.tomtom.com
19680.discos.orbis.tomtom.com
ind06pr-889.maps-pu-poi.tomtom.com
brcachsg06pr-833.maps-pu-poi.tomtom.com
6.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
aqua-sampler-backend.pr-11.aqua.poi-dev.orbis.tomtom.com
kafka-bootstrap.prod-green.connected-services.tomtom.com
cpt.cs.tomtom.com
minerva-rest-api.test-lo.connected-services.tomtom.com
matter-ws.54879.orbis.tomtom.com
atom-ws.16233.orbis.tomtom.com
mock.preprod-ams.tomtom.com
22428.discos.orbis.tomtom.com
*.mapcontent-dev.tomtom.com
grafana.12772.discos-v2.orbis.tomtom.com
abddnktestev15-891.maps-pu-poi.tomtom.com
adas-tile-compiler-fca.mapcontent-dev.tomtom.com
preprod-fca-gsdp-sxm.services.tomtom.com
mep.tomtom.com
cert00017-azurecdn.akamaized.net
akamai-san18.exacttarget.com
api-blue.dev.horizon.tomtom.com
backend.pr-1.aqua.poi-dev.orbis.tomtom.com
preprod-kr-vag-hcp3.acs.services.tomtom.com
26587.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
atom-ws.16807.orbis.tomtom.com
17957.discos.orbis.tomtom.com

Certificate

The complete raw certificate details for btsqas.tomtom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdgCBTrR0pngKXVqEnr/
0QN9DCuN+55jyu6lW2iGqS6yuii5UC/nlEGtIjd9BDo+zEmbAHDiomB9sjPiwqNP
ZFXIy2R+0DD6fLqbkl3fIpZkcOm4xxvawk1dVpFOr2lT1d+I313c4sIodU8XAC8v
CeMlNYcduQzWI14LIe5VuQ5sedMCWz0gsiBs8HXg64b6FfBDj7NMF8XCGOvDo1JU
Ij7IMKYIoOsnJp1syfN/4x5DvzcYqNOawlPLMegPCsywWntNZDdgPKVeJvDDtP2h
PXov0tts6i6Nwg2glIEmVdZum+WcWMwkJfGgY9yW2aDu9MTcwy3mRZrwkEACuMBs
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078492399286963545097756261416701728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 19:02:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 19:01:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'btsqas.tomtom.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TomTom International B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23965557100238307203332689509892500604995758807877871142296355847015624129982920345921212628885979763367123945903382441020862064768104573259984482439839992615875208849865896519298560194722532998329083807625117093085650022230284861311365296067667262316454890401114145794174046404549014950401237961817523262055319830352547469931085008528794587870615828408641063959158987146743969352953988588020219011541595037826483442919950528889874790947727709278010347742135237239547202526595325757705683099112910989616948243928558198952768297443879156320065181149233471307429193434055881593799944285077628266219302908418036479323221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (285 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.identrust.com/certificates/policy/ts/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btsqas.tomtom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e11dfb65b8d45a8e7eefa29205c06320e3f18d5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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