cit.alfabank.ru
Issued by HARICA DV TLS RSA
About this certificate
This digital certificate with serial number 51:e4:13:4b:11:09:4d:5f:6e:5e:0f:a0:e2:a7:12:c4 was issued on by Hellenic Academic and Research Institutions CA.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cit.alfabank.ru
Hellenic Academic and Research Institutions CA
Organization:
Hellenic Academic and Research Institutions CA
Country:
GR
This certificate will expire on
Certificate Details
Serial Number (hex): 51:e4:13:4b:11:09:4d:5f:6e:5e:0f:a0:e2:a7:12:c4Serial Number (int): 108851702655491275238028776530977952452
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 0a:88:ab:bc:8b:f0:f5:4a:ec:61:44:50:40:44:c1:87:66:de:de:51
Fingerprint (sha1): 98:0e:59:40:fc:a1:eb:58:f4:36:64:fd:61:18:f8:e8:4b:25:0e:74
Fingerprint (sha256): 03:42:b3:da:09:84:2f:66:25:e2:a6:d7:5d:54:3a:e2:8f:ec:61:12:7e:30:e4:bc:1d:a4:ff:2e:d2:13:fa:70
Issuing Certificate URL: http://crt.harica.gr/HARICA-DV-TLS-Sub-R1.cer
Revocation information
OCSP Server: http://ocsp.harica.grCRL Distribution Point: http://crl.harica.gr/HARICA-DV-TLS-Sub-R1.crl
Check the revocation status for certificate cit.alfabank.ru
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cit.alfabank.ru
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cit.alfabank.ru
Other certificates including the domain name alfabank.ru
(limited to 100 certificates)
traveler2.alfabank.ru
agent.alfabank.ru
agent.alfabank.ru
digital.alfabank.ru
ib.alfabank.ru
travelernext.alfabank.ru
zp.alfabank.ru
anketa.alfabank.ru
ib.alfabank.ru
club.alfabank.ru
pilots.alfabank.ru
emp-lead.alfabank.ru
digp.alfabank.ru
alfapartners.alfabank.ru
click.alfabank.ru
welcome.alfabank.ru
cit.alfabank.ru
ctxvdi.alfabank.ru
my.alfabank.ru
settings.alfabank.ru
reg.alfabank.ru
trading.alfabank.ru
groupib-ac.alfabank.ru
anketa.alfabank.ru
rko.alfabank.ru
sense.alfabank.ru
payment.alfabank.ru
id.alfabank.ru
traveler2.alfabank.ru
job.alfabank.ru
zp.alfabank.ru
potok.alfabank.ru
alfapeople.alfabank.ru
telework.alfabank.ru
trade.alfabank.ru
click.alfabank.ru
link.alfabank.ru
travelervip.alfabank.ru
acs.alfabank.ru
emp-anketa.alfabank.ru
message.alfabank.ru
id-hub-sandbox.alfabank.ru
mind.alfabank.ru
testlink.alfabank.ru
blackstar.alfabank.ru
ecom.alfabank.ru
travelernext.alfabank.ru
sandbox.alfabank.ru
travelervip.alfabank.ru
alfago.alfabank.ru
click.alfabank.ru
travel.alfabank.ru
alfabank.ru
investments.alfabank.ru
CC.ALFABANK.RU
design.alfabank.ru
chatkb.alfabank.ru
design.alfabank.ru
link.alfabank.ru
nalog.alfabank.ru
zp.alfabank.ru
private.auth.alfabank.ru
store.alfabank.ru
private.auth.alfabank.ru
alfabank.ru
welcome.alfabank.ru
scf.alfabank.ru
club.alfabank.ru
usability.alfabank.ru
private.auth.alfabank.ru
link.alfabank.ru
digp.alfabank.ru
rko.alfabank.ru
alfapartners.alfabank.ru
megaplan.alfabank.ru
alfainvest.alfabank.ru
guarantees.alfabank.ru
click.alfabank.ru
digp.alfabank.ru
pay2.alfabank.ru
traveler2.alfabank.ru
ipoteka.alfabank.ru
testamcalls.alfabank.ru
abm.alfabank.ru
learn.alfabank.ru
alfabank.ru
atv.alfabank.ru
online.alfabank.ru
kassa.alfabank.ru
pay.alfabank.ru
online.alfabank.ru
baas.alfabank.ru
metrics.alfabank.ru
pilots.alfabank.ru
alfapartners.alfabank.ru
my.alfabank.ru
push.alfabank.ru
api.alfabank.ru
pay2.alfabank.ru
partner.alfabank.ru
agent.alfabank.ru
agent.alfabank.ru
digital.alfabank.ru
ib.alfabank.ru
travelernext.alfabank.ru
zp.alfabank.ru
anketa.alfabank.ru
ib.alfabank.ru
club.alfabank.ru
pilots.alfabank.ru
emp-lead.alfabank.ru
digp.alfabank.ru
alfapartners.alfabank.ru
click.alfabank.ru
welcome.alfabank.ru
cit.alfabank.ru
ctxvdi.alfabank.ru
my.alfabank.ru
settings.alfabank.ru
reg.alfabank.ru
trading.alfabank.ru
groupib-ac.alfabank.ru
anketa.alfabank.ru
rko.alfabank.ru
sense.alfabank.ru
payment.alfabank.ru
id.alfabank.ru
traveler2.alfabank.ru
job.alfabank.ru
zp.alfabank.ru
potok.alfabank.ru
alfapeople.alfabank.ru
telework.alfabank.ru
trade.alfabank.ru
click.alfabank.ru
link.alfabank.ru
travelervip.alfabank.ru
acs.alfabank.ru
emp-anketa.alfabank.ru
message.alfabank.ru
id-hub-sandbox.alfabank.ru
mind.alfabank.ru
testlink.alfabank.ru
blackstar.alfabank.ru
ecom.alfabank.ru
travelernext.alfabank.ru
sandbox.alfabank.ru
travelervip.alfabank.ru
alfago.alfabank.ru
click.alfabank.ru
travel.alfabank.ru
alfabank.ru
investments.alfabank.ru
CC.ALFABANK.RU
design.alfabank.ru
chatkb.alfabank.ru
design.alfabank.ru
link.alfabank.ru
nalog.alfabank.ru
zp.alfabank.ru
private.auth.alfabank.ru
store.alfabank.ru
private.auth.alfabank.ru
alfabank.ru
welcome.alfabank.ru
scf.alfabank.ru
club.alfabank.ru
usability.alfabank.ru
private.auth.alfabank.ru
link.alfabank.ru
digp.alfabank.ru
rko.alfabank.ru
alfapartners.alfabank.ru
megaplan.alfabank.ru
alfainvest.alfabank.ru
guarantees.alfabank.ru
click.alfabank.ru
digp.alfabank.ru
pay2.alfabank.ru
traveler2.alfabank.ru
ipoteka.alfabank.ru
testamcalls.alfabank.ru
abm.alfabank.ru
learn.alfabank.ru
alfabank.ru
atv.alfabank.ru
online.alfabank.ru
kassa.alfabank.ru
pay.alfabank.ru
online.alfabank.ru
baas.alfabank.ru
metrics.alfabank.ru
pilots.alfabank.ru
alfapartners.alfabank.ru
my.alfabank.ru
push.alfabank.ru
api.alfabank.ru
pay2.alfabank.ru
partner.alfabank.ru
Certificate
The complete raw certificate details for cit.alfabank.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCA1KgAwIBAgIQUeQTSxEJTV9uXg+g4qcSxDANBgkqhkiG9w0BAQsFADBi MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEaMBgGA1UEAwwRSEFSSUNBIERWIFRMUyBS U0EwHhcNMjQwMjA3MTAyOTI1WhcNMjUwMjA2MTAyOTI1WjAaMRgwFgYDVQQDDA9j aXQuYWxmYWJhbmsucnUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA PAeMV3yjqWuHfiujVy8FTdO8CAVrDPOlF4F3VPMI54yXPujEN0/pDcQduAuHTGgz nafh6ZixrUztfBOsAmaz+3csmsITKuMq3EqM242l6olMzsZz6XOckhsERmM0ANyn 2Km9thesHGBQ3F/CdsdtENhunOVcUdGeuoEIXP0dQGSvJGvFZrlFAcAFRg7vIi3o M107TlG29Jsbl+CpzLuOPoF5JNiUsjYvHlqClkcxCapefU3E+R0dsmMHMg8pBj1Z 4Hdm6PphLHbm2/Qw1NGFInYjkNtPG1in7dtqK8qbw8Jl8asS3jQTOYEBTvOnWhjK CpVdpNhBRyPuywEtO1ovAgMBAAGjggFiMIIBXjAfBgNVHSMEGDAWgBQKiKu8i/D1 SuxhRFBARMGHZt7eUTBsBggrBgEFBQcBAQRgMF4wOQYIKwYBBQUHMAKGLWh0dHA6 Ly9jcnQuaGFyaWNhLmdyL0hBUklDQS1EVi1UTFMtU3ViLVIxLmNlcjAhBggrBgEF BQcwAYYVaHR0cDovL29jc3AuaGFyaWNhLmdyMBoGA1UdEQQTMBGCD2NpdC5hbGZh YmFuay5ydTAtBgNVHSAEJjAkMAgGBmeBDAECATAIBgYEAI96AQYwDgYMKwYBBAGB zxEBAQEBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA+BgNVHR8ENzA1 MDOgMaAvhi1odHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtRFYtVExTLVN1Yi1S MS5jcmwwDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4ICAQCxONmXmViuvVZMXnWR38VpTM22bme8jWcVQZcJudkG8sqh uzYXzxGJU6R4Lo53bQ4xmEj3bJ1zbvEqSYRyyfnoSQPLdWxPvF+jJmPnPVXXW9ro HJayUH5IKIlhEcoZYci4o8W0r5RFHNwqi4YnoC1cL3kifw33FoDLAQhCHSdfSOfm vVSDNjxAQZsWbL2MnQsmbyyCBSknKIlF2YZVWqfhL/QgWbTRGsFcGygaVLcY+EBt GysSs0Duf/5IuiWDRs1NAnTcx9oXbH3ZOhdoZ7f3KpSxXRHX354u5CeSA0jciQI8 3sr/zsWIpES9Jiuko+kOEcx6b0mjmrs2EycgyDLlD7r233e1Lgrehy0ozdtSuJhd IHro3ylObKV62NFoRhRQLEcm5MyPWp3+9+vrz869bcSPha1fMZRJhlGUkGu3fcVk M+re5ARblip6HblHJqmeh3i7G0Afqc3MCaHLm7fsdz+o3dj7WEjkD6J3B561dh3E RjqWyU98zXBtzhNczRG98S432nNp6nl13mA1Szb3qLMhrdxbmw+/jTN9634qziTy 3vIegnY9YBqzGekFqwki8LGGrkhzyNrzoxB0mI/i0wD2aPEh11CUVxLcqBIKT3Kv lUOoxiUN5pBeWaZFSOWnxxMgHGpoWJr69qG9Im6CXJWSqgmMYGnpeMG7mtHPtQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDwHjFd8o6lrh34ro1cv BU3TvAgFawzzpReBd1TzCOeMlz7oxDdP6Q3EHbgLh0xoM52n4emYsa1M7XwTrAJm s/t3LJrCEyrjKtxKjNuNpeqJTM7Gc+lznJIbBEZjNADcp9ipvbYXrBxgUNxfwnbH bRDYbpzlXFHRnrqBCFz9HUBkryRrxWa5RQHABUYO7yIt6DNdO05RtvSbG5fgqcy7 jj6BeSTYlLI2Lx5agpZHMQmqXn1NxPkdHbJjBzIPKQY9WeB3Zuj6YSx25tv0MNTR hSJ2I5DbTxtYp+3baivKm8PCZfGrEt40EzmBAU7zp1oYygqVXaTYQUcj7ssBLTta LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 108851702655491275238028776530977952452 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hellenic Academic and Research Institutions CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HARICA DV TLS RSA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 10:29:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-06 10:29:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cit.alfabank.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24267356195901277400061835061584247243621185680907868434511514369498334175175121712401938590031503510178300796668542006911297193315232067416426133227989596795734700004365711143870853609716116432970511848374914196795131393935862686539519619142634578230668637989707994909784118627491212383806485426308046016716803067934625356010128301499576527576038761407441264104359867162733663438482515191735436704984747225540604471237727483457846712812146366146773760973040216719230316603642159307049555272261108382624759799394421930557893161621517125998523553015521930875466950575515977254323149547702714333397410317497081565764143 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0a88abbc8bf0f54aec6144504044c18766dede51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.harica.gr/HARICA-DV-TLS-Sub-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.harica.gr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cit.alfabank.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.26513.1.1.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.harica.gr/HARICA-DV-TLS-Sub-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00b138d9979958aebd564c5e7591dfc5694ccdb66e67bc8d6715419709b9d906f2caa1bb3617cf118953a4782e8e776d0e319848f76c9d736ef12a498472c9f9e84903cb756c4fbc5fa32663e73d55d75bdae81c96b2507e4828896111ca1961c8b8a3c5b4af94451cdc2a8b8627a02d5c2f79227f0df71680cb0108421d275f48e7e6bd5483363c40419b166cbd8c9d0b266f2c82052927288945d986555aa7e12ff42059b4d11ac15c1b281a54b718f8406d1b2b12b340ee7ffe48ba258346cd4d0274dcc7da176c7dd93a176867b7f72a94b15d11d7df9e2ee427920348dc89023cdecaffcec588a444bd262ba4a3e90e11cc7a6f49a39abb36132720c832e50fbaf6df77b52e0ade872d28cddb52b8985d207ae8df294e6ca57ad8d1684614502c4726e4cc8f5a9dfef7ebebcfcebd6dc48f85ad5f319449865194906bb77dc56433eadee4045b962a7a1db94726a99e8778bb1b401fa9cdcc09a1cb9bb7ec773fa8ddd8fb5848e40fa277079eb5761dc4463a96c94f7ccd706dce135ccd11bdf12e37da7369ea7975de60354b36f7a8b321addc5b9b0fbf8d337deb7e2ace24f2def21e82763d601ab319e905ab0922f0b186ae4873c8daf3a31074988fe2d300f668f121d750945712dca8120a4f72af9543a8c6250de6905e59a64548e5a7c713201c6a68589afaf6a1bd226e825c9592aa098c6069e978c1bb9ad1cfb5