*.vincentz.dk

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 6f:b1:19:13:fc:53:b2:46:31:7f:91:3f was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.vincentz.dk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 6f:b1:19:13:fc:53:b2:46:31:7f:91:3f
Serial Number (int): 34566934388073373269158236479
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a3:59:13:e9:27:54:3f:bd:a8:20:af:75:82:57:74:97:38:55:72:e5
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 46:e7:4b:37:af:6e:24:f4:a2:bb:fd:de:3d:21:89:b4:00:c8:e7:2f
Fingerprint (sha256): 03:8a:c8:10:e0:88:fe:84:5b:1f:7c:36:74:7f:e7:d9:d3:ef:91:de:61:6e:d1:c6:35:25:b6:52:ed:cc:fe:8a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.vincentz.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vincentz.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vincentz.dk
vincentz.dk

Other certificates including the domain name vincentz.dk

(limited to 100 certificates)
vincentz.dk
supporto.cgshop.it
mbg.vincentz.dk
*.vincentz.dk
vincentz.dk
support.edclass.com
ifragasatt.support.automat-it.io
technical.subrosagroup.co.uk
service.werobot.de
*.vincentz.dk
vincentz.dk
support.flylumo.co.uk
vincentz.dk
micc.vincentz.dk
vincentz.dk
nav2013r2.vincentz.dk
vincentz.dk
vincentz.dk
ifragasatt.support.automat-it.io
desk.ascent-makler.de
vincentz.dk
vincentz.dk
vincentz.dk
vincentz.dk
vincentz.dk
support.oddly.digital
supporto.cgshop.it
mbg.vincentz.dk
desk.ascent-makler.de
vincentz.dk
support.edclass.com
desk.ascent-makler.de
vincentz.dk
mbg.vincentz.dk
vincentz.dk
ithelpdesk.heart-england.co.uk
vincentz.dk
propertymaintenance.ssphealth.com
mbg.vincentz.dk
desk.ascent-makler.de
vincentz.dk
propertymaintenance.ssphealth.com
vincentz.dk
vincentz.dk
desk.ascent-makler.de
kundeportal.vincentz.dk
mail.vincentz.dk
help.scalarly.com
propertymaintenance.ssphealth.com
desk.ascent-makler.de
vincentz.dk
ithelpdesk.heart-england.co.uk
service.werobot.de
www.nav2013r2.vincentz.dk
help.scalarly.com
technical.subrosagroup.co.uk
vincentz.dk
desk.ascent-makler.de
vincentz.dk
supporto.cgshop.it
desk.ascent-makler.de
vincentz.dk
help.scalarly.com
desk.ascent-makler.de
vincentz.dk
vpn.vincentz.dk
kundeportal.vincentz.dk
desk.ascent-makler.de
kundeportal.vincentz.dk
support.flylumo.co.uk
ifragasatt.support.automat-it.io
ithelpdesk.heart-england.co.uk
support.flylumo.co.uk
vincentz.dk
vincentz.dk
help.scalarly.com
vincentz.dk
vincentz.dk
service.werobot.de
technical.subrosagroup.co.uk
kundeportal.vincentz.dk
vpn.vincentz.dk
support.edclass.com
vpn.vincentz.dk
vpn.vincentz.dk
ithelpdesk.heart-england.co.uk
support.flylumo.co.uk
vincentz.dk
ifragasatt.support.automat-it.io
mbg.vincentz.dk
vincentz.dk
vpn.vincentz.dk
micollab.vincentz.dk
vincentz.dk
technical.subrosagroup.co.uk
support.edclass.com
support.digital-vorwaerts.de
mbg.vincentz.dk
vincentz.dk
vincentz.dk

Certificate

The complete raw certificate details for *.vincentz.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIMb7EZE/xTskYxf5E/MA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDYwNjA5MjYw
NloXDTI1MDcwODA5MjYwNVowGDEWMBQGA1UEAwwNKi52aW5jZW50ei5kazCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMAZa/rqomIT4uwG0OImanigZHa3
jVMgjRwn0qSPleFukCgPHxX521+vDiPGpwLUl+R9eLhkdxkNVabBhvH0TPm40VBc
z+4wDGYiarDNeIwikR34Bfc6IXiHXIwIw/OPeilcxkkYvB8KZYbOWzt9LBo+IOji
6aspNQhRM4T5lIsBeghsgqCSWa27C20V2gxKQJu+c+/goKt6vSc9a6X0v9pHwuLq
JAWu1n4oHG7X0anf3p+hF7cFTQMgRruzzdpv2ZiT4avWCrQq+DtZDVgCBPD8isoC
uYzuNcb8Tp+VYg7UMqRPeB1lvv4s1mkoYAeKQBsnWZl7/oo2V40GGkWg5E82a6VZ
TKUlCGM7ah4rMFF88hVfGM1LbxHfOZM5GzrIBMvCSvo0jN/pxCXci/+K/Vov7HnK
XeJ2mkB7o+HIlm3WI/6y8pCHRdRmoTbTOP98Sy87oS7FPZMxRvZb9i35LbSsrpHM
3YrD4hsQOn3641c1Lqo17Ep39oX1bX2fMa6Sl7Mlm+4luEov+Bcctueo/Z8/fuSD
lcFpGrc6G3OcwVPHttX3gA9Pmh8lHqpErw1dLTTxTkGn89CVCjwY4H12GMuxBJtg
5iU4rnqqj2PVMER//N+ma2C+eZhxjyuHYNSk//BrPJSsuijRWOEphhxdrsyTENW4
LcnH/U++bKTgWusdAgMBAAGjggH4MIIB9DAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADCBmQYIKwYBBQUHAQEEgYwwgYkwSQYIKwYBBQUHMAKGPWh0dHA6Ly9z
ZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZ2NjcjZhbHBoYXNzbGNhMjAy
My5jcnQwPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dz
Z2NjcjZhbHBoYXNzbGNhMjAyMzBXBgNVHSAEUDBOMAgGBmeBDAECATBCBgorBgEE
AaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t
L3JlcG9zaXRvcnkvMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwuZ2xvYmFs
c2lnbi5jb20vZ3NnY2NyNmFscGhhc3NsY2EyMDIzLmNybDAlBgNVHREEHjAcgg0q
LnZpbmNlbnR6LmRrggt2aW5jZW50ei5kazAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHwYDVR0jBBgwFoAUvQW384qTPHPLefoPhRKhd5YYkXQwHQYDVR0O
BBYEFKNZE+knVD+9qCCvdYJXdJc4VXLlMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAPlccY4stM/OFHqg0wKS/+iTQgK5C4fZP0WaWQ1iy3
PcJzUn4Zv6xybtnsHNQn9UdpXLVP/WETede6AAGRs5lNMVFwGzMMZ6lzuB/FwxTd
jYCmOtiePShJslwBxdcDS1VaxFvcul7EYOyjsqWf9F107sCshsl2o9jn0R/c28YY
eHyFb0P8gYHIa2mxOFUp2HvLFneTKRQKy02VVL0tImzJVSRTHXq8QTmPJIcgP5m+
OoGZlpO4dk/Xgtd+/3ZvlswUlWCEnHIL/CJSQMLdll0T2h2SW3mBroEQ/CD5qLQ4
cXfpsZT1Nlce17fq17gRFJAbSTiUVTt4yNZLiDFwWjr3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34566934388073373269158236479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 09:26:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-08 09:26:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vincentz.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783696785611013418263953188078557987913133469287291057602663823325309971253526913232119291869794290823720634374419208946132406874038890996326965551424078739855839266659766616593011809837153855565336105181672617440360228242272081013510239816678412628019207229994673762226276912650952451693670982328936359717436072968959895015172895162221711311638435652389327955486375868563191697037016608953036344564293197760588788920900731681698002420443578403944911708261311932686340712449126977858028259998799728747872322724743934790827727126967777542038133697826488971547896860391414818824040812054112252870017541011847356542741882669165137653971330988631957941335185832955084654477292739921409007284283580746130431937117719279688859090586924332746844519978784242573856995122959235421650199167778224837592855864756707164454958358043922113484314002671814306112298745801548577537388067877710139380971840870078353108165985453645144777188434799006707920704086602627707660730824236127471819958462114868469071670270932763485906670815410530513857146101118054708372459917148394945399378666246141950439244396127336683029011799390169445011549333168217038602927005574142772562935061422630534160944289546144575640338364912602677028825610462990582443199359773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vincentz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vincentz.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a35913e927543fbda820af7582577497385572e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f95c718e2cb4cfce147aa0d30292ffe8934202b90b87d93f459a590d62cb73dc273527e19bfac726ed9ec1cd427f547695cb54ffd611379d7ba000191b3994d3151701b330c67a973b81fc5c314dd8d80a63ad89e3d2849b25c01c5d7034b555ac45bdcba5ec460eca3b2a59ff45d74eec0ac86c976a3d8e7d11fdcdbc618787c856f43fc8181c86b69b1385529d87bcb16779329140acb4d9554bd2d226cc95524531d7abc41398f2487203f99be3a81999693b8764fd782d77eff766f96cc149560849c720bfc225240c2dd965d13da1d925b7981ae8110fc20f9a8b4387177e9b194f536571ed7b7ead7b81114901b493894553b78c8d64b8831705a3af7