amelvina.qc.to

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 63:64:10:c2:ff:6a:e3:01:94:d0:d0:1e:9b:95:28:49 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=amelvina.qc.to

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:64:10:c2:ff:6a:e3:01:94:d0:d0:1e:9b:95:28:49
Serial Number (int): 132113141236425236022022023147381139529
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cf:1a:b7:07:2c:e1:ee:27:8e:bf:22:80:64:43:1e:a6:df:d8:df:7b
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): b4:e0:ed:85:c4:b4:13:dd:8a:3e:65:18:48:ca:50:54:f8:3c:07:f3
Fingerprint (sha256): 07:46:aa:db:5f:14:28:c3:26:f3:94:18:19:d3:b2:2a:57:7b:45:e0:30:35:cb:06:48:69:33:27:0d:b1:ef:b7

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate amelvina.qc.to

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amelvina.qc.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amelvina.qc.to

Other certificates including the domain name qc.to

(limited to 100 certificates)
rslex.qc.to
rswqdya.qc.to
isaf.qc.to
metahum.qc.to
sokora.qc.to
ngmt.qc.to
jofnes.qc.to
npebwhk.qc.to
toba.qc.to
ydfrtew.qc.to
ujyjp.qc.to
khaithue.qc.to
jyxf.qc.to
gnkclik.qc.to
akitis.qc.to
mblake.qc.to
fvfv.qc.to
foodesignet.qc.to
wertzcandy.qc.to
beytty.qc.to
ecomet.qc.to
wwddg.qc.to
lyumjcf.qc.to
voic.qc.to
fb.netwrk.qc.to
irhd.qc.to
gawallypusa.qc.to
gordon.qc.to
lpli.qc.to
mcarthu.qc.to
blanjff.qc.to
lignarius.qc.to
webmail.birac.qc.to
stalbanscivicsocietys.qc.to
hxcz.qc.to
lvncim.qc.to
db.qc.to
robert.qc.to
naony.qc.to
tngtetds.qc.to
werguwetan.qc.to
dmningh.qc.to
ejeah.qc.to
c3.qc.to
iuyny.qc.to
underby.qc.to
potr.qc.to
best.qc.to
kbdyy.qc.to
caramembuatwebs.qc.to
iwritemyhearts.qc.to
kamus.qc.to
witlder.qc.to
kjauay.qc.to
ltmyf.qc.to
siwanv.qc.to
nvxnl.qc.to
xeon.qc.to
vetppci.qc.to
nkimin.qc.to
watkins.qc.to
simonialparadox.qc.to
hsoe.qc.to
kgpo.qc.to
byoxo.qc.to
matyti.qc.to
rntiagh.qc.to
maiden.qc.to
elseti.qc.to
appint.qc.to
riaki.qc.to
box.qc.to
cidfvwe.qc.to
umreg.qc.to
hastritoka.qc.to
coachingsecuritetravails.qc.to
frsbdxn.qc.to
mugglepride.qc.to
kwnijse.qc.to
rfie.qc.to
johne.qc.to
xzvmy.qc.to
knua.qc.to
toon-orgies.qc.to
ex.qc.to
nbwmxai.qc.to
cloud.qc.to
kaulahjantungku.qc.to
rakuti.qc.to
spearman.qc.to
cxbr.qc.to
ancart.qc.to
gajahmada.qc.to
ehqrrov.qc.to
imbh.qc.to
sadbin.qc.to
lamaison.qc.to
testnet.qc.to
humunkare.qc.to
dodqe.qc.to

Certificate

The complete raw certificate details for amelvina.qc.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzTCCA7WgAwIBAgIQY2QQwv9q4wGU0NAem5UoSTANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTIzMDIwODE2NDczMVoXDTIzMDUyMzE2NDcyN1owGTEXMBUG
A1UEAwwOYW1lbHZpbmEucWMudG8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEbF9lkJle1RXztDeaKJv/N6S9aGZfvz+aqNcMyOCQ5NRhT89TDfBxuiWn
rE/ditjxU4McQS5i9wqxPVP3knSUr0xCkibZEsYSSmFYCHTyaQ8UcmN5e53GEcEK
w0FM0mzAZvZxMMdvntliLFHPZA/bLPBMEJrWXmXo7J284SV+/d/yCVJF9AqwGEti
x4ZdYrrDDZX0fwhvPQgr1dS7ndmevyPrGGLrMuw/S/0P3J9JhoT+6c8jBdhdhbH+
4+48eCeXDRJSkmyuOmJc99WUKCPNRCvYriMls+oTB4qjDjc6unejEx3jeO2aQ7vM
Ww38Pyfi5+MNYaN/3495cm15bASvAgMBAAGjggG/MIIBuzAMBgNVHRMBAf8EAjAA
MB8GA1UdIwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHIGCCsGAQUFBwEBBGYw
ZDBABggrBgEFBQcwAoY0aHR0cDovL2NlcnQuc3NsLmNvbS9TU0xjb20tU3ViQ0Et
U1NMLVJTQS00MDk2LVIxLmNlcjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3BzLnNz
bC5jb20wGQYDVR0RBBIwEIIOYW1lbHZpbmEucWMudG8wUQYDVR0gBEowSDAIBgZn
gQwBAgEwPAYMKwYBBAGCqTABAwEBMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3
LnNzbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybHMuc3NsLmNvbS9TU0xjb20t
U3ViQ0EtU1NMLVJTQS00MDk2LVIxLmNybDAdBgNVHQ4EFgQUzxq3Byzh7ieOvyKA
ZEMept/Y33swDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4ICAQAU0qST2LI5MAaRYDgR9k1BPVhBBPpgl0ejN64yJxvv
c5Qfxj9lLc85gAexNj/Cur1lJpSABbX0NReAytdQFgYRFHGyyPdWd/4AekKW3+yq
b/G7B8pkEKEJBvOmLCpsgJgYzF7g7xQCb/nz/Nz6eDkonAL9TmFGkfhbQxCZvJO2
u3vaShR8h8Dn2l6ZH/8gH0Yk2kHk8X0WZcOwMRaQWbYIlhkvFD8Xa/DaTFvOywjO
v9D8B0ENlQxeDOdzXKR3RLlPTO++Imw0kik5cx3zlOjnRxJ5BmgkwseSsLJ1RDLV
FHrQ+Rt/TAmxetvcjCHG4I7oHZ0/u1W+q+N+USyUP+X6bbBwEKkd1XxlRie4/3z1
ebhaMnIEuNFaImrrziEQ3DqT3iPzuZbTqqcKA+NlRnSEU18n6oI2Fh7VLUmlEUqZ
BIt+U+O+bdz7NxxhLydeE2DDvNfGkkNAg3dY+M7WDcqmi3k9B1dUcPoxjhJXG/D6
UzruWxzT2D9Kp02jvQAzzEVdoQElAk8AmPZg0jbqbMAbCjJ5OfGPNA50qgbJ57wG
8UyCTqrvg/mTVi8o9pvbM3FVuxjb6hpx6vuXCMT5GAEnc7dmNzaoyMgTfqAdvjpQ
wtfdjbjPk01e9Nw2I4uQ7veR1w+O+VYI25A2+T2LPBoxy/7wql0mXqKLXC0u+/l7
Bg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGxfZZCZXtUV87Q3miib
/zekvWhmX78/mqjXDMjgkOTUYU/PUw3wcbolp6xP3YrY8VODHEEuYvcKsT1T95J0
lK9MQpIm2RLGEkphWAh08mkPFHJjeXudxhHBCsNBTNJswGb2cTDHb57ZYixRz2QP
2yzwTBCa1l5l6OydvOElfv3f8glSRfQKsBhLYseGXWK6ww2V9H8Ibz0IK9XUu53Z
nr8j6xhi6zLsP0v9D9yfSYaE/unPIwXYXYWx/uPuPHgnlw0SUpJsrjpiXPfVlCgj
zUQr2K4jJbPqEweKow43Orp3oxMd43jtmkO7zFsN/D8n4ufjDWGjf9+PeXJteWwE
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132113141236425236022022023147381139529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 16:47:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 16:47:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'amelvina.qc.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24796148315616818691591732079237343641077308725176124537137575152858352223326278083776916107348427631459332614024123847613107612158994466192372429724287265513398112306511209710931775018444451561044087536377196105338077645276603325628723744117375021966778753937454991784438190293525601001346561757396186845202318879303207593414005777452784510183426128877632553043754736478746129707912304045432487569632699382185361615602770218246377158728212981416100911644201240680689309089583294370406515666730489697289175907030997745805766066171544183825045579569391979140281787570388984123517512905104834209251105427053942414247087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amelvina.qc.to'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf1ab7072ce1ee278ebf228064431ea6dfd8df7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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