message.alfabank.ru
Issued by HARICA DV TLS RSA
About this certificate
This digital certificate with serial number 0c:5f:a0:d3:2a:e7:7f:69:06:68:54:24:00:a4:b6:5d was issued on by Hellenic Academic and Research Institutions CA.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=message.alfabank.ru
Hellenic Academic and Research Institutions CA
Organization:
Hellenic Academic and Research Institutions CA
Country:
GR
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:5f:a0:d3:2a:e7:7f:69:06:68:54:24:00:a4:b6:5dSerial Number (int): 16447266066936907831339781558274143837
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 0a:88:ab:bc:8b:f0:f5:4a:ec:61:44:50:40:44:c1:87:66:de:de:51
Fingerprint (sha1): cf:97:22:8e:92:ec:50:32:d7:8f:80:1f:57:c4:a2:8b:c6:9e:00:5f
Fingerprint (sha256): 08:7c:bb:60:a1:27:0d:43:a7:2c:8b:46:21:27:7a:ba:05:49:99:40:98:a9:27:f0:94:83:4a:13:76:cf:79:2b
Issuing Certificate URL: http://crt.harica.gr/HARICA-DV-TLS-Sub-R1.cer
Revocation information
OCSP Server: http://ocsp.harica.grCRL Distribution Point: http://crl.harica.gr/HARICA-DV-TLS-Sub-R1.crl
Check the revocation status for certificate message.alfabank.ru
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for message.alfabank.ru
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
message.alfabank.ru
Other certificates including the domain name alfabank.ru
(limited to 100 certificates)
traveler2.alfabank.ru
agent.alfabank.ru
agent.alfabank.ru
digital.alfabank.ru
ib.alfabank.ru
travelernext.alfabank.ru
zp.alfabank.ru
anketa.alfabank.ru
ib.alfabank.ru
club.alfabank.ru
pilots.alfabank.ru
emp-lead.alfabank.ru
digp.alfabank.ru
alfapartners.alfabank.ru
click.alfabank.ru
welcome.alfabank.ru
cit.alfabank.ru
ctxvdi.alfabank.ru
my.alfabank.ru
settings.alfabank.ru
reg.alfabank.ru
trading.alfabank.ru
groupib-ac.alfabank.ru
anketa.alfabank.ru
rko.alfabank.ru
sense.alfabank.ru
payment.alfabank.ru
id.alfabank.ru
traveler2.alfabank.ru
job.alfabank.ru
zp.alfabank.ru
potok.alfabank.ru
alfapeople.alfabank.ru
telework.alfabank.ru
trade.alfabank.ru
click.alfabank.ru
link.alfabank.ru
travelervip.alfabank.ru
acs.alfabank.ru
emp-anketa.alfabank.ru
message.alfabank.ru
id-hub-sandbox.alfabank.ru
mind.alfabank.ru
testlink.alfabank.ru
blackstar.alfabank.ru
ecom.alfabank.ru
travelernext.alfabank.ru
sandbox.alfabank.ru
travelervip.alfabank.ru
alfago.alfabank.ru
click.alfabank.ru
travel.alfabank.ru
alfabank.ru
investments.alfabank.ru
CC.ALFABANK.RU
design.alfabank.ru
chatkb.alfabank.ru
design.alfabank.ru
link.alfabank.ru
nalog.alfabank.ru
zp.alfabank.ru
private.auth.alfabank.ru
store.alfabank.ru
private.auth.alfabank.ru
alfabank.ru
welcome.alfabank.ru
scf.alfabank.ru
club.alfabank.ru
usability.alfabank.ru
private.auth.alfabank.ru
link.alfabank.ru
digp.alfabank.ru
rko.alfabank.ru
alfapartners.alfabank.ru
megaplan.alfabank.ru
alfainvest.alfabank.ru
guarantees.alfabank.ru
click.alfabank.ru
digp.alfabank.ru
pay2.alfabank.ru
traveler2.alfabank.ru
ipoteka.alfabank.ru
testamcalls.alfabank.ru
abm.alfabank.ru
learn.alfabank.ru
alfabank.ru
atv.alfabank.ru
online.alfabank.ru
kassa.alfabank.ru
pay.alfabank.ru
online.alfabank.ru
baas.alfabank.ru
metrics.alfabank.ru
pilots.alfabank.ru
alfapartners.alfabank.ru
my.alfabank.ru
push.alfabank.ru
api.alfabank.ru
pay2.alfabank.ru
partner.alfabank.ru
agent.alfabank.ru
agent.alfabank.ru
digital.alfabank.ru
ib.alfabank.ru
travelernext.alfabank.ru
zp.alfabank.ru
anketa.alfabank.ru
ib.alfabank.ru
club.alfabank.ru
pilots.alfabank.ru
emp-lead.alfabank.ru
digp.alfabank.ru
alfapartners.alfabank.ru
click.alfabank.ru
welcome.alfabank.ru
cit.alfabank.ru
ctxvdi.alfabank.ru
my.alfabank.ru
settings.alfabank.ru
reg.alfabank.ru
trading.alfabank.ru
groupib-ac.alfabank.ru
anketa.alfabank.ru
rko.alfabank.ru
sense.alfabank.ru
payment.alfabank.ru
id.alfabank.ru
traveler2.alfabank.ru
job.alfabank.ru
zp.alfabank.ru
potok.alfabank.ru
alfapeople.alfabank.ru
telework.alfabank.ru
trade.alfabank.ru
click.alfabank.ru
link.alfabank.ru
travelervip.alfabank.ru
acs.alfabank.ru
emp-anketa.alfabank.ru
message.alfabank.ru
id-hub-sandbox.alfabank.ru
mind.alfabank.ru
testlink.alfabank.ru
blackstar.alfabank.ru
ecom.alfabank.ru
travelernext.alfabank.ru
sandbox.alfabank.ru
travelervip.alfabank.ru
alfago.alfabank.ru
click.alfabank.ru
travel.alfabank.ru
alfabank.ru
investments.alfabank.ru
CC.ALFABANK.RU
design.alfabank.ru
chatkb.alfabank.ru
design.alfabank.ru
link.alfabank.ru
nalog.alfabank.ru
zp.alfabank.ru
private.auth.alfabank.ru
store.alfabank.ru
private.auth.alfabank.ru
alfabank.ru
welcome.alfabank.ru
scf.alfabank.ru
club.alfabank.ru
usability.alfabank.ru
private.auth.alfabank.ru
link.alfabank.ru
digp.alfabank.ru
rko.alfabank.ru
alfapartners.alfabank.ru
megaplan.alfabank.ru
alfainvest.alfabank.ru
guarantees.alfabank.ru
click.alfabank.ru
digp.alfabank.ru
pay2.alfabank.ru
traveler2.alfabank.ru
ipoteka.alfabank.ru
testamcalls.alfabank.ru
abm.alfabank.ru
learn.alfabank.ru
alfabank.ru
atv.alfabank.ru
online.alfabank.ru
kassa.alfabank.ru
pay.alfabank.ru
online.alfabank.ru
baas.alfabank.ru
metrics.alfabank.ru
pilots.alfabank.ru
alfapartners.alfabank.ru
my.alfabank.ru
push.alfabank.ru
api.alfabank.ru
pay2.alfabank.ru
partner.alfabank.ru
Certificate
The complete raw certificate details for message.alfabank.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCA1qgAwIBAgIQDF+g0yrnf2kGaFQkAKS2XTANBgkqhkiG9w0BAQsFADBi MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEaMBgGA1UEAwwRSEFSSUNBIERWIFRMUyBS U0EwHhcNMjQwMjA3MTQyMDA5WhcNMjUwMjA2MTQyMDA5WjAeMRwwGgYDVQQDDBNt ZXNzYWdlLmFsZmFiYW5rLnJ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNrAEbZ3FZBbJJcBmvJHuw8JxGxxPsAaUNw77wVixVEACyOgVJUNOK/Di8A0 aSgl+LzPlllcHxQ4th531FxQYic3XZ6tYkrpR3gKKSmmo39VWitHAsjj28ubWZ84 KdPNAWV3jOVXaG8OTHizmYKfcRh6lhgm8J0QkMFRZiSRK1/j1/QO3f+G5xS179/y PnhcSVkbGxBCvziYUk8/Py8mjfvmcR/pXYdn/DvRb8wWf5k9CdYOTs+8/MMJjVIs Sivm0/tMl0GL1rI666xJS+GM/+0Ya6oqXFwPlyAdhK1Y9XobkJxSrtIMvPX3muHB OpjWGuFV+IjMFLKR5bVftHv6HwIDAQABo4IBZjCCAWIwHwYDVR0jBBgwFoAUCoir vIvw9UrsYURQQETBh2be3lEwbAYIKwYBBQUHAQEEYDBeMDkGCCsGAQUFBzAChi1o dHRwOi8vY3J0LmhhcmljYS5nci9IQVJJQ0EtRFYtVExTLVN1Yi1SMS5jZXIwIQYI KwYBBQUHMAGGFWh0dHA6Ly9vY3NwLmhhcmljYS5ncjAeBgNVHREEFzAVghNtZXNz YWdlLmFsZmFiYW5rLnJ1MC0GA1UdIAQmMCQwCAYGZ4EMAQIBMAgGBgQAj3oBBjAO BgwrBgEEAYHPEQEBAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMD4G A1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jcmwuaGFyaWNhLmdyL0hBUklDQS1EVi1U TFMtU3ViLVIxLmNybDAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggIBAAubTr9BgpJfU0f0/2jCwRlp3z7RJwomLwBS H+tWstYdshh0GazyXFpRsg2z2PQYud4rm7IIwPFYiX7DVLJH8oi9z+pmwN6ljfql /qqMna6/JsWNI6noq77w8UtBtaXK/S7gwzT3tQsbRrJ1DMUNid/o+0GmlYsAQUhP az21IYSGegwZRbGrLPs4SJjo2dR85T8onVpKpJFMiNHgc4TOMt/adBAwYq0kQZre 8UhcwZrHCRqR6E5++BexjQ79MHM4FDZPxLcIc+Vr8kwm0fRu0c8o/vBMfoozx8lr rQ8uJmfAhoNiPGF82syzh5DUEc6hQC1HD4k2xbw7rOK2n9OHTx9EhHUXuGOfjlMo I9nnMU5K3Nkxfaf6GGvj4gG8B5liPpYbS4C3k8vEoG8jptdaEqxcGY7jwPiPD4MF 0bILXyBS0MVpe15AwQ5JRGXxtEZfqT1pjXtFIAsaT4N2WnBJplPsPxJp8lRLSUXp 0aWWWtNKwKWP4vo7G6MsjbshdeU5Jzumq/wWyt0uS+OwuXQ4BA0i9Pdm9Wxr4JNE 12prgCmIvM/C6i6qOFctep4aftlfSX01E11omCrG2HZTzIxRe2bRCkSFEYRp0DkB ivfnwy6Os/98+oFE8ZBivB+W8pQOTHPwFNZ4VlPh8FCsbdNgWagJ9p8n8EmyDJvx m+6del33 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNrAEbZ3FZBbJJcBmvJH uw8JxGxxPsAaUNw77wVixVEACyOgVJUNOK/Di8A0aSgl+LzPlllcHxQ4th531FxQ Yic3XZ6tYkrpR3gKKSmmo39VWitHAsjj28ubWZ84KdPNAWV3jOVXaG8OTHizmYKf cRh6lhgm8J0QkMFRZiSRK1/j1/QO3f+G5xS179/yPnhcSVkbGxBCvziYUk8/Py8m jfvmcR/pXYdn/DvRb8wWf5k9CdYOTs+8/MMJjVIsSivm0/tMl0GL1rI666xJS+GM /+0Ya6oqXFwPlyAdhK1Y9XobkJxSrtIMvPX3muHBOpjWGuFV+IjMFLKR5bVftHv6 HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16447266066936907831339781558274143837 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hellenic Academic and Research Institutions CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HARICA DV TLS RSA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 14:20:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-06 14:20:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'message.alfabank.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23335717892389187521976937306828834925680913121168310547510742512365118925506625140900438392173547700103399154453493083422195536557206363791921988617490574640739803669049385680842696926558693318510882103221572187022720586510486930093163369241877945156450202047689426133379737785685761822574185488055080435339953071580686810589218130531086280285755444252627154755791605398029974586266559700065623592249721681280705087269548338034018818316313522192650998438878845392302357168906680387148514285408624353370552540890835931215253157405388379577355479258458554183918785225899387783100656780784603068287823759256255870007839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0a88abbc8bf0f54aec6144504044c18766dede51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.harica.gr/HARICA-DV-TLS-Sub-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.harica.gr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.alfabank.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.26513.1.1.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.harica.gr/HARICA-DV-TLS-Sub-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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