prod-divestiture.asda.com

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 52:e8:70:61:03:cb:fb:2f:6b:7a:01:8f was issued on by GlobalSign nv-sa.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 52:e8:70:61:03:cb:fb:2f:6b:7a:01:8f
Serial Number (int): 25658772290154734537525559695
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 84:2b:b7:93:96:f4:27:e9:06:dd:29:45:e4:ba:1a:a7:29:10:d4:f6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 70:aa:40:3a:06:04:4b:26:c5:d2:6e:fb:49:21:48:84:02:5d:37:2f
Fingerprint (sha256): 0d:3b:df:5b:73:e7:a1:e8:67:97:4c:ae:f1:94:29:82:ab:59:8f:15:69:45:7b:44:39:a8:17:50:02:db:a7:d7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate prod-divestiture.asda.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-divestiture.asda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-divestiture.asda.com
commerce.darkzone.asda.com
commerce.hottix.asda.com
corporate.asda.com
corporate.darkzone.asda.com
darkzone.asda.com
hotfix.asda.com
login-test02.hotfix.asda.com
sso-pwa-test02.hotfix.asda.com
www-darkzone.asda.com
www-hotfix.asda.com
sso-pwa.asda.com
api2.asda.com
login.asda.com

Other certificates including the domain name asda.com

(limited to 100 certificates)
connect-dom-cert.cert.hosting.asda.com
connect-mip-cert.cert.hosting.asda.com
S608661SHVW131.sit.hosting.asda.com
prod.asda.com
nonprod.asda.com
S608661RGVW159-cert.cert.hosting.asda.com
prod.asda.com
s608661rgvl479.prd.hosting.asda.com
direct.asda.com
van-insurance.asda.com
i.groceries-qa.asda.com
S608661RGVL464.cert.hosting.asda.com
staging.direct.asda.com
ordertracker.asda.com
homeinsurance.asda.com
www.int.asda.com
gatehouse.asda.com
MQPIB02.cert.hosting.asda.com
vip09-uk-qa-https-web-p-3.walmart.com
lifeandstyle.asda.com
opinion.asda.com
riamoneytransfer.asda.com
MQPFR01-cert.cert.hosting.asda.com
connect-mda-cert.cert.hosting.asda.com
sni.cloudflaressl.com
beacon.walmart.com
your.asda.com
beacon.walmart.com
MQ1SIG01.sit.hosting.asda.com
outgoing-direct.asda.com
groceries-stage.asda.com
connect-sci-02-cert.cert.hosting.asda.com
vip28-i5-ca-qa-https-web-p-7.walmart.com
beacon.qa.walmart.com
san-4-s51.tlsprovisioning.exacttarget.com
cdn.corporate.walmart.com
MQ1LBK01.prd.hosting.asda.com
ccservice-nonprod.walmart.com
corporate.walmart.com
carinsurance.asda.com
s608661rgvl479.prd.hosting.asda.com
prod.asda.com
caravan-insurance.asda.com
connect-cdm-cert.cert.hosting.asda.com
s608661shvl389.prd.hosting.asda.com
business.asda.com
www.int.asda.com
your.asda.com
connect-mda.prd.hosting.asda.com
xi52-optix.cert.hosting.asda.com
migeorge.asda.com
storelocator.asda.com
vip09-uk-qa-https-web-p-3.walmart.com
nonprod.asda.com
asdagiftcards.com
mqigw-lb-vpt.test.hosting.asda.com
development-direct.asda.com
xi52-cert.cert.hosting.asda.com
staging.direct.asda.com
MQLBK01.prd.hosting.asda.com
MQ1DBK01.dev.hosting.asda.com
i.groceries.asda.com
uat-money.asda.com
xi52-cert.cert.hosting.asda.com
beacon.walmart.com
omniture-ssl.direct.asda.com
origin-prod.asda.com
vip09-uk-qa-https-web-p-3.walmart.com
S608661SHVL37D.sit.hosting.asda.com
beacon.walmart.com
homeinsurance.asda.com
MQ1PXR01-cert.cert.hosting.asda.com
priceguarantee.asda.com
BRACKMILLS-dev.dev.hosting.asda.com
vip17-uk-non-prod-https-web-p-1.walmart.com
omniture-ssl.direct.asda.com
outgoing-direct.asda.com
beacon.walmart.com
DONCASTER-dev.dev.hosting.asda.com
opinion.asda.com
omniture-ssl.groceries-qa.asda.com
prod.asda.com
OLLERTON-cert.cert.hosting.asda.com
MQPFR02-cert.cert.hosting.asda.com
travelinsurance.asda.com
xi52-toyou.cert.hosting.asda.com
academy.asda.com
xi52-optix.sit.hosting.asda.com
prod-divestiture.asda.com
vip11-sams-qa-https-web-p-5.walmart.com
MQLMF01.prd.hosting.asda.com
OLLERTON-prod.prd.hosting.asda.com
hsc-mif-cert.cert.hosting.asda.com
nonprod.asda.com
help.asda.com
DOTCOM-MIF-prod.prd.hosting.asda.com
qa-money.asda.com
S608661SHVL374.dev.hosting.asda.com
connect-dm303-cert.cert.hosting.asda.com
opinion.asda.com

Certificate

The complete raw certificate details for prod-divestiture.asda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dPdlkZOcWIRfQInEqon
zPRCdtJ4kWE3+3SLnd4CvhlLA/MvG4bsKAj3osbuGMeS1xziRMz8IZCHDhbNwtU8
gbKgMUw53WIYWIDUeJNGNv6tLF+EryXlv6vk0E87XWiaI7dNfZX7V0pP76tsEsNd
A1O6kYK541CeSwxShAQcRs5p7TEqkh8JMfe8e9jJR9dP35MalO01keevm+v6tR0n
yOMmKvnwDBJHwGttPhJJk19P67ZiTzXnwl0fI1kv3yy52GqIXeGV1Uwemu5LMHOm
QYy9At6oNSOvY29OYCcnDYIysic8adTuC1bfulnyjrZb0fed9syvsTlUGRO36oh6
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25658772290154734537525559695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 09:01:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-26 09:01:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-divestiture.asda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26488280546402776547220361329966762463263575868670074027056650265137361770676808001246695053103060697868714672388134688476633632235090457867014360543895545500626758242490985305831798044344407652951046807682760300953914547004837402857109529724285016385853365122062111236147968900088555951319158008917335354531172142217669265375074360091171769918182010678813157498719220366095425322387530556308689228157299394409619003707597623805564333459389894027406615754817061070334185179920493655674107806364511738862104101685219417843208584072826678025906234734823644865938445592748262718606465841418117745552545009004804619926161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-divestiture.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.darkzone.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.hottix.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.darkzone.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkzone.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-test02.hotfix.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-pwa-test02.hotfix.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-darkzone.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-hotfix.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-pwa.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.asda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							842bb79396f427e906dd2945e4ba1aa72910d4f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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