sltomcatgrptest.atica.um.es

- Universidad de Murcia -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 07:2b:ee:41:52:75:1d:92:d8:de:65:0d:36:13:4e:b0 was issued on by TERENA.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad de Murcia

Organization: Universidad de Murcia
Organization unit: ATICA
Locality: Murcia
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:2b:ee:41:52:75:1d:92:d8:de:65:0d:36:13:4e:b0
Serial Number (int): 9532697124246996006821187884898537136
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d3:5d:f5:a7:3a:93:da:fb:f5:e1:f0:c1:ff:82:0c:2b:e7:61:5b:48
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 56:fc:c8:f4:b7:c5:32:87:fc:38:2a:50:6f:91:76:5d:7b:fd:3f:c7
Fingerprint (sha256): 0f:02:e5:06:ed:ba:01:db:da:26:ca:d3:6f:08:f3:e0:ef:11:28:b0:aa:ea:e0:e6:9d:38:51:e0:6c:2f:cb:c8

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate sltomcatgrptest.atica.um.es

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sltomcatgrptest.atica.um.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sltomcatgrptest.atica.um.es
protocolotest.um.es
pidumtest.um.es
digitumtest.um.es
digitalumtest.um.es
bibliotecafloridablancatest.um.es
kpismetared.um.es
salidasprofesionalestest.um.es
kpismetaredtest.um.es
opherculestest.um.es
anubitest.um.es

Other certificates including the domain name um.es

(limited to 100 certificates)
glpi-pru.atica.um.es
curiegrptest.atica.um.es
www.symposium.events
um.es
jira-software.inf.um.es
preinscripcionposgrado.um.es
preinscripcionlistas.um.es
gespergrp.atica.um.es
planesestudio.um.es
curiegrpdesa.atica.um.es
pau.um.es
asistencia.um.es
serviciosapptui.um.es
redotri.um.es
libra41-sistemas.um.es
arwen.inf.um.es
eva-tun.atica.um.es
krontele.um.es
sltomcatgrp.atica.um.es
www.symposium.events
automatricula3ciclo.um.es
espacio30pruebas.um.es
cyumgrp.atica.um.es
sivagrpdesa.atica.um.es
www.symposium.events
git.inf.um.es
kaos.um.es
pcigrp.atica.um.es
monitorum.um.es
matronasmadrid.symposium.events
doctorpc.um.es
hospedaje.um.es
mercurio.inf.um.es
cassotisfa.atica.um.es
hospedaje.um.es
pcigrp.atica.um.es
ants.inf.um.es
symposium.events
sltomcatgrpdesa.atica.um.es
agrisemantics.inf.um.es
websldesa.atica.um.es
*.atica.um.es
symposium.events
sltomcatgrptest.atica.um.es
unimar.um.es
soporte.inf.um.es
hospedajesweb.um.es
suma.um.es
soporte.inf.um.es
SEDE.UM.ES
curiegrp.atica.um.es
espacio30.um.es
webmail.um.es
cyumgrp.atica.um.es
diacsen.inf.um.es
ventaentradas.um.es
symposium.events
buzon.um.es
ants-webs.inf.um.es
sivagrp.atica.um.es
jira-software.inf.um.es
smtp.um.es
symposium.events
telematica.um.es
dafi.inf.um.es
pcigrpdesa.atica.um.es
acceso.um.es
umubox.um.es
ants-webs.inf.um.es
fundeweb.um.es
sltomcatgrpdesa.atica.um.es
hospedaje.um.es
sakaigrp.atica.um.es
umuapp.um.es
pluton.atica.um.es
sltomcatgrptest.atica.um.es
ophercules.um.es
sivagrp.atica.um.es
telematica.um.es
gestion-contenedores.atica.um.es
preinscripcionmaster.um.es
videoconferencia.um.es
grupos.um.es
umovil.um.es
websltest1.atica.um.es
babbage2.inf.um.es
conecta2.um.es
variosgrpdesa.atica.um.es
curiegrptest.atica.um.es
ophercules.um.es
ceuri.um.es
sltomcatgrpdesa.atica.um.es
symposium.events
www.fuem.um.es
colegioazarbe.um.es
gitlab.atica.um.es
redotri.um.es
sltomcatgrptest.atica.um.es
sltomcatgrp.atica.um.es
vcenter.atica.um.es

Certificate

The complete raw certificate details for sltomcatgrptest.atica.um.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPDHmBpdHsZ4C56cLi7R
LhU54+p+cAniU24BopnlZrz7EuV9LaYW85ZxC5h+jshDcOkY2o3Nx36cfJOpi1ky
hbEHk5rNYvKEqYlo3RjzaqjMBh/4EgnnVQWNVP7BVeEfXDuSyX+Q9m00iz4Rw2Vm
Y/XqfjNnSz7OdblM14dYn8cor10n31Gs6ZvXjTy+Mrll/d85/B+6V73AZlT1ZFtU
l/ZHcUckJO31qkusNS9aIHNnfVa6IER1uZbiDhJ1XZX0GDMeu3aMBr2cDpSCbZOE
Kw6e4bJ3MtIMjaGQAgCGnSFPEgS+BT/uyVn3EkQQSVnXdBGfJJP9Sfj5nIJt9Hq7
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9532697124246996006821187884898537136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Murcia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidad de Murcia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ATICA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sltomcatgrptest.atica.um.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20821814892311108392808649494331785115019041424377691318216637281815544199347650789249831159921802191399977212920684795932362539307897297613546889822877083355591569176845466969425767475663763869251613258034453162158491143309833999281922215999137927747175293200389588369785305515653566243193576597465028184175898026549359584496197402600272927237828311673757660021075617033003784469530975534607520225407933934806277216879991879334512306236868306460169980149178628735752991107116438649109801937828846587024287177394535576641177691893246635755147165263626494137534059263409202256578956693631398057248643622018679718984483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d35df5a73a93dafbf5e1f0c1ff820c2be7615b48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sltomcatgrptest.atica.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolotest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pidumtest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitumtest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalumtest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotecafloridablancatest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpismetared.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salidasprofesionalestest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpismetaredtest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opherculestest.um.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anubitest.um.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000620a1474751b5508ee8d8d45df3ffefdee330123cf95cb5327250e6d4c0f5dcc2b39cc124db6e751a14dbeaf4afdbd6944c76eb85e99a3c4d5a81b82eedb2d16498643957231404e1290c7817ef83dbf9090f1113d7efe6febdf1728f5bfce452413961cef3f1fc4abd8519d7d3135b65ae9bb81b8fa0a1107842c5877b2a64d1ddbd6049fa12eea6c836444553984e668839345e83bb2b9e02beb83de7503266a1a742aadc55dd72173d919a82dd7d5ee4da35d4d177c706a3c16a3741b355c3bd3c628c166d12d45a04013c36cf8deebb820582a6a1c7bd49495b2a160b1b756c43d34174fad3793b4f11de7af9eedde03e5fffd5b3c0d2533e3373d23f9a