minmvatest.skatteetaten.no

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0c:62:72:01:0c:08:1b:dc:98:0e:8f:b4:73:98:ed:09 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=minmvatest.skatteetaten.no

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:62:72:01:0c:08:1b:dc:98:0e:8f:b4:73:98:ed:09
Serial Number (int): 16461893319202005484682985447070690569
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:2d:27:c6:a1:c0:f0:34:ac:7a:50:58:d5:bf:23:bd:06:98:0d:1b
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): c0:62:ac:03:08:25:eb:ce:9d:8d:c3:12:72:a2:a6:1d:a8:18:a2:86
Fingerprint (sha256): 0f:ee:92:db:39:0a:d3:1d:6d:d4:b5:aa:2b:30:6b:e8:e1:6d:d9:bf:83:e9:87:ee:9e:89:7d:47:ad:48:b2:21

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate minmvatest.skatteetaten.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minmvatest.skatteetaten.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

minmvatest.skatteetaten.no

Other certificates including the domain name skatteetaten.no

(limited to 100 certificates)
mx.skatteetaten.no
data.skatteetaten.no
chat.skatteetaten.no
*.app.skatteetaten.no
exchhybrid.skatteetaten.no
confluence.status.atlassian.com
skatteetaten.no
valutareginnrapp.skatteetaten.no
www.skatteetaten.no
skattemeldingen.skatteetaten.no
samarbeid.skatteetaten.no
skatteetaten.no
testdata.api.skatteetaten.no
tjenestertest.skatteetaten.no
www.skatteetaten.no
minmvatest.skatteetaten.no
kurs.skatteetaten.no
iplos.skatteetaten.no
skort.skatteetaten.no
*.cms.skatteetaten.no
skatteetaten.no
sslcertificate3.queue-it.net
valutareginnrapp.skatteetaten.no
minmva.skatteetaten.no
*.app.skatteetaten.no
skdm.skatteetaten.no
sslcertificate3.queue-it.net
minmva.skatteetaten.no
skatteetaten.no
skatteetaten.no
*.app.skatteetaten.no
pya2exp-edge01.skead.no
tips.skatteetaten.no
skatteetaten.no
testdata.api.skatteetaten.no
api.skatteetaten.no
sslcertificate3.queue-it.net
skatt.skatteetaten.no
sslcertificate3.queue-it.net
skattemeldingen.skatteetaten.no
skatteetaten.no
vraking.skatteetaten.no
skatt.skatteetaten.no
adfs.skatteetaten.no
testdata.skatteetaten.no
www.skatteetaten.no
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
skatt.skatteetaten.no
sslcertificate3.queue-it.net
pya1exp-edge02.skead.no
ssl867246.cloudflaressl.com
pya1exp-edge01.skead.no
venterom.skatteetaten.no
valutareginnrapp-test.skatteetaten.no
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
skatteetaten.no
me.skatteetaten.no
sslcertificate3.queue-it.net
valutareginnrapp.skatteetaten.no
www.skatteetaten.no
data.skatteetaten.no
pya1exp-edge01.skead.no
iplos.skatteetaten.no
pya2exp-edge02.skead.no
skattemeldingen.skatteetaten.no
testdata.skatteetaten.no
sslcertificate3.queue-it.net
me.skatteetaten.no
pya1exp-edge02.skead.no
sslcertificate3.queue-it.net
skatteetaten.no
sslcertificate3.queue-it.net
skatteetaten.no
minmva.skatteetaten.no
exchhybrid.skatteetaten.no
*.skatteetaten.no
iplos.skatteetaten.no
skatteetaten.no
testmva.skatteetaten.no
*.app.skatteetaten.no
www.skatteetaten.no
pya1exp-edge01.skead.no
samarbeid.skatteetaten.no
skatteetaten.no
mx.skatteetaten.no
ssl867247.cloudflaressl.com
sslcertificate3.queue-it.net
skort.skatteetaten.no
skatteetaten.no
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
skattemeldingen.skatteetaten.no
sslcertificate3.queue-it.net
sip.skatteetaten.no
beta.skatteetaten.no
tjenestertest.skatteetaten.no
szi01.skatteetaten.no
sslcertificate3.queue-it.net

Certificate

The complete raw certificate details for minmvatest.skatteetaten.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIQDGJyAQwIG9yYDo+0c5jtCTANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypH
ZW9UcnVzdCBUTFMgRFYgUlNBIE1peGVkIFNIQTI1NiAyMDIwIENBLTEwHhcNMjIw
MzEwMDAwMDAwWhcNMjMwMzEwMjM1OTU5WjAlMSMwIQYDVQQDExptaW5tdmF0ZXN0
LnNrYXR0ZWV0YXRlbi5ubzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AORYnEs3l/h8igz88xMI2R0keU6JJcIGpPZ3LKgls2ywVizisrM6qfTUOtSkodvY
z9hNq/bbKLtG+rf04YBGshySHjtuLm2Tgx2UoFF/i4jQc7pCYWODjlcERMVwSG1u
T9vQ21jH80BSeSvzsQT67A8xHKRUMK/8WDtwxJOyyFuxZDQW92f22K+iARDZ3jWA
lCwTByKL0ncvklIzvZzumBoww4bSv7wmky2AoK6G5Qj2Di0O0hr7KjurXJ3Mn0Sa
VtrnZiWdo4Rr46HILBVqhEM7RJpQOOjgt3KQJgrVhf4cKfHaYA1sYcelV5KkjZkx
wlaOEPCq5Qe19/1zge1X+pECAwEAAaOCAiQwggIgMB8GA1UdIwQYMBaAFBLJiJsv
yUR6fRLx30ADQpiSxyTWMB0GA1UdDgQWBBS5LSfGocDwNKx6UFjVvyO9BpgNGzAl
BgNVHREEHjAcghptaW5tdmF0ZXN0LnNrYXR0ZWV0YXRlbi5ubzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcw
gZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdFRMU0RW
UlNBTWl4ZWRTSEEyNTYyMDIwQ0EtMS0xLmNybDBIoEagRIZCaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL0dlb1RydXN0VExTRFZSU0FNaXhlZFNIQTI1NjIwMjBDQS0x
LTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBhQYIKwYBBQUHAQEEeTB3MCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTwYIKwYBBQUHMAKGQ2h0dHA6
Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdFRMU0RWUlNBTWl4ZWRTSEEy
NTYyMDIwQ0EtMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEApLkCbKyUB0vsx0C1K8VM9pYd+q062ipdVyYJKPPH
TqH/CZZIAd1wsNtbgytccEMTM70IO2VsdS/uoVMZLHuNUfNuzuEqIdCtsKRvQ1wC
DdXzzfynGc+bpx9yjdnesKUwwl8hrl93wxXXT7xAW7gjhG48Y21EaOQGFLf/sP82
wIH6OZg538sE6NSTTs+CycQ57USka1511FObqwp882d0uxD3U/M6eYJN3hWuHk9d
Bz/TLjNKHCaUDcVK+DwWJDVXIu5sSEQ2mKBFzvPc+2THWGdGmm2iAdyMIJD0SiIf
4SC/YSMndRhZecXwsIbctrUYS7L5Hx6zkLFvkVrsqzDOTQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FicSzeX+HyKDPzzEwjZ
HSR5Toklwgak9ncsqCWzbLBWLOKyszqp9NQ61KSh29jP2E2r9tsou0b6t/ThgEay
HJIeO24ubZODHZSgUX+LiNBzukJhY4OOVwRExXBIbW5P29DbWMfzQFJ5K/OxBPrs
DzEcpFQwr/xYO3DEk7LIW7FkNBb3Z/bYr6IBENneNYCULBMHIovSdy+SUjO9nO6Y
GjDDhtK/vCaTLYCgroblCPYOLQ7SGvsqO6tcncyfRJpW2udmJZ2jhGvjocgsFWqE
QztEmlA46OC3cpAmCtWF/hwp8dpgDWxhx6VXkqSNmTHCVo4Q8KrlB7X3/XOB7Vf6
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16461893319202005484682985447070690569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minmvatest.skatteetaten.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28826029009568729308612129417923885619996002129190803321867919411520416112624661346206181735822223626673035615201677191609970305225965896115475455796749245019293807849420546986099947530825975018688190492952150527615734872667382172212664157201462510423666234015189916096592786358677387452480568753033089586331293808493218365409376010049035934764382921639845905495060325864173672347887029784716109448795317009317978851997323305408374969641818090696140266982920525817964821831226402630982866768984902261232296916551050540277412586574634420729431609248444949370935321396730180245167946520182382929854596048526372813404817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b92d27c6a1c0f034ac7a5058d5bf23bd06980d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minmvatest.skatteetaten.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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