en.music.uoa.gr

- National and Kapodistrian University of Athens -

Issued by HARICA Institutional TLS RSA 2

About this certificate

This digital certificate with serial number 3b:cb:6a:3b:2a:29:bb:79:ed:7f:23:c4:6e:38:59:3e was issued on by Hellenic Academic and Research Institutions CA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

National and Kapodistrian University of Athens

Organization: National and Kapodistrian University of Athens
Locality: Athens
Country: GR

Hellenic Academic and Research Institutions CA

Organization: Hellenic Academic and Research Institutions CA
Country: GR

This certificate will expire on

Certificate Details

Serial Number (hex): 3b:cb:6a:3b:2a:29:bb:79:ed:7f:23:c4:6e:38:59:3e
Serial Number (int): 79480642636521003631379622399816784190
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a0:08:cf:24:ae:3b:ee:f5:77:fa:4e:2e:0c:b1:77:d9:bc:27:5e:1d

Fingerprint (sha1): 9c:ce:72:c7:4e:bf:a6:38:8f:8b:d4:e5:70:a4:b9:91:37:02:12:c4
Fingerprint (sha256): 0f:f6:78:d6:05:09:3c:ad:8f:fe:87:9f:e3:4a:f3:94:95:67:1c:34:9d:34:1b:1b:3a:4f:f9:1f:18:fc:f3:0e

Issuing Certificate URL: http://crt.harica.gr/HARICA-Institutional-TLS-Sub-R2.cer

Revocation information

OCSP Server: http://ocsp.harica.gr
CRL Distribution Point: http://crl.harica.gr/HARICA-Institutional-TLS-Sub-R2.crl

Check the revocation status for certificate en.music.uoa.gr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for en.music.uoa.gr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

en.music.uoa.gr

Other certificates including the domain name uoa.gr

(limited to 100 certificates)
epraetpemre.soctheol.uoa.gr
rslab-el.geol.uoa.gr
portal.catris.eu
lvcnaxos2019.enl.uoa.gr
manuscripts-en.theol.uoa.gr
vatopedi.di.uoa.gr
adedu-microteaching.primedu.uoa.gr
lrms-en.med.uoa.gr
www.elke.uoa.gr
pid.med.uoa.gr
blocks.elke.uoa.gr
museum.di.uoa.gr
sportsvehicledesign.core.uoa.gr
refugee.psych.uoa.gr
electoral-register.uoa.gr
cg.turkmas.uoa.gr
aerospace.uoa.gr
peponi.noc.uoa.gr
nanomed.med.uoa.gr
dl016.madgik.di.uoa.gr
gifts.uoa.gr
qeccora-en.geol.uoa.gr
gain.di.uoa.gr
pindos.uoa.gr
meteo.di.uoa.gr
ma-theology.soctheol.uoa.gr
forensicpsychiatry.med.uoa.gr
dms.uoa.gr
helpdesk-devel.uoa.gr
ekopda.pspa.uoa.gr
bscw.uoa.gr
eeep-en.pspa.uoa.gr
healthsurveys.med.uoa.gr
dl105.madgik.di.uoa.gr
dl119.madgik.di.uoa.gr
webmail02.uoa.gr
dimsid.noc.uoa.gr
dsurg.med.uoa.gr
webmail.uoa.gr
elearn.elke.uoa.gr
autoconfig.uoa.gr
capsella-pilots.madgik.di.uoa.gr
mpl.med.uoa.gr
earthsciences-environment.geol.uoa.gr
nuclpart.phys.uoa.gr
addictology-en.med.uoa.gr
new.turkmas.uoa.gr
mathdid.primedu.uoa.gr
wifi.uoa.gr
sites2.uoa.gr
maps.uoa.gr
clinlab-fr.psych.uoa.gr
cultech2.di.uoa.gr
etraining-pdxg.enl.uoa.gr
contracts.uoa.gr
dimos.med.uoa.gr
geoterm.turkmas.uoa.gr
meteo.di.uoa.gr
UOA bscw service
capsella-services.madgik.di.uoa.gr
synergasia.uoa.gr
etraining-pdxg.enl.uoa.gr
dms.elke.uoa.gr
dms-test.uoa.gr
eclass.di.uoa.gr
guest.uoa.gr
gifts.uoa.gr
refugee.psych.uoa.gr
aresibo-ssp.di.uoa.gr
dl016.madgik.di.uoa.gr
lime.uoa.gr
meteo.di.uoa.gr
cogsci-en.phs.uoa.gr
cyberpsychology-en.psych.uoa.gr
ic2020.theol.uoa.gr
crypto.di.uoa.gr
stressmaster-en.med.uoa.gr
scale.di.uoa.gr
npmc.pharm.uoa.gr
geoterm.turkmas.uoa.gr
template1-en.noc.uoa.gr
deanshs-en.uoa.gr
node-241.med.uoa.gr
ossa.uoa.gr
cg.turkmas.uoa.gr
UOA webmail service
UOA wfm service
epraetpemre.soctheol.uoa.gr
de.gs.uoa.gr
ww1-music-conf.music.uoa.gr
contemporaryphilosophy.phs.uoa.gr
biology.med.uoa.gr
phycotheca-el.biol.uoa.gr
di.uoa.gr
galena.di.uoa.gr
mhmd.madgik.di.uoa.gr
phweb.psych.uoa.gr
o365.uoa.gr
gain.di.uoa.gr
fr.frl.uoa.gr

Certificate

The complete raw certificate details for en.music.uoa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5DCCA8ygAwIBAgIQO8tqOyopu3ntfyPEbjhZPjANBgkqhkiG9w0BAQsFADBv
MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEnMCUGA1UEAwweSEFSSUNBIEluc3RpdHV0
aW9uYWwgVExTIFJTQSAyMB4XDTIzMTAxMzA4MDIxMloXDTI0MTAxMjA4MDIxMlow
cTELMAkGA1UEBhMCR1IxDzANBgNVBAcMBkF0aGVuczE3MDUGA1UECgwuTmF0aW9u
YWwgYW5kIEthcG9kaXN0cmlhbiBVbml2ZXJzaXR5IG9mIEF0aGVuczEYMBYGA1UE
AwwPZW4ubXVzaWMudW9hLmdyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstOI4yAzxLrLJjrtrAWLKj8BzLmI0Jh3UYRPMAjqXpKFaR4zTTpjlUouoVPb
zgOn4wQM/ObmgvBiPuB3t1iZ5GcTtz2OHXx71MIIaAllw/aBxSfOVDzY27ElowwG
TK+T/rO4DnuxCPiS5YQMkS56h0qjXCTjBJXrl+8cBV565LSlkhGtbMn/OWUHtTqD
gyUJg3BNMavevSZ1vpqVVXinV1ZskL/2xjG5BK5BtaOnA83DXf0sZ78so5p9+goy
YPn9iTJwDCM3TC6AoVdJGVPwxjPFype4sSGvkMIpOR/lnxnu3dvYH7a3Rs9HIbO4
54LFO6+uEfmzXTuujaFG4JSv1wIDAQABo4IBeDCCAXQwHwYDVR0jBBgwFoAUoAjP
JK477vV3+k4uDLF32bwnXh0wdwYIKwYBBQUHAQEEazBpMEQGCCsGAQUFBzAChjho
dHRwOi8vY3J0LmhhcmljYS5nci9IQVJJQ0EtSW5zdGl0dXRpb25hbC1UTFMtU3Vi
LVIyLmNlcjAhBggrBgEFBQcwAYYVaHR0cDovL29jc3AuaGFyaWNhLmdyMBoGA1Ud
EQQTMBGCD2VuLm11c2ljLnVvYS5ncjAtBgNVHSAEJjAkMAgGBmeBDAECAjAIBgYE
AI96AQcwDgYMKwYBBAGBzxEBAQECMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDATBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJ
Q0EtSW5zdGl0dXRpb25hbC1UTFMtU3ViLVIyLmNybDAOBgNVHQ8BAf8EBAMCBaAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAGCmw/T4ohwN
ekKWvyDKIddKZiVvLWbKILsixHULr++g0Gkidt5BModaG+L3vP/OHKL2voMKcK3A
AQu6xBDEDsVIENoQhytXJwOKLbjeAnbolvydHrEr9bjjiSH6Pw82fxViax4SdHkE
R+W4BppbrAGOLYCXFefsAmcApknehydi4M7G+Ng6mz+8/jxmqrpSUxHadPXQMGrA
RZJIHVdEBSHA1Baj1+7NbeT3xqVUY8dsJ6GYdk4fK4B9bwF8TbjVCYCiMcCNXXmD
cwOz+1VjnHb4mRf5eHZQdOurvLjJ+z0LaaUmaWzdhGSCPQMOE9C0rI9IgrWwgI+d
ispBN04BSMq5laioQfVIScB7cFBPfitPSD4soKZQuCcMlBvHFKpzlfoYevn0qhOt
rJnYsyPzyJ2kP4pFdzmPGODOICi55a0893EWnuQ3cmqMR+m/56E5IOqBOd4m7BEd
ZP7fL9xoRwrk0BZp766soevS5TBCe5LmObepXpl9B8b8k2INmfAdQVf7xwYkcKHz
mOmiqiItxoTNKhf552P5TVYK/dnkUbB6jIX2/zltMYxAXIFtiGJkV8OGwI0VXqnf
tgi4ZUwRYbAbCvrDwF8Xeui81YUTSWV7XYG5drgfOEAEDaWsj5fugyVIwF9KmdTQ
I5I6NZEnsmohKweujbncFqJFLZR79+Hs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOI4yAzxLrLJjrtrAWL
Kj8BzLmI0Jh3UYRPMAjqXpKFaR4zTTpjlUouoVPbzgOn4wQM/ObmgvBiPuB3t1iZ
5GcTtz2OHXx71MIIaAllw/aBxSfOVDzY27ElowwGTK+T/rO4DnuxCPiS5YQMkS56
h0qjXCTjBJXrl+8cBV565LSlkhGtbMn/OWUHtTqDgyUJg3BNMavevSZ1vpqVVXin
V1ZskL/2xjG5BK5BtaOnA83DXf0sZ78so5p9+goyYPn9iTJwDCM3TC6AoVdJGVPw
xjPFype4sSGvkMIpOR/lnxnu3dvYH7a3Rs9HIbO454LFO6+uEfmzXTuujaFG4JSv
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79480642636521003631379622399816784190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hellenic Academic and Research Institutions CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HARICA Institutional TLS RSA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 08:02:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-12 08:02:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National and Kapodistrian University of Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'en.music.uoa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22574729940001270939995221408551813059744700255452361718304002930718494340801647280873636396320903516222446902256741585496943648324139034640390374442059014889740419912283185937476045059782970471288134370131807646419874622935555847956757232663102405749819211567133796840765790551530110073377935287287374740770704952404285987851963972950897337315432616744630138582388709121752577848629170196775457502925397385210594447066241959979600138547590137275791805860417572861107327447606786220394814665351553783327092455926851835090043945537009355534017582079253975746587348750743760380679221147922557691797680586266632063856599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a008cf24ae3beef577fa4e2e0cb177d9bc275e1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.harica.gr/HARICA-Institutional-TLS-Sub-R2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.harica.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.music.uoa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.26513.1.1.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.harica.gr/HARICA-Institutional-TLS-Sub-R2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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