*.cert.nucleus.lexis.com

- RELX Inc. -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:19:ac:40:1a:eb:bb:d7:83:db:c1:12:9d:dd:61:dc:15:2c:76 was issued on by Trustwave Holdings, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RELX Inc.

Organization: RELX Inc.
State / Province: New York
Locality: New York City
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:19:ac:40:1a:eb:bb:d7:83:db:c1:12:9d:dd:61:dc:15:2c:76
Serial Number (int): 158341637315491466751085173776315022860168310
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 92:fc:29:6c:b7:92:6c:59:22:f1:f9:df:32:69:0c:39:15:c4:c1:ec
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 0f:89:25:95:e9:69:5b:21:34:75:ea:a0:6f:7f:a5:49:d7:d7:2c:5e
Fingerprint (sha256): 12:2c:52:c5:0d:17:81:89:90:2f:0a:ab:17:3f:32:20:52:87:71:58:b8:dd:fa:d5:d5:4b:b8:a4:e8:60:41:5f

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate *.cert.nucleus.lexis.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cert.nucleus.lexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cert.nucleus.lexis.com
fm-cert.lexis.com
fm-cert.lexisnexis.com
*.firmmanager.com
nucleus-cert.lexis.com
nucleus-cert-push.lexis.com
nucleus-cert-notifications.lexis.com
firmmanager.com

Other certificates including the domain name lexis.com

(limited to 100 certificates)
risk.lexis.com
*.product-aws-prod.nl.lexis.com
risk.lexis.com
*.business.aws.lexis.com
*.content.aws.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.content.aws.lexis.com
*.ndp.use1-prod1.searchplatform.nl.lexis.com
*.search.fos3.nl.lexis.com
*.prod3-searchplatform.nl.lexis.com
*.lexis.com
analytics.plus.lexis.com
r3.lexisnexis.com
*.lexisai.aws.lexis.com
test.stage.analytics.plus.lexis.com
*.route53.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.globalplatform-nonprod.route53.lexis.com
*.nl.lexis.com
*.monitoring-dev.nl.lexis.com
www.lexis.com
*.monitoring-tr-dev.nl.lexis.com
test.litelytics.analytics.plus.lexis.com
*.content.aws.lexis.com
*.business.aws.lexis.com
*.content.lexis.com
*.monitoring-dev.nl.lexis.com
*.recentactivity.route53.lexis.com
*.route53.lexis.com
r3.lexisnexis.com
*.content.aws.lexis.com
*.lexis.com
*.product-aws-dev.nl.lexis.com
lexmachina.advance.lexis.com
*.messsenger.route53.lexis.com
*.product-aws-prod.nl.lexis.com
*.route53.lexis.com
*.lexisai.aws.lexis.com
lexisnexis.com
*.content.aws.lexis.com
*.fos.nl.lexis.com
*.tools.aws.lexis.com
*.cert.nucleus.lexis.com
analytics.plus.lexis.com
*.ndp.use1.dev-searchplatform.nl.lexis.com
*.lexisnexis.com
r3.lexisnexis.com
nucleus.lexis.com
*.cdc1c-uk-hotdocs-advance.route53.lexis.com
analytics.plus.lexis.com
*.content.aws.lexis.com
test.stage.analytics.plus.lexis.com
lexmachina.advance.lexis.com
*.globalplatform.route53.lexis.com
guidance.lexis.com
*.content.aws.lexis.com
r3.lexisnexis.com
az-prawebcert.r3.lexis.com
*.content.aws.lexis.com
test.litelytics.analytics.plus.lexis.com
*.business.aws.lexis.com
*.api-dev.route53.lexis.com
*.cdc1c-hotdocs-advance.route53.lexis.com
*.lexis.com
*.ndp.use1-prod2.searchplatform.nl.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.content.aws.lexis.com
nucleus.lexis.com
*.lexisai.aws.lexis.com
*.content.aws.lexis.com
test.stage.analytics.plus.lexis.com
guidance.lexis.com
*.lexisai.aws.lexis.com
*.content.aws.lexis.com
risk.lexis.com
api-prod.route53.lexis.com
origin.lexis.production.ln-production.brightspot.cloud
*.lexisai.aws.lexis.com
*.content.aws.lexis.com
*.business.aws.lexis.com
*.business.aws.lexis.com
storybook-library.lexmachina.plus.lexis.com
*.product-aws-prod.nl.lexis.com
test.stage.analytics.plus.lexis.com
*.search.use1-prod3.fos3.nl.lexis.com
*.courier-deliveryor.route53.lexis.com
*.content.aws.lexis.com
*.rtis.aws.lexis.com
liamattersdev.lexis.com
*.content.aws.lexis.com
*.route53.lexis.com
*.content.aws.lexis.com
risk.lexis.com
analytics.plus.lexis.com
*.lexis360-at.use1-prod1.searchplatform.nl.lexis.com
*.content.aws.lexis.com
argocd.use1-prod1.fos3.nl.lexis.com
*.content.aws.lexis.com
test.litelytics.analytics.plus.lexis.com
*.business.aws.lexis.com

Certificate

The complete raw certificate details for *.cert.nucleus.lexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpOEwzA277mcI4OJcHAx
NfIfNYYATt9MJdutRm3MUPy3d2xeVNwEzd7jxliBi7JZx91UitS87fNjU497mTlX
yKz47dQ2uyH5O0UKqLlrHNJEw8V9DMU0M5BO26+8SAVI/Gmu2/Cy2NfrpE2P388Q
t+BVI0MyuQcCtpcTLAb6IbaDvqa4wAxIbIbPLkZb80uKcLbwF2L2Oiicke7XPSvQ
Q4K+XS0KVMU6FWyX/6A5LF438CxeVEyQ0jVKJxM3P948OBmdg9IG0qEt5HcdxdKC
yQmNTW/LBFhF4gvenXpn99lWPiVjF1R2i3QAsJXmnXkmLVPqDVquXyRcHe8Dub02
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158341637315491466751085173776315022860168310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 07:52:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-05 13:52:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cert.nucleus.lexis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RELX Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19513443099289860680794866790274669931027587659107688239264176715561239942349988100049494107281694862746024791054393185908536278546524751249215832736064469423059568802691239747537447229915064521113922441243150673304470347190518313696556757864198682528384221366464824332018402226235039506455822208336140026079821854017369199642766394880549358844298133881222490321625281975496470477347869152734354159698391219326633092970574520357555786510217542353386927515341259119170858671151622328954656638875545722149074072270036594141440541162655872114908281907908922994922391881438097402577758470596646350358665382220426932729587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92fc296cb7926c5922f1f9df32690c3915c4c1ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cert.nucleus.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fm-cert.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fm-cert.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firmmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucleus-cert.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucleus-cert-push.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucleus-cert-notifications.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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