webaccess.prebanco.com.br

- BANCO BRADESCO S.A -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:bc:2d:b8:7b:86:7c:98:ec:85:b1:ce:80:68:68:3e was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BANCO BRADESCO S.A

Organization: BANCO BRADESCO S.A
Organization unit: Produtos Especiais Secure Server 1
State / Province: Sao Paulo
Locality: OSASCO
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:bc:2d:b8:7b:86:7c:98:ec:85:b1:ce:80:68:68:3e
Serial Number (int): 3635535125617686952024544936595056702
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a9:bf:f5:a9:ca:af:ca:9d:c2:94:d9:c0:7d:7a:5b:6b:36:ae:61:7d
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 7b:9a:3a:e4:c3:ca:9e:f8:ea:03:04:13:41:63:eb:1b:ea:b8:b3:14
Fingerprint (sha256): 13:40:ab:d6:03:ed:13:01:4f:5b:30:75:f1:2c:a4:51:1d:e1:07:88:9f:e5:ed:0c:d3:ba:86:ee:e4:b4:ac:cd

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate webaccess.prebanco.com.br

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webaccess.prebanco.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webaccess.prebanco.com.br
webaccess-external.prebanco.com.br
autodiscover.prebanco.com.br
casarray01.corprp.bradesco.com.br
autodiscover.corprp.bradesco.com.br
legacy.prebanco.com.br

Other certificates including the domain name prebanco.com.br

(limited to 100 certificates)
acessovpn.prebanco.com.br
webaccess.prebanco.com.br
frontend2-ho.agro.prebanco.com.br
jiracp.prebanco.com.br
www.hb6.prebanco.com.br
services.financeadm.prebanco.com.br
www.mobilidade.prebanco.com.br
cobranca.bradesconetempresa.prebanco.com.br
gdmo.prebanco.com.br
idhibrida.prebanco.com.br
autorizacao.oapi.prebanco.com.br
awcm.prebanco.com.br
wssmic.prebanco.com.br
nexuscp.prebanco.com.br
apinext.prebanco.com.br
www.bims.prebanco.com.br
www.treinamento.prebanco.com.br
www.wap2.prebanco.com.br
appcartoes.prebanco.com.br
www.m2.prebanco.com.br
api.gran.transfgran.leasing.prebanco.com.br
jira.prebanco.com.br
bc2.bradescocustodiab.prebanco.com.br
www.ib3.prebanco.com.br
pf.api.prebanco.com.br
webaccess.prebanco.com.br
bitbucketcp.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
frontend-ho.agro.prebanco.com.br
pdpj.prebanco.com.br
awcm.prebanco.com.br
acsm1.prebanco.com.br
jamnmtp.prebanco.com.br
apps.adqemp.prebanco.com.br
appcartoes.prebanco.com.br
appcartoesi.prebanco.com.br
wsmt.prebanco.com.br
www.sisesgo.prebanco.com.br
frontend-ho.agro.prebanco.com.br
jira.prebanco.com.br
wwws.portaladmib.prebanco.com.br
04.bia-chat-server.prebanco.com.br
content.prebanco.com.br
inbot.prebanco.com.br
www.m.prebanco.com.br
webaccess.prebanco.com.br
www.bims.prebanco.com.br
apinext.prebanco.com.br
api.canais.prebanco.com.br
octane.prebanco.com.br
www.sisesgo.prebanco.com.br
m23.bradesconetempresa.prebanco.com.br
mulesoft.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
www.treinamento.prebanco.com.br
tunnel.prebanco.com.br
wwws1.bradescointernacional.prebanco.com.br
content.prebanco.com.br
www.m.prebanco.com.br
tv2.prebanco.com.br
www.ib1.prebanco.com.br
wsmt.prebanco.com.br
proxy.api.prebanco.com.br
idhibrida.prebanco.com.br
nexuscp.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
acc.prebanco.com.br
api.gran.transfgran.bradesco.prebanco.com.br
idm.prebanco.com.br
acessom2.prebanco.com.br
filetransfer.prebanco.com.br
autorizacao.api.prebanco.com.br
wwws.portaladmib.prebanco.com.br
www.rcad.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
gdmo.prebanco.com.br
wwws2.bradescointernacional.prebanco.com.br
agex.prebanco.com.br
www.m2.prebanco.com.br
autscm.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
www.sisesgo.prebanco.com.br
www.sacw.sacl.prebanco.com.br
cp.prebanco.com.br
jamnmtp.prebanco.com.br
tv2.prebanco.com.br
console.prebanco.com.br
captcha.prebanco.com.br
www.m.prebanco.com.br
appcartoesi.prebanco.com.br
appcartoes.prebanco.com.br
www.bc3.bradescocustodia.prebanco.com.br
openapi-axway.api.prebanco.com.br
ws.push.emsg.prebanco.com.br
bfresponsivo.prebanco.com.br
www.m1.prebanco.com.br
www.bc2.bradescocustodia.prebanco.com.br
bc3.bradescocustodiab.prebanco.com.br
sectransportho-platfunc.prebanco.com.br

Certificate

The complete raw certificate details for webaccess.prebanco.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIEvnwa9szl4kkxaBDT5
s+RmRk/KThBJwEQqWq66BESCq1BipZ+3R2xZguR0jXL2BTb19ZLNtjA7z2xJRU5/
iaBmWPjvcDrrOBbRvro+3lqgde/CsMWf+3MznOW/BGVrmWqi4rQUiAKjqy+AqxTX
nTvXWH48scENZTpXWvVGBTi7z1xAgWIEr8G+ap8S+/H/AEKVnw6fH+HH4ET4H2uI
TobaDRaCLMmrMnfihSsrxxixXBjc9/HKYET8EiyQZUCmbDb5/G9DaLzLxb15TBid
IC8ub9mKvJh553+fDeE+blx5V/dbwbzsFDDCZZOHEywE1mMX8NUgx2/iYsrOx4c1
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3635535125617686952024544936595056702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OSASCO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BANCO BRADESCO S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Produtos Especiais Secure Server 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webaccess.prebanco.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22281645674916509003118687363139691891793778420970649015214328002423523664937530077297454297227771905883652120447262175290804944641247728230352177396771402762030322317427579375418576088807836268681906533812856380990411842538425932948433013071475075985986195095319506258644237628621107808137457109175183498177501010943647302954540674145160761979060700466958225005785523640604363842271452965516631052772040058946065638766875903230609748266381145941067543814755024540558627261352578834527848075422997003167931084559623908303050636297088163287903658524929133561208477193457285971654002823811214597976827309184452686984579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9bff5a9caafca9dc294d9c07d7a5b6b36ae617d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccess.prebanco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccess-external.prebanco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.prebanco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casarray01.corprp.bradesco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.corprp.bradesco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.prebanco.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000cf5d198f370fb08740e7cc14e92543528afd7b1aaa3a30dfe242c89e9f5d01924ae9941a0ccd41c4009fd5cfa132fe41325942f622937158832dbed05ce9b04872e0649b27eabda5cc5ede9e73632d68b0acb6648be9ed7aa85aa4c3aca105edfa581a62f5668eb20396d82321cbcf492e58d2aa202d83769ccef51950e698c71cd365845a2932b14af5067658df3b3dd68f913cdfdb8c0be61cbd345c17d4ec088b40d398b8f03ec069a5c89b902d5331fb3203b2477d5696e8bbdc0b20703572151b0893eb4e4ba11c5e0fb0520a8d77a1cc8e0f7cfbc418bc2ebf1ba9ccb152b4d752898f3525f3404b4a20f4dc9df54f30634f8799b2b4606775b50dcaf