Deriv.com Limited

- Deriv.com Limited -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0d:c8:f7:45:d6:d1:60:15:38:a3:2c:3c:22:8b:00:8d was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Deriv.com Limited

Company registration number: 71479
Organization: Deriv.com Limited
Address: 2nd Floor, 1 Cornet Street, St Peter Port
Locality: Guernsey
Country: GG

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:c8:f7:45:d6:d1:60:15:38:a3:2c:3c:22:8b:00:8d
Serial Number (int): 18323438605309098657002037537663549581
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:86:d4:c9:a5:66:cb:43:bf:14:23:52:53:30:4a:59:f8:cb:65:cf
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): c2:72:99:dd:1b:05:23:b4:03:63:40:9f:13:2b:70:cc:23:a6:ad:43
Fingerprint (sha256): 14:90:76:3a:40:f2:af:a2:7e:26:99:40:84:a0:69:fc:9c:01:26:a1:d7:12:2b:15:b3:49:42:5c:70:15:77:dc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Deriv.com Limited

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Deriv.com Limited

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deriv.com

Other certificates including the domain name Deriv.com Limited

(limited to 100 certificates)

Certificate

The complete raw certificate details for Deriv.com Limited in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S4zm7R4OxpZz3TdFzjB
tAbA7+YGfzShHAjWVsotfBaIb8PfSwLqzOB2X2OvDYSxVWnJbqJKKDDQ5IctxNPq
ulg7wWVnzYiw1apj4DF9qQfM8+5TRd8aF82H/nK/hloehqKwROkVVFamvzPF8f/O
GAZJVHrohdlpHmWTXRDvofx94Cre4MujAMIK998vdNOm/BkW5+DzYuwUFd4YOicA
DSrJMDo4nmX7WU/0UqGuuEved+NH/3RxCGEGOvlM57dPy3qKkLurQd91GW1RQVmp
NiFKI4wXXz3Ijudb3oL3ApE6r9urzxM4m43tgBfV5pxbsVlm13lYJe3g1ElEXQTz
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18323438605309098657002037537663549581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '71479'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Guernsey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2nd Floor, 1 Cornet Street, St Peter Port'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deriv.com Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deriv.com Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018872257'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29436307912527004587907669699878407893259750516434036590101358132291847491276150326567874681883235812421003046908701215825218099503115330335092148741163505929133351311385627630944030458089969137847113557800691300299849396047208973784071418543857983919048124786347176438523247387960635694045938013797062370259262709412252173762327795110680568132681055971616836060088224935143698238512890687737841503149778665496854709151755696090476662983504547315871918639271830594644356965493901598627886676044424416154684270257517070578495374433381359190486135690225974866840240258690669334669755152700785528148091383827400401154883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb86d4c9a566cb43bf14235253304a59f8cb65cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deriv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															d79b0060cb3edc2063e1aaeaf9c4a321a4e6bbce
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAACm1UTY/TSBA9J7+iMSek7k5/f0STQUtgCFKQkJC4roLHjK3tTSLHkwz8el41w4bDXpx2V9V7r16Vc/P66d/Czt14Gg77VaOlali3bw/3w/5h1TxO30RqXt/Ob14Iwd53+27cTYdxyf66P3zt2IdSHk9TvWImSi8VZ5+/vGfvno6HcWKfyuOD+LBnsl5++cWxZEEqxd48DuWeqVeMCQH40/nhTxGmYcP9qtnuvnfj37ph0Lg/rZp+mo7LxeJyuciLlYfxYWGUUgsUP6csn8qw/+f/EnXOeVGjzXz2dXfqPo2Hb0PpVs007L+L46lh56G7vDk8rRrFFIs+M+NNxV2ejrsWmcexO3XjuWsgeBqm0t2yt904nG8Wv97mN8fd1DPAllXz8u7OOXfXMPTxUXsjDY8yF6Etj1bGTXatcEZqrkSioHVSi5Rl5DFIU4RFSKNiLfDKDR3xpIc3PDj66W2UYT5rrUKV4j7LLIyTiQcvrfBe+q1RWgautv8J+ME+aqMIG1y+FRqlOAitEAeJEZo00GkTAY+MBFIlLICE9tIJk4AOuXY+K0jHtFqL65oHha7GuFPPWb0F/vYPUkhwmUjQQjGZYEPqXZCpCHrleN3UDGR6RQ0lLzMaFQbA2gLYUXlAaQSqU4igPziVhfPwEWGBjjVctC1yAnfwk+QbngLqkZ64BpvrBZhzG0h3ABi6o8QMputxPls7TVcodtz5QGOygL3Kg1arHSxIMKonLLhrMQN4F8BDaElEj8oAVwpUAQn2t5Btec3UdEdR7m397WOdcEm1rY0JuiXDEzAhJ4lqHlIE+V4UTQ8daVz5Ao3CprWNjozHfB1I6EkC+VXr9nqkHjAnOIPNhERFJkg3n/XUQgYBpi91S85WGdrQytFq0d7VU48/ArsmTApXVlxjo7CloL3Cgyxq+gCS2+BrQ2OYEthocNgBAASREi0D8dchIYUWG+suMPwkdF23auzzCuW24vu67IFHTa5iaasBaR0iLanG/DyPqm6TIvd/C9n+PvxoFvic6Z/ldv4TFKkk5CMFAAA='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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