osr-api.kennisnet.nl

- Stichting Kennisnet -

Issued by QuoVadis PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 4c:a9:f7:66:f3:40:4e:7b:d0:86:82:17:60:88:22:ad:37:02:3d:f4 was issued on by QuoVadis Trustlink B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Kennisnet

Company registration number: 00000003272448340000
Organization: Stichting Kennisnet
Organization unit: Voorzieningen
State / Province: Zuid-Holland
Locality: Zoetermeer
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:a9:f7:66:f3:40:4e:7b:d0:86:82:17:60:88:22:ad:37:02:3d:f4
Serial Number (int): 437673676287926351681512813078310706572653903348
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 33:3e:e0:02:cf:24:df:a2:e2:f3:f8:06:73:a4:d6:f5:5f:a9:27:eb
AuthorityKeyId: b7:e9:d0:e9:ff:67:0e:d9:9c:0c:07:2e:97:d4:7e:4b:79:78:f4:20

Fingerprint (sha1): c9:92:58:bf:d7:c2:03:47:2e:2b:0d:75:f8:a7:c0:81:a2:9a:37:eb
Fingerprint (sha256): 14:aa:54:53:e1:f7:62:4d:50:32:e0:85:80:91:c5:e7:0e:c3:33:ae:35:be:37:55:81:fe:f1:d2:25:8b:b2:dc

Issuing Certificate URL: http://trust.quovadisglobal.com/pkioserverg3.crt

Revocation information

OCSP Server: http://sl.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/pkioserverg3.crl

Check the revocation status for certificate osr-api.kennisnet.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for osr-api.kennisnet.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

osr-api.kennisnet.nl
osr-api-q.kennisnet.nl

Other certificates including the domain name kennisnet.nl

(limited to 100 certificates)
images.kennisnet.nl
images.kennisnet.nl
developers.wiki.kennisnet.nl
monitor.bks.kennisnet.nl
red.portal-p.kennisnet.nl
metaplus.kennisnet.nl
ict-puzzel.kennisnet.nl
proeftuinrekenen.kennisnet.nl
hksbrowser.kennisnet.nl
jenkins.bks.kennisnet.nl
kennisnet.nl
onderzoek.kennisnet.nl
forms.kennisnet.nl
webmail.kennisnet.org
bks.kennisnet.nl
wiki.kennisnet.nl
xsd.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
images.kennisnet.nl
ict-puzzel.kennisnet.nl
referentie.entree.kennisnet.nl
metaplus.kennisnet.nl
monitor.bks.kennisnet.nl
onderzoek.kennisnet.nl
*.kennisnet.nl
kennisnet.nl
bks.kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
hksbrowser.kennisnet.nl
kennisnet.nl
kennisnet.nl
tools.kennisnet.nl
pld-po.kennisnet.nl
bks.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kernprogrammabrowser.kennisnet.nl
wszoeken.edurep.kennisnet.nl
testvoorziening.kennisnet.nl
bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
hksbrowser.kennisnet.nl
monitor.bks.kennisnet.nl
bks.kennisnet.nl
forms.kennisnet.nl
kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
kennisnet.nl
prd.onderzoek.kennisnet.nl
testvoorziening.kennisnet.nl
test-validatieservice.kennisnet.nl
bks.kennisnet.nl
edurepdemo.kennisnet.nl
osr-api.kennisnet.nl
grotestoring.kennisnet.nl
images.kennisnet.nl
bks.kennisnet.nl
ssonot.aselect-s.entree.kennisnet.nl
monitor.bks.kennisnet.nl
inspiratiekaart.kennisnet.nl
red.portal-p.kennisnet.nl
ssoquery.aselect.entree.kennisnet.nl
entree-account.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kennisnet.nl
entree.confederatie.kennisnet.nl
jenkins-oso.bks.kennisnet.nl
referentie.entree.kennisnet.nl
referentie.entree.kennisnet.nl
wsdl.kennisnet.nl
developers.wiki.kennisnet.nl
vocabulaires.kennisnet.nl
client.vpn.kennisnet.nl
images.kennisnet.nl
pld-po.kennisnet.nl
ict-puzzel.kennisnet.nl
artifactory.bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
sql.mta.kennisnet.nl
edurepdemo.kennisnet.nl
*.kennisnet.nl
*.bks.kennisnet.nl
xsd.kennisnet.nl
onderzoek.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
red.portal-a.kennisnet.nl
test.hksbrowser.kennisnet.nl
bks.kennisnet.nl
monitor.bks.kennisnet.nl
entree-account.kennisnet.nl
proeftuinrekenen.kennisnet.nl
red.portal-p.kennisnet.nl
harvester.edurep.kennisnet.nl
grotestoring.kennisnet.nl
servicecheck.kennisnet.nl
wiki.kennisnet.nl
kort.dev.kennisnet.nl
pld-po.kennisnet.nl
grotestoring.kennisnet.nl

Certificate

The complete raw certificate details for osr-api.kennisnet.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiAkf7bkRVwNw06YqjCH
G5ika8hvQcu/M8gp24yviVSx5kSuy8YDRHVngDJ0ZnGGIgHgaKPsfxEA+4VTW5Xy
l5aAUd+1boPJdcMBVP2K93smHfAlakFZ7sYZhmOBNWKAg/iBxuPedNCwLwkySG4o
19hvS0cctz+MQGVTSYR44tLsic8lMIu1+RAOcYHs1THUxt8CBM3N9WwkG71FXFLQ
sJuGdHrFr7696jTtyNSNW6wee4Q/zQfEUP+gREgUjnJelGHXmY9Rmm4g3ypqRK6Q
A9a226dIW/8sF0csrqzJKFfzHKgYd036k46NgmNHksaQjZPvVzRjAelZTR9Qnz3s
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 437673676287926351681512813078310706572653903348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-30237459'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 12:36:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 12:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003272448340000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zoetermeer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stichting Kennisnet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Voorzieningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'osr-api.kennisnet.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20466455498367292422139776025347399253160389271531653674026263271037710980347434781078608201631467365496890384101273553058288939338447561696110329176079076938445825787178783892869615524438707749636351848842718719466542962614840786994726730283361081271202848564124349645620974385307714908699176346733038716562861669866266025716071489509220753578968135636189878186504103926775159695173196083335668710737433661535841107906513252796769966618597000771798169384970654053122426454650343882211732300104678205439628969078408306468655232249476649700926512481046453154610132760163773226567722797878088871217566610395850669419713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b7e9d0e9ff670ed99c0c072e97d47e4b7978f420
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/pkioserverg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sl.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-api.kennisnet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-api-q.kennisnet.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository (http://www.quovadisglobal.com).'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/pkioserverg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							333ee002cf24dfa2e2f3f80673a4d6f55fa927eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		007fec4ea2a956edd3aa30374922a252004eef994beb0773fe6042701c485ced2a9da258efaf4401e39b7ddd5de8aadefdb66c166275ba65abaf5a476842a46c622b39ece3b4f69c87a70952541764c54b92251a0ecc54be0a4ae381498823ed60e0ecf84cb5d1389af5463005300cad0f8199327ff891bf7c0cbac05097e46e69b677bd78091a4add01295fd8450c6d87fdb85472e45dd43dbb392f54b9f302cb3dbbf54c3646bd155d4ce728d37887f32c9b0fdd9f7ad4014faf766187d8e78ffafe08e52850fb6d59e69ebf59de8cb80d29a1c5fbe7e304e35ae823c6c3e4503af4c3fde87608e786fbd2fdf20789f44526cfba93a5fe9be493eabb08efec2d901ce1a8bdb1cbc2eb45492148217ff9db3690c5618497317761b2b0c1211fb6790ed56e7c9a5ec20e5c843c4875c4301cf1534274f9cc730e4b462a2cfc0985b88c8119943b4af12bb5237780e51e03338145b4e0d59dad0ef71f50c17b383420dd0f07266e8e615a23d63e5a8003abc6df1bd149604a93824d7b8720b85c5e17660d2775fe2df8f87d6fc61002c4014bcf32b8c026ce3a106feec765744e0afb5155197d9ff17b0e9e3ee4e36de62382744f8158d09c56b1e6f4b7ed9def9ecb88c2c943b17a22d623d6c3e2811adf180b2903223ea26c8201305061b3ef13b9c77ac6acd13168ad7ac349aa4296a33e8362cb198215175f0aafe6e623fa68