UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE

- Fiducia & GAD IT AG -

Issued by VR IDENT SSL CA 2018

About this certificate

This digital certificate with serial number 2b:33:0b:a9:9a:2b:37:96:54:91:17:e4:1d:e7:b5:d3:ea:30:31:36 was issued on by Fiducia & GAD IT AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fiducia & GAD IT AG

Organization: Fiducia & GAD IT AG
Organization unit: ITOCIP
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

Fiducia & GAD IT AG

Organization: Fiducia & GAD IT AG
Organization unit: VR IDENT
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:33:0b:a9:9a:2b:37:96:54:91:17:e4:1d:e7:b5:d3:ea:30:31:36
Serial Number (int): 246624957098340927882275714438437221157814939958
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: cb:94:ef:3c:e8:1d:a8:d3:d0:66:cc:eb:ad:1d:41:94:10:76:d4:f6
AuthorityKeyId: 88:06:29:32:e2:f1:ef:76:bf:c5:22:c5:54:9c:17:67:28:2d:6c:16

Fingerprint (sha1): 9d:60:70:ae:62:d8:cb:22:9d:55:3c:60:da:1a:fe:49:fa:eb:ff:cc
Fingerprint (sha256): 14:c5:c6:d1:96:46:d8:0b:34:13:97:e4:4e:12:66:4a:de:88:d6:1e:57:89:3f:41:83:70:a5:ea:f8:24:23:60

Issuing Certificate URL: http://trust.quovadisglobal.com/vrisslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/vrisslg2.crl

Check the revocation status for certificate UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE
uit-diamo-n-11.uit.fiducia.de

Other certificates including the domain name FIDUCIAGAD.DE

(limited to 100 certificates)

Certificate

The complete raw certificate details for UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUKzMLqZorN5ZUkRfkHee10+owMTYwDQYJKoZIhvcNAQEL
BQAwXTELMAkGA1UEBhMCREUxHDAaBgNVBAoME0ZpZHVjaWEgJiBHQUQgSVQgQUcx
ETAPBgNVBAsMCFZSIElERU5UMR0wGwYDVQQDDBRWUiBJREVOVCBTU0wgQ0EgMjAx
ODAeFw0xOTAzMDcxMDE3MjhaFw0yMTAzMDcxMDI3MDBaMIGYMQswCQYDVQQGEwJE
RTEbMBkGA1UECAwSQmFkZW4tV8O8cnR0ZW1iZXJnMRIwEAYDVQQHDAlLYXJsc3J1
aGUxHDAaBgNVBAoME0ZpZHVjaWEgJiBHQUQgSVQgQUcxDzANBgNVBAsMBklUT0NJ
UDEpMCcGA1UEAwwgVUlULURJQU1PLU4tMTEuVUlULkZJRFVDSUFHQUQuREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKUd5Jzgqu4zWtGMMKicKR5WhD
RFVWwjg7UIfCh8pSMhv9sFAHx+UncMhACdv0c0AxejM8ZJpIR2tUE72CLneXUlig
dVM2Qq1K5RoJqyA+rxtdYCUNVl+ElchKTdjjXl/dJG4cVrUztlOoiMorNPCnZCge
IrOR0vgLGPD/SKUh3WLHjpD2potvk+tHggUmIwL/aB0Uk4y9kEW6g+UjX1jG5XlW
BEOOryxgMpwSB8o4wQ+mSK3i3zN1BGq+j5COOFweQ5JWcjrnzjkHL9MvTV0/qGhA
yZJXkfa7X8gRQ3xI4NoF4MTnAjBm7/7yan+prynFim7aoLpjFSMIZP6MBNkNAgMB
AAGjggIDMIIB/zAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFIgGKTLi8e92v8Ui
xVScF2coLWwWMHQGCCsGAQUFBwEBBGgwZjA4BggrBgEFBQcwAoYsaHR0cDovL3Ry
dXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS92cmlzc2xnMi5jcnQwKgYIKwYBBQUHMAGG
Hmh0dHA6Ly9vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTBKBgNVHREEQzBBgiBVSVQt
RElBTU8tTi0xMS5VSVQuRklEVUNJQUdBRC5ERYIddWl0LWRpYW1vLW4tMTEudWl0
LmZpZHVjaWEuZGUwbAYDVR0gBGUwYzBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEF
BQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAI
BgZngQwBAgIwDwYNKwYBBAG+WAACjEAAATAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
KwYBBQUHAwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5xdW92YWRpc2ds
b2JhbC5jb20vdnJpc3NsZzIuY3JsMB0GA1UdDgQWBBTLlO886B2o09BmzOutHUGU
EHbU9jAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAFOb9oezBekzuKIH2Fu7Z7x3BM0PtCYe6hRy5qbQcH/ylhsy
TPToRoQULs6alJGmMv6FhPYRx5YtEIJhSCDGKXmhyMvQ/azhYXAn77sjK2lGoYf6
ofGf5Mhnklo8zlGAsFI88icFtwVdP2mZsknmOhQRCMdCd5GYafAYv2PQkM9jKbf0
eHGlvh44Y8RpDpH0d0dqi85BfD7sLfgBrDVnMd5tirjJl/h0XIcfABikXAuQmgx+
WOZIkd8cnKkU+9pc8dkBIMd6/t1l6XRXiL8dQB4ABZ7G31mU1Cm4bLqkTWJ3wL42
0bwIthpbANSZI8wrAGgty4g9NEVeBCUYlN+5YKc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilHeSc4KruM1rRjDConC
keVoQ0RVVsI4O1CHwofKUjIb/bBQB8flJ3DIQAnb9HNAMXozPGSaSEdrVBO9gi53
l1JYoHVTNkKtSuUaCasgPq8bXWAlDVZfhJXISk3Y415f3SRuHFa1M7ZTqIjKKzTw
p2QoHiKzkdL4Cxjw/0ilId1ix46Q9qaLb5PrR4IFJiMC/2gdFJOMvZBFuoPlI19Y
xuV5VgRDjq8sYDKcEgfKOMEPpkit4t8zdQRqvo+QjjhcHkOSVnI65845By/TL01d
P6hoQMmSV5H2u1/IEUN8SODaBeDE5wIwZu/+8mp/qa8pxYpu2qC6YxUjCGT+jATZ
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 246624957098340927882275714438437221157814939958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fiducia & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VR IDENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VR IDENT SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 10:17:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 10:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fiducia & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ITOCIP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17461256855427278940361020945368187279012421536684297804442015632294325763689461386255957798238833456020064039322723401696436211515661213328451755998325420481095250556371449087352395366692128781750877765170047192821137345126419000644064114281038544588505143913747194813225495833528996151867725003454653523223541855467857912869666611297276996493400784098035541472572357758325717269040925704605126491425337076541374200030197565049318003484417195478186547755244282064100847345827318372433616995992625215209160127319234561915659787764664351696455232349509566198235046671202710916067460843709431685822114684012031350462733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 88062932e2f1ef76bfc522c5549c1767282d6c16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/vrisslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uit-diamo-n-11.uit.fiducia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.1600.0.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/vrisslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb94ef3ce81da8d3d066ccebad1d41941076d4f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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