The Pew Charitable Trusts

- The Pew Charitable Trusts -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0f:ed:aa:39:96:f6:3d:40:59:29:e1:e1:0a:0e:67:a0 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The Pew Charitable Trusts

Company registration number: 3105890
Organization: The Pew Charitable Trusts
Address: 901 E St NW #10
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:ed:aa:39:96:f6:3d:40:59:29:e1:e1:0a:0e:67:a0
Serial Number (int): 21172446864604812814757096950491670432
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:c2:05:cd:ab:9d:b4:f1:7a:81:fb:f3:1d:a6:fc:92:74:e7:e5:bb
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): b1:6f:eb:ac:78:ff:50:e8:ea:0e:27:c3:c6:bb:99:bc:7d:de:7d:95
Fingerprint (sha256): 17:37:52:8e:56:69:89:0c:da:ed:21:18:1e:34:35:c6:9d:73:aa:39:19:85:47:53:87:38:1f:30:8b:10:31:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate The Pew Charitable Trusts

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The Pew Charitable Trusts

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pewtrusts.org

Certificate

The complete raw certificate details for The Pew Charitable Trusts in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMs98PCpFi/w8vB0Vg2r
MgUJ9vOPh2foKwIkzNmgzsWqGx9ashrk3wfccVHA8W85yvr7DJJHS/GyTg8QYAiK
ixhRtuD4yxkCRdaLPpGBN2kR3fidVC9f80ZuF0kf9kbnhr9+GEOThZDS6PAt6xP1
rsC6ItwD3id/mpI+2N1+igITaPoPZdb/YXzpawxF4XUb6CCfRN1ecQivTzqYcqQa
tgmwzYOcNqn5pSeVqGW5wlr78WUyPjr4ln3XGwca/BRzSYnYi6795Y1530jAtUqc
b17jTcrElaoKu1LKqi+v7ewNYDLbVPBjwdQmPoRKgSmNvUGooclU4Fok+IT7/sVU
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21172446864604812814757096950491670432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3105890'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '901 E St NW #10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pew Charitable Trusts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Pew Charitable Trusts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5872139'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22318164018708030223184467144190544653703699368626167699804169258122401500644761066653125360500391205896109469858828837111165308083281674243092280662547011985694686268283906087962001776759838505836128679611154368569913257724201205360506514768849978007170392501785175196101287381814955769759824154867410780321391128347838833914093992323624743206669236203055746041322621567575468433424915114896548810313198259860969580816583933416699887474849245941083234758347863668546314452085467486630969533170441528498665757907900888301047836736825674661379034619268615752677531352326668667037725702475434289833925812496873176781917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83c205cdab9db4f17a81fbf31da6fc9274e7e5bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewtrusts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															97f9a6cf15afb9120e5782922bbad2923cd66aed
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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