www.receitadigital.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 34:a8:54:10:3d:20:25:62:ca:37:f1:ed was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.receitadigital.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 34:a8:54:10:3d:20:25:62:ca:37:f1:ed
Serial Number (int): 16296717026742229046388060653
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1b:58:20:a3:41:78:85:be:aa:7b:7c:5e:ce:f9:06:51:7e:0f:5d:04
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 89:b4:b7:c4:ec:8f:17:40:c8:90:bd:ca:fa:7c:29:80:75:93:09:fc
Fingerprint (sha256): 17:b5:c1:09:66:c6:3b:c7:e7:1b:4e:40:e8:02:d8:83:9c:4d:43:dc:09:a5:fb:d1:87:b4:0c:cf:fe:d9:eb:1e

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.receitadigital.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.receitadigital.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.receitadigital.com
receitadigital.com

Other certificates including the domain name receitadigital.com

(limited to 100 certificates)
receitadigital.com
suporte.controladoria.digital
suporte.controladoria.digital
support.xformative.cloud
*.app.receitadigital.com
desk.churchadm.com
ajuda.receitadigital.com
helpdesk.yourtekpro.com
support.rmtcam.com
ajuda.receitadigital.com
suporte.controladoria.digital
support.strident.uk.com
soporte.masin.co
support.aztec.city
www.spillfinansiering.no
suporte.escritax.com.br
suporte.controladoria.digital
support.strident.uk.com
suporte.controladoria.digital
homolog.receitadigital.com
support.coreproducts.ca
buy-rift.ethrift.io
suporte.controladoria.digital
www.receitadigital.com
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
helpdesk.baiyuan.io
suporte.controladoria.digital
receitadigital.com
*.app.receitadigital.com
tickets.onlinemarketing-zentrum.ch
support.mindsize.com
suporte.controladoria.digital
receitadigital.com
kikenyatours.com
suporte.escritax.com.br
suporte.controladoria.digital
*.app2.receitadigital.com
suporte.controladoria.digital
suporte.controladoria.digital
suporte.controladoria.digital
support.ez-erc.com
soporte.masin.co
support.mindsize.com
suporte.controladoria.digital
www.receitadigital.com
internal.symphonic.com
suporte.controladoria.digital
suporte.controladoria.digital
helpdesk.kentik.com
support.rmtcam.com
v2.receitadigital.com
helpdesk.yourtekpro.com
ajuda.receitadigital.com
soporte.peruapps.com.pe
cielosupport.applaudostudios.com
desk.churchadm.com
receitadigital.com
suporte.controladoria.digital
humancapital.tafaseel.ae
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
humancapital.tafaseel.ae
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
desk.churchadm.com
backend-api.receitadigital.com
eventos.ingresso.com
ajuda.receitadigital.com
support.techbyhart.com
receitadigital.com
www.receitadigital.com
support.lumenave.com
suporte.controladoria.digital
suporte.controladoria.digital
internal.symphonic.com
www.receitadigital.com
support.blacksheepmedia.co.uk
suporte.controladoria.digital
suporte.controladoria.digital
receitadigital.com
helpdesk.bhamtastic.com
receitadigital.com
*.app.receitadigital.com
support.zilmoney.com
support.mbpractice.com
ajuda.receitadigital.com
support.rmtcam.com
suporte.controladoria.digital
support.ez-erc.com
suporte.controladoria.digital
support.ez-erc.com
soporte.masin.co
suporte.controladoria.digital
support.blacksheepmedia.co.uk

Certificate

The complete raw certificate details for www.receitadigital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgIMNKhUED0gJWLKN/HtMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE5MTAwMzIzMDMzNloXDTIwMTAw
MzIzMDMzNlowRDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMR8w
HQYDVQQDExZ3d3cucmVjZWl0YWRpZ2l0YWwuY29tMIICIjANBgkqhkiG9w0BAQEF
AAOCAg8AMIICCgKCAgEAruK6TLvCrWH4wZfaB3mRGfbYYuubsLvVCr633kEcR8GA
kK+sey5JZ1H8GxKDOnb+TvWmeJ3Y+eC1PutgQHXfOUNxy2B/kaQXW5Aw9SxkvTIc
3ubKJrP4ICKgpm3gkoyV1757K+FetKz1lJVvqCqsEv7L3VXD0dHZdq5PCBQIY3tE
nNZJMPb/MV1lFi/maVVNOk+NMj02g27pQx9SUAXaFG7de6to1Cq9CHVfB8QwTjkU
OdS9laHiVPo+8MZN1PuEdNQJJ1hIVPPJzNGwvJZkFfs794IOAyc0CsGVDMvWF8Np
W3BSRenZjPNQ3SxasKYBETIXN7V10wQt5+oC76TUGkTvgPoLidBvYEteZHSjInlq
cvGVVYe3tZZt8IkjbkX7GOAcBVRKm42UykVI91M+eSOG7cT1QE4Rv1G1Jg+N8tLX
Xl9rZKxe54NEP8z3GV61gmBr8e44zaPTWa88msETjy7XsBldQAcZKUrnuSe078MM
YUgtFoCcKXwenwfyG/co/j2Bh4Fzf2qB4A5o0x9quTaVc9O9GL6Uknm4fc4wYivp
TcXS8Bj1k07YeosW+BXdqgQAzl2JQlqS/9Bl2inCVR58tZb/ximZqmkf7HyAnYD5
XjBOc6bdkpFx44AqzKwdS67DnoxUNQXK2yZvgPvjTFvHLLkajsYefTv4wkcMBTkC
AwEAAaOCAe8wggHrMA4GA1UdDwEB/wQEAwIFoDCBiQYIKwYBBQUHAQEEfTB7MEIG
CCsGAQUFBzAChjZodHRwOi8vc2VjdXJlMi5hbHBoYXNzbC5jb20vY2FjZXJ0L2dz
YWxwaGFzaGEyZzJyMS5jcnQwNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwMi5nbG9i
YWxzaWduLmNvbS9nc2FscGhhc2hhMmcyMFcGA1UdIARQME4wQgYKKwYBBAGgMgEK
CjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBv
c2l0b3J5LzAIBgZngQwBAgEwCQYDVR0TBAIwADA+BgNVHR8ENzA1MDOgMaAvhi1o
dHRwOi8vY3JsMi5hbHBoYXNzbC5jb20vZ3MvZ3NhbHBoYXNoYTJnMi5jcmwwNQYD
VR0RBC4wLIIWd3d3LnJlY2VpdGFkaWdpdGFsLmNvbYIScmVjZWl0YWRpZ2l0YWwu
Y29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT1
zdU8CFD5ak86t5faVoPmadJo9zAdBgNVHQ4EFgQUG1ggo0F4hb6qe3xezvkGUX4P
XQQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAxQns28
N/nH2AWj6QrVK08oNBW08KKBZNjFUNW/nXeBuGXrx7MSNY3HK6HrDO4+JYJ1x9zU
fOGUoIlcyJ9xgotajR+X/8O/zFfRD21IkbBgN5fx1dXYrwDeEROr2SoYcmseQly9
Vu5+V1gr0/YsyU/ePMf92V1OmQlrrKhsQ9nyM3fld1oxxtjbX1gtKiNUaDYbu39j
Jj3q8LOSZdGxHSjCXzKnD6TVOKCF6T8k+OqkFzHW8mviJWyd+ShOJfKtzM/xj0Kv
iSKFmT0KOS7UU57g7hX71T1beBtun1YMO0yAJ5+xdKP8wBQQPwL2qsupG5s2oaWq
9goUVctzUJXNdJI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16296717026742229046388060653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 23:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-03 23:03:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.receitadigital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713471225852905137540208891387080635363224796319615995985843492620256148382240059104031592434098121782794140852020312896776776932318975793302701969748553308464597721336532620018037978734518911164230964115650741957962225104212216446512975884582892390070597326805402898356475588892336763808139978964815290974724764253261186129660951079588334804392276170431335654114174798280657386689624100425654452777769471714256630751906338263045644383643566325717749276230282517130087130754350521926369812575712777141048715854706267420055742607572841075865770185326723485339088898987139967057370175688136611223377593884296600789764157032718466737406770375388234944221355650547566661868913982387266308637255277588225996915811995711373319019474226683963363183959647864945091099818517141815616470974237326594760990288794055017754268080718895961244213305031970004546913184459023354347226805949006653505025336641505820625855291048408422326789791460511441998025824453625082485423708046976184392174618352081926532128727144167491386916811145564408736332953982739227776200142185920150076306013687867917177773622257255432956589558274180206695456187441912161283576038802010862767413246637551516504986085267377283836959893854052946224865253275405521294197523769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.receitadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receitadigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b5820a3417885beaa7b7c5ecef906517e0f5d04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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