*.iihf.hockey

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 55:e1:29:cf:dc:a2:87:ac:72:a2:03:dd was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.iihf.hockey,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 55:e1:29:cf:dc:a2:87:ac:72:a2:03:dd
Serial Number (int): 26578431595627862128544842717
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 62:8e:d9:b8:dd:56:34:2b:d9:6f:2f:11:5a:25:29:20:16:31:d6:23
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): c8:6c:81:04:59:21:e5:2c:69:a7:da:3e:b7:50:01:20:29:7b:2b:2b
Fingerprint (sha256): 1e:4e:91:45:8e:50:fb:aa:a6:19:78:66:2c:8c:39:d7:94:85:92:79:79:32:f1:6b:e2:ae:48:41:31:78:53:34

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.iihf.hockey

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.iihf.hockey

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.iihf.hockey
iihf.hockey

Other certificates including the domain name iihf.hockey

(limited to 100 certificates)
cyberbarometer.brooklynpartners.nl
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
guias.aerme.com
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.eitep.de
surveys.lombardinternational.com
sni236210.cloudflaressl.com
survey.khaoscontrol.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
*.iihf.hockey
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
*.iihf.hockey
encuestas.caetanoretail.es
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.eitep.de
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.wildling.shoes
sni236210.cloudflaressl.com
*.iihf.hockey
sni236210.cloudflaressl.com
survey.sheshtech.com
survey.eitep.de
survey.sheshtech.com
iihf.hockey
iihf.hockey
sni236210.cloudflaressl.com
eval.softworld.dk
sni236210.cloudflaressl.com
survey.sweet-move.com
customer-survey.castoredc.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
survey.larsenhowie.co.uk
sni.cloudflaressl.com
survey.eitep.de
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
zoho.teslanow.de
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
iihf.hockey
survey.eitep.de
survey.eitep.de
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
ssl420654.cloudflaressl.com
sni167478.cloudflaressl.com
sni236210.cloudflaressl.com
survey.bimequity.dk
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com

Certificate

The complete raw certificate details for *.iihf.hockey in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIMVeEpz9yih6xyogPdMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE3MDIwMTE1NTI0NVoXDTIwMDIw
MjE1NTI0NVowOzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRYw
FAYDVQQDDA0qLmlpaGYuaG9ja2V5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Ht4VLcin3dlHMazxoHi3OJwEtOYuVbHhfEBsRvmnH1i08JxDbuwqrNz
jC2aB6TVgZQTlckMBsC4gSVN1CJAPP3uMqbyQ1wJiGwKaeNSwHLvc9EJXmZPlpNH
9AQgbxypmKAAVLta1dWcLPidFVaZwt7IAauLgKzQAuOVdbifXVIK26pbBk2LWKmu
ekT/QhWXiBFAdZ5y33TJsk7I9n7QcWwC5aue5dbzfdThmtJVzHgTdWE1VDCtbYoZ
aaj9xc5j0WQtVNrz3imYLR1i3P8f+Ru1txJg2afG1MV6BboeWnI/p1+ciY2UXOkR
NNXh4qlZozErefwGy24kD0vz1jApLQIDAQABo4IB3zCCAdswDgYDVR0PAQH/BAQD
AgWgMIGJBggrBgEFBQcBAQR9MHswQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUy
LmFscGhhc3NsLmNvbS9jYWNlcnQvZ3NhbHBoYXNoYTJnMnIxLmNydDA1BggrBgEF
BQcwAYYpaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzYWxwaGFzaGEyZzIw
VwYDVR0gBFAwTjBCBgorBgEEAaAyAQoKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATAJBgNVHRME
AjAAMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jcmwyLmFscGhhc3NsLmNvbS9n
cy9nc2FscGhhc2hhMmcyLmNybDAlBgNVHREEHjAcgg0qLmlpaGYuaG9ja2V5ggtp
aWhmLmhvY2tleTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0O
BBYEFGKO2bjdVjQr2W8vEVolKSAWMdYjMB8GA1UdIwQYMBaAFPXN1TwIUPlqTzq3
l9pWg+Zp0mj3MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBs0vf9AEW59+5jDW8bbZVW7uOwzCvOlh4/ZjeDwulDt9JwE5bvB7nJisLeKdu/
436NjsLaKL582ofWxloTWxRkpm2/sluNaJkIIjPOvwzOD1RB4/1t3UmN15e9Ikr/
irVX4KoYbZ1w7TNc7wEP7k4FnR5FxviEdg6HF2+944ih9VtqqsaWUTAQrVonsb3B
zLbW4Ego55rqTQX8svnnQeYoBsEtRlmiXNUHxfh6EDAcuZcTq2amWe3zjFV1K16G
/5QKUDgTeWy34h37yn+YBhoc5fBTFSDEnvru+pNJps00xB+48VTNMJcWwcY9HKS5
gl3NzRsGmWBR1Xnkc1zUgbLg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ht4VLcin3dlHMazxoHi
3OJwEtOYuVbHhfEBsRvmnH1i08JxDbuwqrNzjC2aB6TVgZQTlckMBsC4gSVN1CJA
PP3uMqbyQ1wJiGwKaeNSwHLvc9EJXmZPlpNH9AQgbxypmKAAVLta1dWcLPidFVaZ
wt7IAauLgKzQAuOVdbifXVIK26pbBk2LWKmuekT/QhWXiBFAdZ5y33TJsk7I9n7Q
cWwC5aue5dbzfdThmtJVzHgTdWE1VDCtbYoZaaj9xc5j0WQtVNrz3imYLR1i3P8f
+Ru1txJg2afG1MV6BboeWnI/p1+ciY2UXOkRNNXh4qlZozErefwGy24kD0vz1jAp
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26578431595627862128544842717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-01 15:52:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 15:52:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iihf.hockey'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26823406000065080162320728605464703351010217665064406730855387713595962407913025042389611345351341414565463937210322977013457729158166293687417157911530429662324206542946414708050282655993204537194825546591810039801273472591969953455052348177533149216160573511809520256854862334598512961946359708343585377726983942346127259739447171334762070655071260233728860362284158437688164233185946836925263029589344016174763296056866608438655242943704362528119137382603193536211381804119635999906480683456753436856445121748248178448380453965813359085727508640693744406916293565299320673690676260575816266489745955770896063932717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iihf.hockey'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iihf.hockey'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							628ed9b8dd56342bd96f2f115a2529201631d623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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