auth.scaleflex.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:52:3e:d1:36:65:e6:c3:4e:4b:c6:ba:13:06:55:b7 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=auth.scaleflex.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:52:3e:d1:36:65:e6:c3:4e:4b:c6:ba:13:06:55:b7
Serial Number (int): 15048550380950704137475907252587484599
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:ec:4e:c4:11:b7:26:4b:c6:c2:e2:e1:c3:5f:bc:77:96:4a:d1:ba
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): e3:73:66:ff:02:31:a3:83:be:77:27:8d:4c:71:a2:c9:0f:43:3a:9c
Fingerprint (sha256): 23:bb:90:6d:ad:a0:50:21:6c:98:60:62:81:52:49:5b:0b:1d:31:61:87:df:4a:a1:d4:9c:fe:cb:14:85:cd:72

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate auth.scaleflex.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.scaleflex.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.scaleflex.com

Other certificates including the domain name scaleflex.com

(limited to 100 certificates)
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
www.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
status.altium.com
bare-metal-servers.status-ovhcloud.com
scaleflex.com
bare-metal-servers.status-ovhcloud.com
blog.scaleflex.com
scaleflex.com
bare-metal-servers.status-ovhcloud.com
www.scaleflex.com
image.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
auth.scaleflex.com
service.rosslmersch.xyz
image.scaleflex.com
www.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
reports.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
status.altium.com
bare-metal-servers.status-ovhcloud.com
api.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
status.antecipa.com
bare-metal-servers.status-ovhcloud.com
scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
scaleflex.com
scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
scaleflex.com
status.altium.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
status.antecipa.com
status.antecipa.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
status.99minutos.app
www.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
status.altium.com
bare-metal-servers.status-ovhcloud.com
status.altium.com
status.altium.com
www.scaleflex.com
bare-metal-servers.status-ovhcloud.com
scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
scaleflex.com
*.scaleflex.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
service.rosslmersch.xyz
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
bare-metal-servers.status-ovhcloud.com
reports.scaleflex.com
bare-metal-servers.status-ovhcloud.com
status.antecipa.com
bare-metal-servers.status-ovhcloud.com
status.altium.com

Certificate

The complete raw certificate details for auth.scaleflex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEtzCCA5+gAwIBAgIQC1I+0TZl5sNOS8a6EwZVtzANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTIzMTIyMTAwMDAwMFoXDTI1MDEyMDIzNTk1OVowHTEbMBkGA1UEAxMSYXV0
aC5zY2FsZWZsZXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
5k0mCyCRIC1G/bKVNPKu3eHfFjDMlC7Kd0kmHyuv9wS6SDZslo7cBzaWZZrMzoBz
fn/66b8Qnl9t37zaa88BBZgngDzT1oHGOkUKkBKG6GcJmayPCeY/D72hfmr5z0jp
SpIQIdZS/52civFdMSBPV+WvmG0pXtWZNt+gQ1cz1si18e7vB/vGXPt54lwb6ZRH
JETEnkJeiJEExyORouZavz+c3eKsBebl3sj4YO+MuQtaBmx3KcD5IMBIs3Qxg7+a
F+jN8YGrB4T97xvfcQm7eD5pBxAsefbj6sWMvYC6eU6D6eEaacbBQBXetVL2A8hc
FtjvU14XdOt+EczhgSimUQIDAQABo4IBrjCCAaowHwYDVR0jBBgwFoAUDNtsgkkP
SmcKuBTuesRIUojrVjgwHQYDVR0OBBYEFPHsTsQRtyZLxsLi4cNfvHeWStG6MB0G
A1UdEQQWMBSCEmF1dGguc2NhbGVmbGV4LmNvbTA+BgNVHSAENzA1MDMGBmeBDAEC
ATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNV
HR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRM
U1JTQUNBRzEuY3JsMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcwAYYaaHR0cDov
L3N0YXR1cy5yYXBpZHNzbC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRz
LnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU1JTQUNBRzEuY3J0MAwGA1UdEwEB/wQC
MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAHj6rHtd
8UX2+LLDhTJQaAjxEj2JE3qlU3ESpBijjFcXlaqYRdyP3kDz/THCkACXdrOkNJd6
AtF5+iKz+nFPx+yS99Udw7OmhAe9s7u/CZMlVrd8OaaXIciI2QR5Ft3oZJpCzLXg
svO824G6lMNLkfQBT1+QVhnvjdBFB+BkA16ghSSQp4C721rtjUdN9nojwsZziH3X
dPQ/fFQoiP5mkJnBC1K8Z0wuORiKJ+6qvzdZONtRAmPSkvyn4GuvDNIdNy2e7FL+
tZfrne4/2NIjq72fDt42eoFr+7Fem+dKsnIQq5zqjjYcn7rhl5uMjqLYesnZo9mP
FeZ2YhY1bmn/pi8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k0mCyCRIC1G/bKVNPKu
3eHfFjDMlC7Kd0kmHyuv9wS6SDZslo7cBzaWZZrMzoBzfn/66b8Qnl9t37zaa88B
BZgngDzT1oHGOkUKkBKG6GcJmayPCeY/D72hfmr5z0jpSpIQIdZS/52civFdMSBP
V+WvmG0pXtWZNt+gQ1cz1si18e7vB/vGXPt54lwb6ZRHJETEnkJeiJEExyORouZa
vz+c3eKsBebl3sj4YO+MuQtaBmx3KcD5IMBIs3Qxg7+aF+jN8YGrB4T97xvfcQm7
eD5pBxAsefbj6sWMvYC6eU6D6eEaacbBQBXetVL2A8hcFtjvU14XdOt+EczhgSim
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15048550380950704137475907252587484599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.scaleflex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29072853538343898219483717796121554644864276892328120073488550683620095774243167003615614263616379675050588848343262295682614743562037312906475200002762942826167284425863510868926032563163769283550297379467476305761239553369184301729027822099409332446697450379777207504884734842078790971112982408956026437634283009011772059343428795744317913893928797154418098902364658326201230505311020542039316102528677882210966929330409355253132397264306327837381568070115076123971441400526738667964802911244535289145956243727655591044467385637354849551019596865588304951930046540433223185175338636549469465602176650125863197124177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1ec4ec411b7264bc6c2e2e1c35fbc77964ad1ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.scaleflex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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