Proton AG

- Proton AG -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0e:66:7a:86:1c:fa:8a:e2:2f:51:bf:18:ff:1a:c4:f7 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Proton AG

Company registration number: CHE-354.686.492
Organization: Proton AG
Address: Route de la Galaise 32
State / Province: Genève
Locality: Plan-les-Ouates
Country: CH

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:66:7a:86:1c:fa:8a:e2:2f:51:bf:18:ff:1a:c4:f7
Serial Number (int): 19141291300073264642826200963396322551
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:75:4c:df:e4:49:84:3b:e5:1d:c5:82:28:26:9e:24:89:de:ae:aa
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 56:74:60:18:1c:71:62:6d:72:57:12:84:8b:b3:c9:ca:35:b5:9c:f5
Fingerprint (sha256): 2b:0f:4d:0f:c2:6a:8c:f1:49:b3:07:de:49:2d:63:2c:cb:26:21:07:9b:c9:0a:18:ab:fe:5a:c8:d8:0b:7b:92

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Proton AG

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Proton AG

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proton.me
protonvpn.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Proton AG in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTeyUIcKpwy3zASDVr3Z
GPZBHrXCcnS52KYfAJV1NiNsvwvq018iTmeyL5u/OmY5lazJPE2UbCIX0uszDlUs
Pi3xOuHfOClj44XB6Wnc6UrhVnsphNAgpLi8XG4wKpZ1pBAFKAcPNVilQK8SG16g
3HwA3gzEYFHaTVRMw76oUCm1QalUhRFceQz0zg8nuosAiop3vHEH5nmVFV3/s5nk
txuQleDBl3Fre2NQQ3yY7cNogzgS0yT8lh9oS3qxTRNvlHGOGmxBlPYzLdy0Q80Y
IINFrDDXWLR6RRsKuO3mPsO8KnT1Psve0XFomTDeYVnWIERWoPq8S/ppKzL0Pe9j
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19141291300073264642826200963396322551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-354.686.492'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plan-les-Ouates'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Route de la Galaise 32'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Proton AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Proton AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00003851909'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25401364286303384495443947293583260069340722092010739396711222992505373836953427136104216566404062536015015601046122880360006237327886218652423192727347290507569351492535146630572823508368198645291412254828310842740301851616296641685176734167603934245480792395622373010053857888269920702841965866392863391270206337611375146413216557716393117777780842000645229407762509974199740522673289346441988291448979426687860253059214084738047038473506723714789961120468366638085871869508783603484638570265518081994122376652945273099036591708033999958503199258568520027273891468932890638930587501170979525627662875914609124926297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1754cdfe449843be51dc58228269e2489deaeaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proton.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protonvpn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1262 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															f4cd912127bfdef98e966e70902ff9a4f8bd9401
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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