uk-lei-rdsfarm04.ametek.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:82:ee:f9:cd:0b:6a:59:c4:90:d3:31:5e:bb:a4:54 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uk-lei-rdsfarm04.ametek.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:ee:f9:cd:0b:6a:59:c4:90:d3:31:5e:bb:a4:54
Serial Number (int): 5996757579505553656868112791290750036
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6e:fb:f9:84:43:ef:d7:52:64:33:49:c5:2e:53:90:80:09:1d:1e:97
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 01:00:40:12:c6:29:a1:f5:dd:7f:cb:b8:11:44:d3:f8:00:c5:ba:8d
Fingerprint (sha256): 33:11:2e:34:b4:db:de:6a:70:df:3a:e0:69:22:20:6f:fb:21:8c:24:7e:37:f7:32:1a:e5:ea:1b:65:54:79:ce

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate uk-lei-rdsfarm04.ametek.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uk-lei-rdsfarm04.ametek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uk-lei-rdsfarm04.ametek.com
uk-lei-rds05.ametek.com

Other certificates including the domain name ametek.com

(limited to 100 certificates)
cn-sha-cp01.ametek.com
www.atlas-mts.es
ametek.com
website-status.ametek.com
amefex.ametek.com
tpmnav.ametek.com
leapfrog-ssl-20.gcs-web.com
wilmington-cucm-ms.ametek.com
www.cameca.com.ru
infoblox.ametek.com
cxo.ametek.com
www.aem.co.uk
website-status.ametek.com
smpnav2018.ametek.com
leapfrog-ssl-20.gcs-web.com
status.placepay.com
my-apac.ametek.com
*.ametek.com
leapfrog-ssl-20.gcs-web.com
sg-relay3.ametek.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
ametek.com
superiortube.info
leapfrog-ssl-20.gcs-web.com
ma-wil-ctc-trap.ametek.com
amefex.ametek.com
de-kle-svn.ametek.com
superiortube.info
webmail.ametek.com
theim.ametek.com
horsham-imp-mipt.ametek.com
my.ametek.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
aem.co.uk
sg-relay1.ametek.com
leapfrog-ssl-20.gcs-web.com
mobilemail.ametek.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
aerohqms.ametek.com
smpnavweb.ametek.com
leapfrog-ssl-20.gcs-web.com
uk-leildc-cp01.ametek.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
my.ametek.com
my-aws.ametek.com
thcrm.ametek.com
leapfrog-ssl-20.gcs-web.com
tpm.ametek.com
theim.ametek.com
leapfrog-ssl-20.gcs-web.com
www.aem.co.uk
wilmington-cucm2.ametek.com
superiortube.info
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
smpnavwebtest.ametek.com
*.ametek.com
tpm.ametek.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
thcrm.ametek.com
status.hykucommons.org
leapfrog-ssl-20.gcs-web.com
status.hykucommons.org
superiortube.info
leapfrog-ssl-20.gcs-web.com
www.aem.co.uk
motecnav.ametek.com
ametek.com
leapfrog-ssl-20.gcs-web.com
atlas-mts.es
ametek.com
pa-hor-as318.ametek.com
ca-irvfmh-as06.ametek.com
wilmington-imp-mipt.ametek.com
leapfrog-ssl-20.gcs-web.com
my-apac.ametek.com
airtechnav.ametek.com
ameteksci-sf.ametek.com
leapfrog-ssl-20.gcs-web.com
support.surfacevision.ametek.com
leapfrog-ssl-20.gcs-web.com
my.ametek.com
ma-wil-nexpose.ametek.com
careers.ametek.com
pa-hor-as318.ametek.com
my.ametek.com
smpnav2018.ametek.com
tpm.ametek.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
atlas-mts.es
uk-lei-rdsfarm04.ametek.com
leapfrog-ssl-20.gcs-web.com
apac-thcrm.ametek.com

Certificate

The complete raw certificate details for uk-lei-rdsfarm04.ametek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIQBILu+c0LalnEkNMxXrukVDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA0MjYwMDAwMDBaFw0yMTA0MjYxMjAwMDBaMCYxJDAiBgNVBAMTG3VrLWxl
aS1yZHNmYXJtMDQuYW1ldGVrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMmUJkwBPa8ftgU99rWSIHozGLhYYL1r2h1Zgwc3v/ZJbL/rESn5sMW3
Whv/hH4US4p8aSgwJ+pPDW8LdhezM2xmsUw8XuI0SOyHz/usBE6qWDdd8l36crQf
EdiX1HLNI/V3TXuX+mDKebxqblDKen06q2utfNvxH3xZaJxglBGzkJbbMifSSbF9
OzUr02pNEBW2oB3XGuZGqgjiZN32dpKKgAnr3ztzKqv2QzZK8D3qX2ztrMspFs+k
4QjWuXUpzGkTrw18gWpn5+XnHSCWMXqEhh1Pd3RF+2Z597uPDb5vtBRfqoIIEk+C
1L64NoiRFzJVy5gE0Ab2CA1Wy5O95x0CAwEAAaOCAdkwggHVMB8GA1UdIwQYMBaA
FJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBRu+/mEQ+/XUmQzScUuU5CA
CR0elzA/BgNVHREEODA2ght1ay1sZWktcmRzZmFybTA0LmFtZXRlay5jb22CF3Vr
LWxlaS1yZHMwNS5hbWV0ZWsuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2Nk
cC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMw
NwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYa
aHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9j
YWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0T
BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKkK
Dg6vpE1csFCT7VVO6wcLB6/uABN5MAKBOfQaQ4T7Q0axkAbodbMBgWw0ZHqqcbi3
OfO8Uzj2s+Hb1lCj0Q1IbYzT8szgu7zith7T+0OEYATcIbTQ+A3rCc//Q1EXCp1T
0efi5L7Tj9uN0HOtnItHP3LgqrqVQ45xfq8jlrd2iI+Ekw+3z9kQcdjnN5YIOYnk
Lwt+EqW2BY1O8xTJ/MuYqJKGOKiDq5Oi8EcritO4Q5vzEtgxYtuAc82M3qlidwYL
1ovceK2KUoNRpc3/pEsdD0cpKmRlUiCpQE7fwPEW5rpFstCiMLJfwCf7jELgxSgL
qPrVHxGstwxWINT+xQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZQmTAE9rx+2BT32tZIg
ejMYuFhgvWvaHVmDBze/9klsv+sRKfmwxbdaG/+EfhRLinxpKDAn6k8Nbwt2F7Mz
bGaxTDxe4jRI7IfP+6wETqpYN13yXfpytB8R2JfUcs0j9XdNe5f6YMp5vGpuUMp6
fTqra6182/EffFlonGCUEbOQltsyJ9JJsX07NSvTak0QFbagHdca5kaqCOJk3fZ2
koqACevfO3Mqq/ZDNkrwPepfbO2syykWz6ThCNa5dSnMaROvDXyBamfn5ecdIJYx
eoSGHU93dEX7Znn3u48Nvm+0FF+qgggST4LUvrg2iJEXMlXLmATQBvYIDVbLk73n
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5996757579505553656868112791290750036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uk-lei-rdsfarm04.ametek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25446954587385697882913611023183368574385608171631666585313619491153644499087091682078032652737200766058243763736263376752910235559423784651659159471440007054348335196329804445559122540148119124750839260953907048575608442640100093063504892527159899389292397158134820698697541060981948323400313573881670835193082021905635602764581921316004104640087539036603749149151815916366166458192238882747436112003015425664947351345477007209024125816167511638594350254862434870105889632451798089811188644449466138030180149459790752782542540631024254818647780321485399217346739256793879779216926083192043873454747215384734303381277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6efbf98443efd752643349c52e539080091d1e97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-lei-rdsfarm04.ametek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-lei-rds05.ametek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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