fsfix.accesswca.com

- Wells Fargo & Company -

Issued by Wells Fargo Public Trust Certification Authority 01 G2

About this certificate

This digital certificate with serial number 0f:28:24:6f:4d:ba:d8:a2:75:00:a1:07:7c:a2:29:99 was issued on by Wells Fargo & Company.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Organization Validated TLS
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:28:24:6f:4d:ba:d8:a2:75:00:a1:07:7c:a2:29:99
Serial Number (int): 20146850796243130728830707400381180313
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: da:23:8d:41:6f:4c:f9:5d:a3:d4:35:29:ec:fa:cc:ff:54:08:61:ba
AuthorityKeyId: 39:13:9e:e1:41:d2:3a:45:0b:38:80:60:af:b5:21:41:7c:01:89:7d

Fingerprint (sha1): 45:a8:38:f6:88:75:a5:b3:c5:a7:2b:f7:2c:f2:fb:ff:73:8a:8f:47
Fingerprint (sha256): 40:b8:75:4e:0f:ba:fb:c8:90:54:7b:ca:5e:73:53:35:a2:79:c8:78:e7:07:64:72:ae:2b:e7:1d:95:d2:c1:e8

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt

Revocation information

OCSP Server: http://statush.digitalcertvalidation.com
CRL Distribution Point: http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl

Check the revocation status for certificate fsfix.accesswca.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsfix.accesswca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsfix.accesswca.com
wcafsfix.onlinemyaccounts.com
wcafsfix.getmyaccounts.com
wcafsfix.servicerconnect.com
wcafsfix.ctslink.com
wcafsfix.securitieslink.com
wcafsfix.cdolink.com
wcafsfix.wystar.com
wcafsfix.currencyteller.com
wcafs.wwwfix.ctslink.com
wcafs.directfix.ctslink.com
wcafs.wwwfix.securitieslink.com
wcafs.wwwfix.cdolink.com
wcafs.wwwfix.servicerconnect.com
fs.fix.accesswca.com
wcafsfix.myonlineresourcecenter.com

Other certificates including the domain name accesswca.com

(limited to 100 certificates)
wellswcapa.sec.wellsfargo.com
wellswcapffix.sec.wellsfargo.com
fix.accesswca.com
wifpt-uat.accesswca.com
www.accesswca.com
wifpt-fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
fs.accesswca.com
adminfix.accesswca.com
wellspauat.wellsfargo.com
fix.accesswca.com
ciamfix.wellsfargo.com
fsuat.accesswca.com
fs.accesswca.com
adminfix.accesswca.com
wellspafix.wellsfargo.com
dev.accesswca.com
fix.accesswca.com
fsfix.accesswca.com
www.accesswca.com
dev.accesswca.com
www.accesswca.com
wifpt-fix.accesswca.com
uat.accesswca.com
adminuat.accesswca.com
www.accesswca.com
wellspafix.wellsfargo.com
sit.accesswca.com
fix.accesswca.com
fix.accesswca.com
www.accesswca.com
www.accesswca.com
fs.accesswca.com
wifpt-uat.accesswca.com
fix.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
fsfix.accesswca.com
dev.accesswca.com
fsuat.accesswca.com
wifpt-uat.accesswca.com
uat.accesswca.com
fix.accesswca.com
adminfix.accesswca.com
fsuat.accesswca.com
wellspauat.wellsfargo.com
www.accesswca.com
www.accesswca.com
fs.accesswca.com
www.accesswca.com
fs.accesswca.com
wifpt-uat.accesswca.com
uat.accesswca.com
fs.accesswca.com
admin.accesswca.com
fsuat.accesswca.com
sit.accesswca.com
fssit.accesswca.com
adminfix.accesswca.com
wifpt.accesswca.com
sit.accesswca.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
fsuat.accesswca.com
fssit.accesswca.com
fix.accesswca.com
wifpt.accesswca.com
www.accesswca.com
adminfix.accesswca.com
www.accesswca.com
admindev.accesswca.com
fsuat.accesswca.com
www.accesswca.com
fsfix.accesswca.com
wellswcapauat.sec.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wifpt-fix.accesswca.com
wifpt-fix.accesswca.com
wellswcapauat.sec.wellsfargo.com
fsuat.accesswca.com
wellspauat.wellsfargo.com
fix.accesswca.com
sit.accesswca.com
admin.accesswca.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
adminfix.accesswca.com
dev.accesswca.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com

Certificate

The complete raw certificate details for fsfix.accesswca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO94Dke8JmS08/QXS2ZP
9jWStfR3vcXkIgDzNjScg+zThRN/wXlBya7dwZ5YqKAIJ6BcPNn7j1gP/q5rVHoo
B7yZWuAaQ4sD8vWn01VVp4vqnleFhgxhrcNzi53F+xHl5pMHDzlEdOvAQL/+NmsD
CwIfu6/9HPiQj3DHpHhWIQBNwdTDhpDGcuiCSPVYaYg2ChuS1uNB31Zgk5b0J6Ti
WI7gDUtmRJ7gNVwb3nPZnSzHRkPERtDiIAK44s/omGdhzajIt/GA9dLb1yy2yUSs
wQDryaiS4LdEAhciGxdDJjV1eDfqJ8n1WYZuWoUiAR/WAcw+qxcEFhc1GVKpUfm/
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20146850796243130728830707400381180313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validated TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Public Trust Certification Authority 01 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsfix.accesswca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24355841102700106895075051487051387439041246922710588069839469209328560271495553487574216501750642426552212030478082983795313970823353729462066311100376791694424658538549498710930017504203350941702379245670111000661349515525002211860741297701279120747039051318271391390405531593490018940643367260940381019636261925307514975380788156587835690470347933077019340939046251622326989214786042056729241456581871667694848256272191479499761156246688100637736643588697262922733023461348905290818666259772176135889453539974058232098904124439425046241928972998720818380094608908878088011088795583451889627798502010744339078692621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39139ee141d23a450b388060afb521417c01897d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da238d416f4cf95da3d43529ecfaccff540861ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (444 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsfix.accesswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.onlinemyaccounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.getmyaccounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.servicerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.securitieslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.cdolink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.wystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.currencyteller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafs.wwwfix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafs.directfix.ctslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafs.wwwfix.securitieslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafs.wwwfix.cdolink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafs.wwwfix.servicerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.fix.accesswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcafsfix.myonlineresourcecenter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdph.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statush.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/WellsFargoPublicTrustCertificationAuthority01G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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