NPROD.LIBERTYINSURANCE.IN

- Liberty Mutual Group -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0e:e1:6b:3a:76:6a:24:f7:46:87:67:32:a3:5d:c7:0a was issued on by DigiCert Inc.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Liberty General Insurance Limited
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:e1:6b:3a:76:6a:24:f7:46:87:67:32:a3:5d:c7:0a
Serial Number (int): 19779633583867726855558785786663782154
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:f8:fc:06:37:a9:f9:bf:cd:6b:63:0d:2e:d0:93:04:45:83:8f:db
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 45:f1:e6:ae:90:93:62:c0:37:bf:d6:ac:c7:9b:8d:2f:8b:62:0e:91
Fingerprint (sha256): 41:79:53:bc:34:1a:66:b1:84:59:76:0b:ec:49:c8:18:9e:d5:37:1d:bc:82:b2:91:d5:fb:09:56:92:07:9d:ce

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate NPROD.LIBERTYINSURANCE.IN

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for NPROD.LIBERTYINSURANCE.IN

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-nprod.libertyinsurance.in
motorpi-nprod.libertyinsurance.in
livmobile-nprod.libertyinsurance.in
api-nprod.libertyinsurance.in
appservices-nprod.libertyinsurance.in
vendor-nprod.libertyinsurance.in
healthinsurance-nprod.libertyinsurance.in
mobility-nprod.libertyinsurance.in
pare-nprod.libertyinsurance.in
business-nprod.libertyinsurance.in
partner-nprod.libertyinsurance.in
healthinsurancepartner-nprod.libertyinsurance.in
oem-nprod.libertyinsurance.in
quotation-nprod.libertyinsurance.in
services-nprod.libertyinsurance.in
mydashboard-nprod.libertyinsurance.in
claimportal-nprod.libertyinsurance.in
lfoservices-nprod.libertyinsurance.in
S2SPay-nprod.libertyinsurance.in
session-nprod.libertyinsurance.in
livestream-nprod.libertyinsurance.in
trust-nprod.libertyinsurance.in
claimsportal-nprod.libertyinsurance.in
NPROD.LIBERTYINSURANCE.IN

Other certificates including the domain name LIBERTYINSURANCE.IN

(limited to 100 certificates)

Certificate

The complete raw certificate details for NPROD.LIBERTYINSURANCE.IN in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3DUqcZj5FyjZqtC+Dy
2yPabvoX602sA4VsWdhhAZdzZVA963kIDlbaZJ0UrO1duS0WpokFNoAU9LZJb8Ur
tUUZ9B/aOLA1bFShFcwJdk7NeWRbIyiOr+i5wLJk4abqpzBxKShKFg8CQETnzlw8
ep+hjoijbPmXrW6/63zT8wIEhgiF1v1WnLb+4d4pOhUCX734ajSgzcI60gJX7//X
W6VFt86vp4CYrYtEN7f4d8jRxM2pfCp9NY7JSavpyu1n3vWItCptlu4sQ7qa4dEG
LcwkvWRJ7cbOCJi3ZBiv4txgnBcX/pctDYlLH0suS9es80vYFFyuQWa8jWlEHyjY
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19779633583867726855558785786663782154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty General Insurance Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NPROD.LIBERTYINSURANCE.IN'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24236651437773363656726045387690397950885991774153784206131618832023421149277689138911980201761738323864144486409181831092591914641113839009136396796737465648192851108434659605745963887876276034054001705728013195792417557380554400805264204066378820678815650861442931974209631486218327144019584923179319319437052905117429271569122495070559943344915346897517933369598549409053935516175076341531898360970140498201403505566229166515506759167697483348070605555686798658736399008418547493534905053832883986697917284106534011611596676333343154039325911238046612276812400223288590594205645425611552543412710156517344620894437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94f8fc0637a9f9bfcd6b630d2ed0930445838fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorpi-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livmobile-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appservices-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthinsurance-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobility-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pare-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthinsurancepartner-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oem-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotation-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydashboard-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfoservices-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'S2SPay-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'session-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsportal-nprod.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'NPROD.LIBERTYINSURANCE.IN'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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