The Hershey Company

- The Hershey Company -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0c:df:75:00:72:e2:fc:dc:00:22:2e:c0:f5:0e:39:ec was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The Hershey Company

Company registration number: 224803
Organization: The Hershey Company
Address: 19 E Chocolate Ave
State / Province: Pennsylvania
Locality: Hershey
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:df:75:00:72:e2:fc:dc:00:22:2e:c0:f5:0e:39:ec
Serial Number (int): 17110991226351586730960832183472634348
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a4:dd:1e:bf:02:5f:25:0b:5d:57:02:e6:b8:65:33:4c:60:73:f7:32
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 91:13:63:98:23:a1:b4:1e:8a:a5:6e:ea:97:68:15:78:1a:1b:73:0b
Fingerprint (sha256): 45:9e:4d:48:e4:44:7d:d8:03:5d:f5:c0:4e:08:24:42:69:0b:6e:bd:07:8f:1f:d7:be:6a:f5:46:de:a9:1c:27

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate The Hershey Company

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The Hershey Company

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hersheys.com

Certificate

The complete raw certificate details for The Hershey Company in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JKuX6pazWpW95ZP7RAR
UqsikGSFS0Zo0HsyGeuok/LZndMJQ3lZ5fc8Dd6f4/3/+ARYuwcNeOTLaSXC7MKZ
OFlUDKt3g4GPSfX75hz+p06xcSlEIGqbt1OlD0aF10ZibJqDPy/s4AGk8yqpdf7y
sY7HP6C8tW53cmuaXUcRVEtoeVGQr+EszlzxdEnVQWiXLy2FjWIBBjsaQmlE6biy
JxjuO4+y5GntjcSVxfQ5eoeZLiQHeRz2jcyif79xLmD/ltaE4Qd7XphVvqRsr42p
Mx1VSMm3Epg9wWm00ha4lQw091e2EudCXMSppHYf5RV3MDtlX+FAsd3HCZu8YYq+
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17110991226351586730960832183472634348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '224803'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hershey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19 E Chocolate Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hershey Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hershey Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00004012936'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27844758262056000854239396232491416995891545410181795582599250402460718803889319140745096950627798552928723743170636152259463918040392523970099517393894887707519734546455116702933832189847660003446369093005485962626094197031229363378628778154516398254632335967362550473871548334528868387334995366323142289334988343594198956055873801485616531239654494520827487203150502779452727241769426839557319101180740398518923968832870190113039580401407508915885882126113687046405250210172032277819203846956961080850401878784701506968448663281785929439518721865659455540177487590215608786788217842807186551958454098098498640199397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4dd1ebf025f250b5d5702e6b865334c6073f732
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hersheys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															f9ba4b4a6d45cdeffb7775119f8aaa2e48426a7c
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAACpVWTW/bRhA9279iy54KcFf7vaQhOXCMNs4hQIAWvhoOzYhCGUmQaMnur++bWTqi2wZJL9TjcHbmvdnZWc3fPH3pxaHd7Veb9aIwSheiXTebh9V6uSgeh8+yKt5cns9/klK8a9ft7n7Y7C7E1cPmUyve9/3jfmCTsElFZUrx++078evTdrMbxMf+cSnfr4Vi423OcSGi0lq8fVz1D0L/IoSUCL8/LKckbCE+3e/bj7vN51XfLophtX6W230hQHa9XxTdMGwvZrPj8aiOTm12y5nVWs8QZXS5eOpX6z//y9HUdT3jr4U4rNrj283TotBCC6Ot5weHuNhv7xtk3u7afbs7tAVIDquhby//6FpxA6pd+yyuN1+29+vn+Sx/Op8vxephUdw9uXBnLK2ZLadWc0fxL8/P5jCfnc13bTOIZ+QvBIT2i+Jn9xuEvC3EcfUwdCgF8+na1bIbxrcZr+T1Z/Pt/dC9LL1KV/XVdSGQ6kNKUfnSa69SL21QqTQe29PrMmKfeukiTLrXEq82e0jyiDfJhkaXuqxUKEONHTUGKNXKUsKzxqpKWk12rWpJ9hO64bR/ZYrfJufqSrkyVFq5gwxapUZLY5WVQTlpDR7GUxZQa4yGNZYmqCAN6yDkQOAgnVEpk9K0rKIgTroA5MyIOhmcqqDbGvx2MKEI0mhk7YKqIcewWD8+axQMRYJbQwZ8hHqTqJh4sVRPTXyU67xXgdNfeyQOZTRUsywuompVOREqPjgEtaWvzBjayoSIqDDY4EPNZi2dqvH0WKcPxN13volkozKH0gIyqFTk5Lcc8bs195DvSu/he7BcclJlsyrqFRCOpUvKNUQzkWpDZnJg/VgVekP1okrmunuSnZ2JE4OKy40NqJHDqQhFpows19FvA3GoNr1Kaib6TbSdxK2jTfO3oaImtCyWpoqjUnk7orERNSqsS+8QmnuUERq7QmeAWG6qKKFrbCo0jXSob4OWIjr4hvpKZEjU0kHy9koIkDV5RWYW8OLI0zKgo8IEqI3QYA01KHghRoI86Gk891Tk3Yr8mw6oR+hAi9rW0lZTIE9hk3RoPOnpEBG69pb6zmtUsBy3jRKVky1kAl+3fNM/Lzfrf+76drNaD5iVIdqXUSBGXEGZCJ6LOsXZh47zK8yNPfpkzPmzIZiXsCc0LhhPwgnnoD9O3VT2K60RM10TI9VjirOPo7M5xTl79plQzwYinMOeUHayppqg/0vbJjpLoUq0PmPEcsLWCdWcYg8fP/q8wjgFNXxq8mHMtEcD07FopuoVzoSdPsnIOBP5cfoxUOflVSNmyjHxNJvgTDn7vMJMOeJKcFP6o4EpR8PTcIIz5VidGijjf9P/xoirDB1EX3vMGD77rqSjbCkIjRK6UELDp52OU6ABQCpQcUun0R1w8Orrqqa7Ec1VVsG/nJaycih2Pd6BPFgwOnF+aTIaO96IGA34Rjcizx18oaz0hcYJ9aPGs5I0a+jX3DLb7w7vVPmXPW0kD0RNYgy0kQKJm8g147Si6RzpArU0sS2PvobuJ5o1gcappzlnaFAnGpTjOKXhyAzJE4INqcPSPGVJlKbbl0W5hopraMZxlsjBSgrW8LjLl0TNNwXTKIlGTsSulgIkamBQ510gcMNCx3LwX6f8HB/4e3d5/jdVtzz8sQoAAA=='
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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