*.sap.cebupacificair.com

- Cebu Air, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 58:bb:fa:66:c4:6d:dc:c0:f2:1e:26:86 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cebu Air, Inc.

Organization: Cebu Air, Inc.
State / Province: Metro Manila
Locality: Pasay
Country: PH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 58:bb:fa:66:c4:6d:dc:c0:f2:1e:26:86
Serial Number (int): 27461932479889126558277707398
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 31:54:fb:6e:77:ad:a7:22:49:77:18:da:24:6f:54:ce:a7:59:58:79
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 18:5d:de:b1:ef:5c:e0:17:c5:f7:32:31:96:23:02:03:f8:48:95:00
Fingerprint (sha256): 4c:b8:e5:33:4a:49:ae:dd:7b:a1:4c:64:0f:e8:2b:3c:d5:ef:25:53:71:22:ad:ea:e7:fe:e8:81:25:3a:58:8c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.sap.cebupacificair.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sap.cebupacificair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sap.cebupacificair.com
sap.cebupacificair.com

Other certificates including the domain name cebupacificair.com

(limited to 100 certificates)
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
facilities.nchmd.org
cebhelpdeskportal.cebupacificair.com
partners.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
soar.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
ecrew.cebupacificair.com
facilities.nchmd.org
cebupacificair.com
learning.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com
groups.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
*.sap.cebupacificair.com
groups.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
funtours.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
connect.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
test-groups.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebgoreceipt.cebupacificair.com
checkin.cebupacificair.com
deal-broker.com
book.cebupacificair.com
*.cebupacificair.com
ent-soar-tp.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
deal-broker.com
cebupacificair.com
baggageservice.cebupacificair.com
helpdesk.elrey.com.co
book.cebupacificair.com
*.cebupacificair.com
5jwebapps.cebupacificair.com
*.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
documents.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
mobile-api.cebupacificair.com
secured.cebupacificair.com
groups.cebupacificair.com
*.sap.cebupacificair.com
test-groups.cebupacificair.com
helpdesk.dalycity.org
*.cebupacificair.com
*.cebupacificair.com
ekp.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com

Certificate

The complete raw certificate details for *.sap.cebupacificair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIMWLv6ZsRt3MDyHiaGMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEyMDEwNTA3MDRaFw0y
NDEyMzEwMjE2MTBaMHAxCzAJBgNVBAYTAlBIMRUwEwYDVQQIEwxNZXRybyBNYW5p
bGExDjAMBgNVBAcTBVBhc2F5MRcwFQYDVQQKEw5DZWJ1IEFpciwgSW5jLjEhMB8G
A1UEAwwYKi5zYXAuY2VidXBhY2lmaWNhaXIuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjxRZEJJvNTJzvsfIxfViQZjOgLMSkVm0oYBIxg0UYwKW
tdwvXg0l7gU5u6sdqSoj2txsEsLozWjHkH9Qvwh4jXorDabRPXNVrVeUz9rzlqFk
sV7WmRygGw+4mrOgQkM2GTJBZV7Uw/8QobvBDYl6NjLu5o2LlSAzCUHTHETBxmnQ
3dbDZUM4ERIme1tsG8oDHoJ/ut6nv7zJtAooAf23brLKQq83jBUniTdbktKGFLai
XivroSmALTgpByAOuoLuL46zyyzewjbvtGJvRvqoTuRhKREppWPsL0HRf3rZa21M
pGnWBmhca+kebGM2eDbJlV9jlfWlGExJL+XSFIpoBQIDAQABo4IBvDCCAbgwDgYD
VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgY4GCCsGAQUFBwEBBIGBMH8wRAYI
KwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dz
cnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9i
YWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGg
MgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3Jl
cG9zaXRvcnkvMAgGBmeBDAECAjA7BgNVHREENDAyghgqLnNhcC5jZWJ1cGFjaWZp
Y2Fpci5jb22CFnNhcC5jZWJ1cGFjaWZpY2Fpci5jb20wHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPr
MB0GA1UdDgQWBBQxVPtud62nIkl3GNokb1TOp1lYeTATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyUlAr4Z071ZaFAbo3clkKjjzeYj9iYs
wUBx9T/ZfZtgBn+1r9a5VjiqIGFjAsN6b8jRJbgBdoJOih+vJZxVRo2uBPqkSn62
CQXvARO+Nj0YMDIBCx5b3Zn+MmJKQLF33Lgji30xcT5O8w3jtwRHpRhfOTCCjFEs
E0ww8n68b95iORENmtq6qRYgesblbG/k/B60ZlRwP+30kB+lcpxWR7rnekQNjFgu
VJFGo1b1wb/+32Cb8A5uz9ddvmwB9HWef2ExQtHv9BqHC/w/ssIQLSKg1KlDaie4
BdMuo9W9xHQHxWC+6F0uoqe9iidPq5mpbCVmI9KAylYTmWKEcCLbcA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxRZEJJvNTJzvsfIxfVi
QZjOgLMSkVm0oYBIxg0UYwKWtdwvXg0l7gU5u6sdqSoj2txsEsLozWjHkH9Qvwh4
jXorDabRPXNVrVeUz9rzlqFksV7WmRygGw+4mrOgQkM2GTJBZV7Uw/8QobvBDYl6
NjLu5o2LlSAzCUHTHETBxmnQ3dbDZUM4ERIme1tsG8oDHoJ/ut6nv7zJtAooAf23
brLKQq83jBUniTdbktKGFLaiXivroSmALTgpByAOuoLuL46zyyzewjbvtGJvRvqo
TuRhKREppWPsL0HRf3rZa21MpGnWBmhca+kebGM2eDbJlV9jlfWlGExJL+XSFIpo
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27461932479889126558277707398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 05:07:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-31 02:16:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metro Manila'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cebu Air, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sap.cebupacificair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18062111538102477435185290106341187684859369580573140829714398863083508035675848105772448545493007546308208698105266722070794523312183913008297987102418913545475770663683105817497873225760455498452730003667188580644874828933291670793804175852624565850002804509427615811582161021572316453093323849602357088419552271941450764454943257000869905226238458347676045314198839798956768982948347952713646488518233495778727102168866254346521572495272248739606339253212698107208698686227519650311101758699285720446737003368743009414771027655345270236932845123374391360990115199415417289593175828652881704412929896452674426660869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sap.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap.cebupacificair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3154fb6e77ada722497718da246f54cea7595879
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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