Affirm, Inc.

- Affirm, Inc. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 07:75:44:66:8d:03:48:0e:e4:79:e7:4a:eb:af:c7:e7 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Affirm, Inc.

Company registration number: 5154042
Organization: Affirm, Inc.
Address: 650 California Street
State / Province: California
Locality: San Francisco
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:75:44:66:8d:03:48:0e:e4:79:e7:4a:eb:af:c7:e7
Serial Number (int): 9913482031709964158789106892956223463
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 48:2e:75:bf:c4:43:df:23:9c:93:ce:79:7a:b9:cc:cb:66:2b:cf:e2
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 63:24:fa:e6:6b:5d:c6:0e:09:ab:40:2a:b4:11:20:71:74:65:fa:9e
Fingerprint (sha256): 6a:ba:78:84:72:9f:7f:18:2e:1e:01:30:40:99:23:b0:5f:43:26:b2:61:92:ad:20:f3:df:cf:e9:32:cc:26:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Affirm, Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Affirm, Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affirm.com

Certificate

The complete raw certificate details for Affirm, Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApag0lcWKQwcvtwDIsmYa
Avue7QuKbVUs3nYtNgOD6eCjdu2efzDjr5OlccQACs3XQgvElTgHyOna9VuLBz9U
FRIanYuYHs0SsG5KR4K2DSo0KLkT55z/R6Ah3sj5lKs1gdgUZ4nNjtJZRsSfIg5P
akAHdhLs682jQTZQpQibRw7kV6XJSci7IT3Qp6zdYS7RjFW4zyEV7Za3oZdI5Ho9
u/vM4vCImXv9yVCI+eLvUOB8JjRlw+Ol2WMh40qXhWGDa14+8UeZn41HJ6BX13hh
iszTkjiMez65oFcM4tSXU8QFwnZc+Drhsh1u2FANsY5NFRWXQ+AMHewZL9pIjSCH
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9913482031709964158789106892956223463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5154042'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '650 California Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Affirm, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Affirm, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6148209'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20912265498644473391337621806416215956374795508126766906872991883486341391739521923861126342472014208387253849073204476374166857361178018461830732945001741221044910322736836650748831421683532344855887710501221895304394064854240611402479735661815772003953839325146034658624382411537927776081456883933064124154741898408378089255831076678106802017314961137897571066575523067687839127144137594355755657436113926444748617042871898300775590170646119137091987080633743860760865961050103190032087106296254239467175029863262401392297381289516436930616042215047260305491503242210778483091383305862319505298314438176080666855383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							482e75bfc443df239c93ce797ab9cccb662bcfe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															602ff43b45c945fb87ab659d30c635f569d5bcf4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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