sslgw.ikanobank.de

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 38:eb:89:70:aa:68:4d:e2:59:3a:41:71 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Organization unit: IT
Address: Hyllie Boulevard 27
State / Province: Skane
Locality: Malmo
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 38:eb:89:70:aa:68:4d:e2:59:3a:41:71
Serial Number (int): 17615907160127401120088342897
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a5:a0:7f:eb:e7:c8:71:50:64:52:c1:b1:a7:7c:e6:da:6e:e0:42:e0
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 67:8f:56:35:21:e8:9f:2b:c1:56:da:fc:2e:46:2a:cd:f0:dd:15:09
Fingerprint (sha256): 73:36:55:de:cb:cb:a9:b7:e4:01:0c:58:a7:d5:33:8e:be:82:1f:15:d2:b5:51:2b:c1:50:45:55:48:7d:57:aa

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate sslgw.ikanobank.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sslgw.ikanobank.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sslgw.ikanobank.de

Other certificates including the domain name ikanobank.de

(limited to 100 certificates)
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
etracker.ikanobank.de
etracker.ikanobank.de
www.ikano.dk
ssl508615.cloudflaressl.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508616.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikanobank.de
www.ikano.dk
www.ikano.dk
ssl4788.cloudflare.com
www.ikano.dk
ssl323815.cloudflaressl.com
www.ikanobank.de
www.ikano.dk
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
etracker.ikanobank.de
ssl4788.cloudflare.com
sslgw.ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
antrag.ikanobank.de
ssl323815.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
ikanobank.de
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
antrag.ikanobank.de
antrag.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508617.cloudflaressl.com
antrag.ikanobank.de
www.ikano.dk
www.ikanobank.de
ssl4788.cloudflare.com
www.ikano.dk
ssl4788.cloudflare.com
ssl4788.cloudflare.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
antrag.ikanobank.de
www.ikano.dk
ssl4788.cloudflare.com
ssl323814.cloudflaressl.com
ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
zahlung.ikanobank.de

Certificate

The complete raw certificate details for sslgw.ikanobank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxUwte6YyW1MIj5Uc6u2Z
u24u+IaF7HCv0++P/hNc9TEqkL8gMbRhCW7MRDk3x+W80D6KK9WYWnmVT8Oy2rrp
0P4hEGUi1rXF95apPCgRNfF6fMPHqPbNQBCMlHy6ym1LcTXuhgJKnbxPg2VfryhC
zBpTvr8xDvcK2XeYtecANjtYtUQ4R4NPvAHDcQwodJB56xhax2mhLZ2Ra5fP6DQ+
a40Z8bV8ujIUHbbBak3gQ3+P/G7YZYubCglQQhJxnwQ2eD8sY2AdTnGgI3643baU
tC8WoNnvLgD0Gafr/UoSDYsGAX1kHph0riUiiu/+yVA1/8kkC3AxGc1nbDze5DeS
Ni0LbdBIg5iUy8y1vARCo62kTW7Fr2qO8LhfftlmDyDjF2OVhAb82igXuAbNIinK
Y0P7y23Xd7lCIY3yXJ5NIDufmRd/c+S9a5gAKBmmD4SLo1FwbrO27kQPKM7eV3Rw
IObEMoVflhXRQhQzLt/00GiiVNhx/13vPOKJ84JniTKW3upjqXV8AdBBNo2cT7oW
aG9O+Agm0+5690ehMgFvj+f+ilRTOiM+AsMBvFHuN1aukDMseI9boqnG19zN92HA
ZJjH9DKLHvvzQ9r6H2mo3vH49IVLezauSVq7wifQBHfKjuauwFaDoTEdFxOjXyLC
yirx5uOLoKbq2U684snrjbsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17615907160127401120088342897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 04:41:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 04:41:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Malmo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyllie Boulevard 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sslgw.ikanobank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804903857069181360596817052328256702723148876918631784241809231193568090854408059473245887907595627179656151564265204381637779986615403134810761577193569182122638610064373879937703959345912055321938540004356751913170594313962593843733057017893632706899723356447008028495868935373800470438639114381749153897715983151502843007860175329504125782481728786986038497650801314211750099534430608203079318634679165425233125944578805049130412919550742172217410479566364645201311623648084288824344674635711423085939429015694697179896161589611621760568325032264356506441707783496327066491238230180019421093287756224280874354616454095959959035837414961861925195237578282777395013447584318531959186223733646800217774353533776078703382352446073056620659534268902571904670366860571138533055044427645756586296578158185939147399270190787715107846829135622512067875450237702148333696953440470870779629240826858936368224550652690397127070133679075066952860210043534079359988983915329600416835771946336187791169416245775461372903294643406849148079054435996252281220185416195301587793025580208348403949742867220396904456937642548391412674577945585502774217297619170360550641542894624421900950719978309069823344215739698894542879598724049371767627318005179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslgw.ikanobank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5a07febe7c871506452c1b1a77ce6da6ee042e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038687b009aee0a3716ac0528eb63a25f2dd5e1ac02a97b3b5a562fbffb4ee02070e0d5e47ef5afc6bc22a0d30e2c95fc75f57b92b162f7e8a5879ee6c6eff3f7e3f1b978ec94d09624a49b2873e44414664598981d64ead352d9b3667c8d96439b29c50a2e2e58e9b48cac7b4c3834f3bfa0d1485c39770d9db65cfdd18f7d8b4de71933f14c3418bd75fd2ea4935479013d85901865eb6f1e5f1369bf30050a1965a5262ad12363cd14441f39223b6331304b33999dbe4a3a98535eb551d5cf726617a4db5ddbf8009984e2bcc4305cc524e081358b6df61ac227db4d1858fb6d3da42a2425c3440cc8375609aaae55baafe78022043b360eb5d020cd3bac85