capsicum.undo.it
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 25:14:cf:a8:fb:e1:4c:81:ed:02:cb:31:1b:01:94:c8 was issued on by SSL Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=capsicum.undo.it
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 25:14:cf:a8:fb:e1:4c:81:ed:02:cb:31:1b:01:94:c8Serial Number (int): 49289493628284949213329967517863613640
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): f2:0d:70:bf:70:bd:1e:a5:94:8f:a5:31:f5:cb:89:a6:3b:13:7e:06
Fingerprint (sha256): 7d:9d:af:77:20:26:6f:6f:33:70:c7:fe:e9:bf:b1:84:e2:38:51:ad:ff:23:d7:6c:ab:78:e7:4b:60:35:f5:d0
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate capsicum.undo.it
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for capsicum.undo.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
capsicum.undo.it
Other certificates including the domain name undo.it
(limited to 100 certificates)
nikewolf.undo.it
lurk.undo.it
consult.undo.it
fugutux.undo.it
undo.it
myspace.undo.it
feralpressinc.com
miku.gonetis.com
mlung.com
koski.undo.it
mlung.com
tfirg.undo.it
andrei.undo.it
sfem.undo.it
shutteddown.undo.it
feralpressinc.gracechetwin.com
grenzwaves.undo.it
nikewolf.undo.it
nampook.undo.it
fuzzy.uk.to
programming.im
pia.undo.it
programming.im
golgowski.pl
fugutux.undo.it
fugutux.undo.it
piccino.undo.it
piratepay.ir
syno.undo.it
entropy.undo.it
tai.whoops.undo.it
winiberbel.synology.me
zs-tai.synology.me
joao.undo.it
elettrasas.undo.it
iolaum.undo.it
za.undo.it
let-go.undo.it
maybecould.undo.it
maybecould.undo.it
bugzilla.undo.it
ben.undo.it
mycloud.undo.it
mikrotik.undo.it
rimarko.undo.it
goldmine.undo.it
38p.conn.undo.it
entropy.undo.it
lagerstroemia.undo.it
mycloud.undo.it
piratepay.ir
quotes.undo.it
mycloud.undo.it
let-go.undo.it
posadowsky.undo.it
cam.rhysan.undo.it
sin.undo.it
mkern.undo.it
programming.im
egiptos.undo.it
piratepay.ir
shop.undo.it
nikewolf.undo.it
feralpressinc.com
maybecould.undo.it
zs-tai.synology.me
wemay.undo.it
mycloud.undo.it
let-go.undo.it
ripslinger.undo.it
feralpressinc.gracechetwin.com
feralpressinc.com
swiftly.undo.it
ripslinger.undo.it
entropy.undo.it
programming.im
ah.undo.it
mycloud.undo.it
wumpus.undo.it
timeline.undo.it
sargon.undo.it
feralpressinc.com
feralpressinc.com
programming.im
sin.undo.it
koski.undo.it
overflow.undo.it
armerding.undo.it
sni.cloudflaressl.com
fiction.undo.it
ripslinger.undo.it
mycloud.undo.it
gracechetwin.com
b0x.undo.it
b0x.undo.it
programming.im
cam.rhysan.undo.it
torrafa.undo.it
capsicum.undo.it
85w.undo.it
lurk.undo.it
consult.undo.it
fugutux.undo.it
undo.it
myspace.undo.it
feralpressinc.com
miku.gonetis.com
mlung.com
koski.undo.it
mlung.com
tfirg.undo.it
andrei.undo.it
sfem.undo.it
shutteddown.undo.it
feralpressinc.gracechetwin.com
grenzwaves.undo.it
nikewolf.undo.it
nampook.undo.it
fuzzy.uk.to
programming.im
pia.undo.it
programming.im
golgowski.pl
fugutux.undo.it
fugutux.undo.it
piccino.undo.it
piratepay.ir
syno.undo.it
entropy.undo.it
tai.whoops.undo.it
winiberbel.synology.me
zs-tai.synology.me
joao.undo.it
elettrasas.undo.it
iolaum.undo.it
za.undo.it
let-go.undo.it
maybecould.undo.it
maybecould.undo.it
bugzilla.undo.it
ben.undo.it
mycloud.undo.it
mikrotik.undo.it
rimarko.undo.it
goldmine.undo.it
38p.conn.undo.it
entropy.undo.it
lagerstroemia.undo.it
mycloud.undo.it
piratepay.ir
quotes.undo.it
mycloud.undo.it
let-go.undo.it
posadowsky.undo.it
cam.rhysan.undo.it
sin.undo.it
mkern.undo.it
programming.im
egiptos.undo.it
piratepay.ir
shop.undo.it
nikewolf.undo.it
feralpressinc.com
maybecould.undo.it
zs-tai.synology.me
wemay.undo.it
mycloud.undo.it
let-go.undo.it
ripslinger.undo.it
feralpressinc.gracechetwin.com
feralpressinc.com
swiftly.undo.it
ripslinger.undo.it
entropy.undo.it
programming.im
ah.undo.it
mycloud.undo.it
wumpus.undo.it
timeline.undo.it
sargon.undo.it
feralpressinc.com
feralpressinc.com
programming.im
sin.undo.it
koski.undo.it
overflow.undo.it
armerding.undo.it
sni.cloudflaressl.com
fiction.undo.it
ripslinger.undo.it
mycloud.undo.it
gracechetwin.com
b0x.undo.it
b0x.undo.it
programming.im
cam.rhysan.undo.it
torrafa.undo.it
capsicum.undo.it
85w.undo.it
Certificate
The complete raw certificate details for capsicum.undo.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhDCCA2ygAwIBAgIQJRTPqPvhTIHtAssxGwGUyDANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTIzMTAzMDIwNDQyOFoXDTI0MDIxMTIwNDQyMVowGzEZMBcG A1UEAwwQY2Fwc2ljdW0udW5kby5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOSlN/capZWVYhZgfWB9xkV/3J5Ne7aHZD4gjoPsbChIZt5K7MEUtk5H nkE9cvwq34toNNo/3snLONqf53CB8z78FYvFuML5B+4xGYKvkpdB7O6ggXq/6oUp FGYEuJYL0LDPGpwZsrk20PXmwQS/qnnCljkAl/tpeHh0GDKRgJ/HhPCMEw2sJZBP EV1bWo6+FNh3dXAED5XTW38xHLBqeCil6U1EKTNN4qNP5rB3QIruK2jAt7lSshPE slv05NgLJxTWmBfVaiE6Xe9YYc50DtMT+ukGYfM21St5VKqLF08Qv3nfLZsl8iO/ T1ennZ0f8HBFIRMCs9oevFU53KvGK9kCAwEAAaOCAXQwggFwMAwGA1UdEwEB/wQC MAAwHwYDVR0jBBgwFoAUJhR+4NzXpvfi1AQn32HxwuznMsowcgYIKwYBBQUHAQEE ZjBkMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydC5zc2wuY29tL1NTTGNvbS1TdWJD QS1TU0wtUlNBLTQwOTYtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRwOi8vb2NzcHMu c3NsLmNvbTAbBgNVHREEFDASghBjYXBzaWN1bS51bmRvLml0MCMGA1UdIAQcMBow CAYGZ4EMAQIBMA4GDCsGAQQBgqkwAQMBATAdBgNVHSUEFjAUBggrBgEFBQcDAgYI KwYBBQUHAwEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybHMuc3NsLmNvbS9T U0xjb20tU3ViQ0EtU1NMLVJTQS00MDk2LVIxLmNybDAOBgNVHQ8BAf8EBAMCBaAw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBABzgWqqsNgbn oRwosm4yHGda+Yg/qdITagog/TagM0SOZQXB/3bkZLJUlEm25vkinu41LmDCKH2z cEEjf1xfFXELW5ClqEwqv9Q081C5YDoVGkd/a42DFhG944wncgnStzdvy3fwH5WW 189ecCGj0RmllYL8gF2N6S3txa9YOTTZXbrHv56QL5Bf/kjt/MBSaeMaJH/FexcT 3jXjRhXk4qdFLSHqlh+uKzFFgjpY9C7KTSdsp6ALmr2/pmKKBBZmIHg4h31yixU2 qaAwcwvJC/2ijYMxoczsd6juMwNxQUPh1TYEL7QQGGeuUTOij0wLjXtcD0hEweWL WMLDtnYbM+Afb1qvlm85ARUHWy0xIoOCnX7w64DG+5g4+2lgm+Btw6kzpIsoSZ+Z z+/Jbocgwt4BauIJENEBHc0ub5f5lRmEajSvxQYu7YMLSkztw53Oc4AY7g8IlpPq myMc+tson/4Mr+sT8MTaYYkNvUrZ/vV68tb9yTimxWqt1A9O3SKtFWdYWlVap2Xw unGnArdqJzVd3fCiAJaJH4WaZqAtTZwjg0zpGo9WTobWsvUfSciQ1MEPsuHV+a+A ZcrOtEu/SlFuFQPCZDjbiS4IqH56GXtMz00OOCE65jaLzDaAFsOoDJqUUwaNQFQZ f/O9PsNr9UBFwBFUggFMTJhxNKp0XfPI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KU39xqllZViFmB9YH3G RX/cnk17todkPiCOg+xsKEhm3krswRS2TkeeQT1y/Crfi2g02j/eycs42p/ncIHz PvwVi8W4wvkH7jEZgq+Sl0Hs7qCBer/qhSkUZgS4lgvQsM8anBmyuTbQ9ebBBL+q ecKWOQCX+2l4eHQYMpGAn8eE8IwTDawlkE8RXVtajr4U2Hd1cAQPldNbfzEcsGp4 KKXpTUQpM03io0/msHdAiu4raMC3uVKyE8SyW/Tk2AsnFNaYF9VqITpd71hhznQO 0xP66QZh8zbVK3lUqosXTxC/ed8tmyXyI79PV6ednR/wcEUhEwKz2h68VTncq8Yr 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 49289493628284949213329967517863613640 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 20:44:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 20:44:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'capsicum.undo.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28863805867468080700930879369510376603882771010377141880968157131786226908711850150992747354339130910123832233347368631484814634299472215458005327960698565809709286275885830858080660881764124298290854206183973347132794720484602200787161759019243310095490370836720065460410330276714637505296369487222785775802429853800557981954318230979561850420787408200305299387394275890026136365486940520020072327276575204578754540875066496302500378129958420785757604598270631541013072654762046771674722062496333751960993869268684362038502738654584867805556479119322578903600545526089028498224186803611491081533517713530258907868121 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capsicum.undo.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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