Column National Association

- Column National Association -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0c:8c:85:a5:76:05:62:b4:08:44:95:ef:b8:90:12:61 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Column National Association

Company registration number: 24626
Organization: Column National Association
Address: 1717 Mangrove Avenue, Ste 100
State / Province: California
Locality: Chico
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:8c:85:a5:76:05:62:b4:08:44:95:ef:b8:90:12:61
Serial Number (int): 16680368179263708769563853784521642593
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:48:2c:99:95:c4:c0:4e:64:0c:8c:6a:2a:72:08:f4:b6:7d:29:cd
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 53:c4:e9:f3:ab:cf:05:fa:da:ae:b0:47:eb:68:c5:47:79:8f:46:16
Fingerprint (sha256): 7e:69:3d:8a:ec:32:4e:fe:39:6f:7f:7b:7d:62:f8:e3:c1:f8:0f:91:a9:a8:9d:1e:92:1b:9a:45:3f:2e:8a:76

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Column National Association

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Column National Association

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

column.com

Certificate

The complete raw certificate details for Column National Association in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX37a7G8lhwYYGz8FxEV
5pgPGRnNWvqbtMnuaqzgS8Jv/H4TtDTDx770gU5l/pNvato/bY92wfgy3y38nB8m
1sKriK9lxEVbZIHNa5A/1CnZGMMEgpOqu5Oq2gFixpsAPT8PCwjSxStH8v5Avg5R
zXbqmxpi7Y8BeUf1XDvTNTodT/tjaDSHWFuMb1hE9oYEFVqo0ItXP+X0i2rHxWXP
h3SaIL6HLs+4t3Qy0Y6exlXMQYTrMLPlR2WbRYB/m/7TwIG1WlzRh9mJ5eUDv+/z
Q3GyK6jaTICRojcvorBKp7KgJhx/kWeLYIevNGJdjRE/jDncPsb5uzpOyKVr/xnJ
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16680368179263708769563853784521642593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '24626'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1717 Mangrove Avenue, Ste 100'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Column National Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Column National Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7426879'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19881537974512069963897551180733816329531334831774870853020822298935712866247278147088876661419796728549327988358522908371604568437564204874942389275791705280677022377322829505611693025766938844127540042682743142032675349497656785152200561309725723838508605289891099438894402298983907231972021646524178053492499346570048096994006486123900837346816437814624596481934011692104319057731656738864242310080613199384340940278781138573489332984012059418271654861282344396855616889472508736230711356073340339658306874259138737121316613157883818590232076287640058829446433945057387158754757567053355408045575748355081578858913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e482c9995c4c04e640c8c6a2a7208f4b67d29cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'column.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1030 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															e0a3dfd9274c0646c6a1c10e91cf071748bdd15f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0032628669b1dc4a971720788fbd20ccbbb151ffd001c2e26155d0abfb28c896f335bf57e632b4cbcbb6a85eb68790285cc1f5bf12fe864ed34c2995e6ea6c8d2a2e6dec31afa95cef4962b455187556f892d9b83a02b4e9b59807f3f85cbec1f9900238772af3853e07fe6c33205d1695dc2a80f3119cc6622a09a5459863eb06e0944479ecb09ba8e751ea90fab64d93dde2d01784bcca943c0b6c110cec027e2157a3c52456cd7b061d74730adaf31281ebb19395553299ddc39cc8133c473fc65b3e65ecce20c8bb409bf807d834968ed8c16caff6ed7d5ffd4efbfc3294f155426b457e5f747ee76384922f7f5dfca8959db8bc33c950c24601b51a8a19426046751a1f47879721f5f1d816905d984fd5e60b075eca003246ce675c95f9bf376e28692b41c71cc7ff07aecfb01c4afdd2c2e9f866c5f9d4e8627194876d7718f6da071b8080a663957616e366035e45a47d69b1a4cded01d901daa0a4332bc8ef8bbdc2c925822a60be2b49e4f5ba8c4d3cb2c249a9b090b8e0294769d7c08a95cb790557befa29ad63e6482202f39525dfc73e2908edbd5f609d8522c1b3d2168d420bf4fa1390f28db3447707093a0b23440c5bbc3bd6babeb9e868bdce94c0658a4778355da7f8a8e2e7950532d3b9f8d2ad31ff2c58686cd1e69abb751e5e46aa14de820145583edfc78acaaa606a0d13738162b807cf02e211bd3716