email2.allianzsp.sk

- Allianz - Slovenská poisťovňa, a.s. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:00:92:83:0f:69:13:f3:53:83:c3:41:56:eb:db:73 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Allianz - Slovenská poisťovňa, a.s.

Company registration number: 00 151 700
Organization: Allianz - Slovenská poisťovňa, a.s.
Organization unit: IT Division
Locality: Bratislava
Country: SK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:00:92:83:0f:69:13:f3:53:83:c3:41:56:eb:db:73
Serial Number (int): 11966023577524971940563949336860023667
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5e:d8:8d:56:ec:30:e0:1c:9f:76:8f:43:b9:2e:d5:e4:e9:dc:85:a0
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): c7:a8:b6:fa:9e:01:ba:77:b1:9c:62:ad:af:2f:90:5c:46:ee:c0:b5
Fingerprint (sha256): 7f:68:d5:e2:6d:10:e2:fb:29:47:27:44:57:c9:30:9a:5a:a6:be:40:d4:27:9c:5e:a6:02:3c:0a:e7:14:dc:b4

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate email2.allianzsp.sk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email2.allianzsp.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

email2.allianzsp.sk

Other certificates including the domain name allianzsp.sk

(limited to 100 certificates)
aspws.allianzsp.sk
online.allianzsp.sk
auth1.allianzsp.sk
oauth.allianzsp.sk
cnsx.allianzsp.sk
oauth.allianzsp.sk
mdm.allianzsp.sk
online.allianzsp.sk
webmail.allianzsp.sk
online.allianzsp.sk
www.allianzsp.sk
auth1.allianzsp.sk
club.allianzsp.sk
obchod.allianzsp.sk
b2b.allianzsp.sk
webmail.allianzsp.sk
auth.allianzsp.sk
www.allianzsp.sk
int.allianzsp.sk
portaltest.allianzsp.sk
www.allianzsp.sk
www.allianzsp.sk
accounttest.allianzsp.sk
int.allianzsp.sk
auth.allianzsp.sk
airw.allianzsp.sk
f1.allianzsp.sk
online.allianzsp.sk
airw.allianzsp.sk
traveler.allianzsp.sk
obmo.allianzsp.sk
club.allianzsp.sk
int.allianzsp.sk
dss.allianzsp.sk
skolenie.allianzsp.sk
partnerstva.allianzsp.sk
www.allianzsp.sk
obchod.allianzsp.sk
int.allianzsp.sk
online.allianzsp.sk
obmot.allianzsp.sk
accounttest.allianzsp.sk
status.allianzsp.sk
account.allianzsp.sk
online.allianzsp.sk
online.allianzsp.sk
email.allianzsp.sk
portal.allianzsp.sk
www.allianzsp.sk
sso.allianzsp.sk
cag.allianzsp.sk
oauth.allianzsp.sk
webmail.allianzsp.sk
account.allianzsp.sk
accounttest.allianzsp.sk
mobile.allianzsp.sk
portaltest.allianzsp.sk
mailshield.allianzsp.sk
account.allianzsp.sk
portal.allianzsp.sk
online.allianzsp.sk
b2b.allianzsp.sk
mobile.allianzsp.sk
portaltest.allianzsp.sk
auth.allianzsp.sk
autodiscover.allianzsp.sk
t00046970.allianzsp.sk
airw.allianzsp.sk
www.allianzsp.sk
f1.allianzsp.sk
rsa.allianzsp.sk
aspws.allianzsp.sk
aspws.allianzsp.sk
www.allianzsp.sk
www.allianzsp.sk
obmo.allianzsp.sk
mdm.allianzsp.sk
cag.allianzsp.sk
t00046970.allianzsp.sk
obmo.allianzsp.sk
online.allianzsp.sk
obmot.allianzsp.sk
p00046970.allianzsp.sk
aspws-test.allianzsp.sk
f1.allianzsp.sk
aspws-test.allianzsp.sk
partnerstva.allianzsp.sk
autodiscover.allianzsp.sk
rsa.allianzsp.sk
auth1.allianzsp.sk
f1.allianzsp.sk
cag.allianzsp.sk
www.allianzsp.sk
apro.allianzsp.sk
accounttest.allianzsp.sk
email2.allianzsp.sk
portaltest.allianzsp.sk
online.allianzsp.sk
obmot.allianzsp.sk
obchod.allianzsp.sk

Certificate

The complete raw certificate details for email2.allianzsp.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SOuPlN99SqLa2uMhbft
lM3FSTQNgfCivyRCw1R9NNGtXpRbveuuX33nYsBhjf85ptZFBHnmz+vTJO8lmvlO
m9Njk9fX/pQxKoxg1Dtdn9CWVtjDhbDQZVDGMizQUC1ztA3UlUTNz3GUgyGThda5
G+NBTDedsGf5doH5njAEl1ERhSO7qQMVBKJeaqZOMbdJRHYo0QSjdWshaPre1lVR
3v/UyxMqlr8f3oOfpgl4JcPk+VV0tQ5uCCRu8/dHLhZN7pdqk07J1KPk+yHWQHdM
2qiEVTqeKKBNRhygmDxdxqdg/mWQQLH5QG3GQ948bLW1wN2oKeEn4i/GJSSlgH++
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11966023577524971940563949336860023667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00 151 700'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bratislava'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Allianz - Slovenská poisťovňa, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email2.allianzsp.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29936073055577192342622168524089891129249191544919933273494190631603651528442854011246373922533827007462284631458364647701250214535488770795050052402351783661900452779115295418120319670632528281083163554921319061044749758221273146440682944763605094417110576147513622424009871261213856825442361234176812432056954952454023188129080754866427135001021866536018346715192086117976488880977384315199858001165333650563305117400520469537595901419312696679803239813351890151187971376744775728248963765857302516704105362425875268423461822886426065765094799677123647677074310999077956244977334855520522425264697057991730011291177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ed88d56ec30e01c9f768f43b92ed5e4e9dc85a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email2.allianzsp.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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