data.onemarkets.de

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 4f:29:e9:39:2b:a2:df:05:19:6b:6b:31:00:58:e1:5a was issued on by Actalis S.p.A..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 4f:29:e9:39:2b:a2:df:05:19:6b:6b:31:00:58:e1:5a
Serial Number (int): 105226626169155950631333014365758087514
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 40:fd:5f:43:f5:4f:96:27:a5:3f:a9:6a:76:dc:5d:bd:fa:b7:bc:24
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 68:83:6b:68:e0:c0:f9:19:3d:0c:78:29:a7:0b:b2:bd:a1:ec:da:af
Fingerprint (sha256): 80:05:28:dc:5f:38:3a:a3:3e:6e:ce:c8:42:ed:87:68:4e:d2:f6:db:f9:a1:4c:47:cc:fb:7f:4a:7f:f5:6a:f1

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate data.onemarkets.de

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.onemarkets.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.onemarkets.gr
data.onemarkets.hr
data.onemarkets.hu
data.onemarkets.ch
data.onemarkets.bg
data.onemarkets.pt
data.onemarkets.nl
data.onemarkets.de
data.onemarkets.ro
data.structuredinvest.lu
data.onemarkets.pl
data.bolsa.unicredit.pt
data.onemarkets.cz
data.onemarkets.si
data.investimenti.unicredit.it
data.beurs.unicredit.nl
data.onemarkets.sk
data.onemarkets.at
data.bourse.unicredit.fr
data.amministrato.unicredit.it
data.onemarkets.es
data.bolsa.unicredit.es
data.onemarkets.eu

Other certificates including the domain name onemarkets.de

(limited to 100 certificates)
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de

Certificate

The complete raw certificate details for data.onemarkets.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105226626169155950631333014365758087514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 12:58:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 12:58:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'data.onemarkets.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764753548195037650022405243037317411098052086609124862014671937680795203724886967289220009254488549136282738700338338285401361489702573043289914576127242354268607054310746949730411599406212944269197677964727072975658082286346176659464367886192379881858492794110816313232664086579006767098551763448015967329986881825083500377485616883366139897632256209165311927223950271209852255441103391579061161852337743301584614013428295668286418884994371668999360480749585467883231269997164628572119340817646306478299958690464372857672608742633017350705456660329382536185501997950690757968654858434604941913733364228981197910106131925316945673055110178718754074677305729920359654732115534891355025032013629393177143610618203443616815015364137340609062553770608233133146214895546868106618820686689009439947547206586521790919385786437466164314650603283444466906284871691427631847602356306560778027623844833848528309266685087171295591595082168613723842254255013111661501870002852384519400788288298593312238715915448600778996725865326448569290543819135406666999067916052658317438668856365062646701926489992182805689527636086913347324007210578434519809580845204478668926127822665167896275442917077689056564392825808334273671817174269610566322081371493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (515 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.structuredinvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bolsa.unicredit.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.investimenti.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.beurs.unicredit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bourse.unicredit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.amministrato.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bolsa.unicredit.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.onemarkets.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40fd5f43f54f9627a53fa96a76dc5dbdfab7bc24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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