SUNLIGHT FINANCIAL LLC

- SUNLIGHT FINANCIAL LLC -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 06:7b:74:80:3c:3b:c9:41:ec:76:d4:d3:b0:7e:3f:90 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

SUNLIGHT FINANCIAL LLC

Company registration number: 5454644
Organization: SUNLIGHT FINANCIAL LLC
Address: 234 W 39th St 7th Floor
State / Province: New York
Locality: New York
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:7b:74:80:3c:3b:c9:41:ec:76:d4:d3:b0:7e:3f:90
Serial Number (int): 8616383407669482079714912345421397904
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d7:cd:3a:3d:7c:97:ac:20:86:f9:e3:55:cd:b9:f1:4b:0d:84:26:94
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): aa:c8:49:1b:7b:91:45:04:db:7b:40:36:43:2f:36:9d:02:d9:c1:8d
Fingerprint (sha256): 8e:18:e0:ab:c2:0e:4a:5c:ab:2f:5f:0e:f3:b4:f3:34:e2:0a:5a:71:ba:58:48:ed:96:42:3f:56:a6:a1:f9:fe

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate SUNLIGHT FINANCIAL LLC

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for SUNLIGHT FINANCIAL LLC

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sunlightfinancial.com

Certificate

The complete raw certificate details for SUNLIGHT FINANCIAL LLC in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUm14szsQVPwQ8T+XCEa
ASoj3KF7w+ekVEBbYhKUyBotKc4tuI6btLWKTVx//+UiHHLSZkEJkJFvG+eSuiuW
/NRLPZelpBWAM8zvl7/jZIavT9jyGgL8eLjqXiutgo/432Kgo8TRnowiGvsCVHOq
DsUQY3z7aAZ+kaK/DChjps30SDyvp4vCsk30s9MjRj+BzGuTc1yv0767eJXwlO9n
gozlWR4zB7lLn2VWtxyLFT/FhZaGfGkDKzxxxqYF99S2QdYYFbrSLw5i2nuAp+Y8
njQFIixHljEpiP/4l9jlw994V4XzMynf3OqpKTJBLO+luA1gA2BpFIlSwbgGonfx
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8616383407669482079714912345421397904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5454644'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '234 W 39th St 7th Floor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SUNLIGHT FINANCIAL LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SUNLIGHT FINANCIAL LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5849501'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17835948998503595987112293244755339397971986397604490800719329374748271482602251617935068837289545688500092391385562333473334797412838156324739883133090220150786082465261580852307712111216945746728345191702061472309312062683092498850235204330071683109341255115742875512616739090060486456673586339765055542528127399912203558256906675044031738094095782435269965867258006408514251475724175636853095890430962461410888251849152914282124686434625991072626057555068269709648651885862021989639667825295346192129526010564291242633847021870536608214220207065043101908970775358553170623854737982441502504430374430189404705780131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7cd3a3d7c97ac2086f9e355cdb9f14b0d842694
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlightfinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															a6ffaa8f1a6c8cb4d177fdf39793f610b17a8864
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0046bc4fa174469b63770ec44036121d799c29c1b024ab1096394eb6cd9cc72e686c934deae8b0954167a2e6c41ce750ce4036fbc3f86bd89570c43cbb10301fe397abcd0caf561ddf01051b8fbe85a1907296b928e91edc544a9e38cdf2e0b5d2e8ee6952962dcb30fc37b671e937f6b7a6d89768541da5aa853e22bc2d6f8d18057ec8ce1d6531f453ac38bf3c2b53354f6e6c188085e518a581ff5de0e2ad9dc210b89db6d5da6f7ac9bdb9a94a0726fdbb9eb9d854eb1fa773d2279997010fe39095ddad9da1fdfb87fb876cb7a3678cb527949d025d6a1b64c58a577db812e1e713a9457ff2c75f86d71f3de31ae06fb2828451aad9479f89f05a48f3c7afc589cd9560108c7a236ac94acb53bbdc901a9b49fe3ca80a358c5314a0accd469305832fff491937d7719b8faae03d91377aba7f7d80a40f9d9c164fddd0058de3d7a85aba815e91c905fbe53e83ff9fa77b13ddde067468fc87f2d88d9a74ac542cbc7ef3039ef0689d31f930e6c7cd5bbe083806527934d3c808c7d0b5f0df4126acc1754a4f1b22f7295098b7f51d8ba5a20750d2d99ace5dd58c891f6a220758ac725458e4ca0ccf428b3baa4bbabc56848cb59231bd74654f80eae76d5ad60b40686f080f482a0e27b34558c66e215867fc2d1394eab18f8a7047754fd15eb1a23530e60f4aa1cb4bfbdfcca5e7cad7b30090d1013d1547abc5a4947fb3