*.atbank.nl

- Amsterdam Trade Bank N.V. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7b:6e:1d:ad:7e:e9:f2:2f:50:d3:3c:36:da:8c:0b:58 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Amsterdam Trade Bank N.V.

Organization: Amsterdam Trade Bank N.V.
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:6e:1d:ad:7e:e9:f2:2f:50:d3:3c:36:da:8c:0b:58
Serial Number (int): 164066798071612038911448899289019583320
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): d9:7e:fb:4b:de:ed:96:e0:e6:21:7a:2a:16:72:86:8c:d6:07:d4:0f
Fingerprint (sha256): 91:23:c0:3b:57:cd:a8:88:e4:67:e6:4a:c2:34:52:43:b2:b8:9d:13:92:8c:d3:7f:f4:54:01:7f:71:19:e1:0c

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.atbank.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.atbank.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atbank.nl
atbank.nl

Other certificates including the domain name atbank.nl

(limited to 100 certificates)
online.atbank.nl
www.atbank.nl
*.test.atbank.nl
online.atbank.nl
*.atbank.nl
webra.atbank.nl
sts.atbank.nl
fibr.com
atbconnect.atbank.nl
*.atbank.nl
mobile.atbank.nl
fibr.com
*.test.atbank.nl
transfer.atbank.nl
mobile.atbank.nl
portal.atbank.nl
*.test.atbank.nl
transfer.atbank.nl
bdrc.acc.atbank.nl
www.atbank.nl
mdm.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
transfer.atbank.nl
mdm.atbank.nl
*.atbank.nl
online.atbank.nl
mobile.atbank.nl
*.atbank.nl
www.atbank.nl
portal.atbank.nl
www.atbank.nl
fibr.com
remote.atbank.nl
*.test.atbank.nl
webra.atbank.nl
sts.atbank.nl
online.atbank.nl
fibr.com
bdrc.atbank.nl
online.atbank.nl
online.atbank.nl
transfer.atbank.nl
*.acc.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
*.atbank.nl
mail10.atbank.nl
portal.atbank.nl
www.atbank.nl
*.acc.atbank.nl
mobile.atbank.nl
transfer.atbank.nl
*.atbank.nl
atbconnect.atbank.nl

Certificate

The complete raw certificate details for *.atbank.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgIQe24drX7p8i9Q0zw22owLWDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwMjA2MDAwMDAwWhcNMjAwMjA2MjM1
OTU5WjBzMQswCQYDVQQGEwJOTDEWMBQGA1UECAwNTm9vcmQtSG9sbGFuZDESMBAG
A1UEBwwJQW1zdGVyZGFtMSIwIAYDVQQKDBlBbXN0ZXJkYW0gVHJhZGUgQmFuayBO
LlYuMRQwEgYDVQQDDAsqLmF0YmFuay5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBALI84TNOlWzzVuk+1IHEMffA1NZ6SSWbQZr/lNlyO4EasEiGtWpt
slIO9GZk1xgivbEV6bCGXstoMi0rlziBT6IfdNjzynxgqG/h2NbFEf31DmaEqqBT
hg9xPA2wpW8XPtOv/Xku8TSL1zE4xJIVUejG8e3Yb19bakA3THdMwA8rkIBPZ9NY
PFIodLODDXyFLnGkocgS+1VKrKap70qski3yl0XYb24Y3CXwI5tObdO3gbifEGWO
v0L1mBFkI9LVXMnXMvuBMkMtFVE+pKKud5qitpIwEK8ya3yIxptWZs1tQ7kV6zfN
QvkyQ5Hi3JB+rPDwaXfcy7ciIBpc25Qe4a8yXL4lsxw9UctvRp+dBwPQEPipDocl
dpzbV2/0yItE9LklGX/UCRJhttfwjh/quQjxsvww3+6p4B12Cx3nN/TqxcZ5azFm
zn09kmjMLKoOkp+VyaL5+xyKcFim+gVQp3k9eKljHDe1SjKY5iNw2AR1gTArwraa
q8R11D3v9hDYQxnXSJa+TIyANuWnAqBF1Ar9xrDfkY4JktfCcqQPjpOTrgkMwpNQ
j0DNsk11b4NXCha7I307qVyDXQ5vJx0a5/J0ay7WMjqB1D3A2/KuvOKxbsiXuplv
a51G5fivUZeNOL0/wJhDrJKt5rpSTGi3loJs8y0JLetRhgCNJQ86dg8NAgMBAAGj
ggG9MIIBuTAhBgNVHREEGjAYggsqLmF0YmFuay5ubIIJYXRiYW5rLm5sMAkGA1Ud
EwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9n
bi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/
BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9y
ZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3Ry
dXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8
WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2Qu
Y29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMngVDTtZE7waF5nW
A1dvDSDvkQ210sG79YU7OXeKCvxz0tAW3UVlSsiNTtZ+T1uQ0cGCq8IZNAVlxQp1
UftFCRpNxvwd8h00LKHgVcXfIMuP+e1RwSwVnjqhoo56P9vZloUCDz2EvXRFssZS
MwWE/siePiM+hnqFwvucyccDw8zWVeHR0ihjHkkHkuMWHLgzNuciZefe7Zj1U/xs
NxSOBMUep/MbRowba0aqS8a/Utw9/2PDJYeMFW0KDdCJJ/ZTfpIW6HSHRf1SC/9e
VmqssULF9zj6cnRQ3cxmZi0lXRwDEqauP7L38PQs3Qwe02m2oL8ZwCNTSn9Dpf6q
bteODg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164066798071612038911448899289019583320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam Trade Bank N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.atbank.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727146829508485219863288092565739658163343967354327401416938712594962313140868265279370333937878297071998018378802743998092062347916655921508522239078894471245022188993107098130437444337042934277567822739579284088880669520351834236358852715005439165763255849668916997294038352951008789384238775236464812862559484085586035492418909916015244106115493172674415563597000019391197134623683429374764801216773358025605443488768456812043289973464907005127854100299052066099603278258530770329557827004420464387693607034836178651015947831369585171907361939227758734252654010038876441098388059028279556625301113661648513648741117330642770529745321350510174398570672415318098345170396282876407898237028353614738852401381950094472024607482774621241447262018245670916903034447049538223488736473453391335046408803634552945520114288427514055511785085117835213327533618823442812717233120310271221680627180273016163912495971393120707935898527552489070842362731431816933586151539384160665367704301292486667549204849149718675562793354070431826351731167358786867295467403350803191392414317634572017693584903343360788872615722781838599785593169662659889894372225184139040492000950470833931960270212568574647913774127448642520722754063739889998247105007373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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