artifactory.rijksoverheid.nl

- Rijksoverheid -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 7c:48:25:7d:29:e4:df:06:f1:81:30:0c:1e:a8:04:24:e9:15:9b:7d was issued on by QuoVadis Trustlink B.V..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksoverheid

Organization: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:48:25:7d:29:e4:df:06:f1:81:30:0c:1e:a8:04:24:e9:15:9b:7d
Serial Number (int): 709523774982012361155914417159974976314150329213
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 12:3e:45:fa:d4:41:b0:20:b8:0d:b6:8d:6a:6f:13:04:8a:19:90:1e
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): d3:5f:91:b7:68:7c:e7:49:57:57:30:1e:21:80:cd:15:8c:5c:91:28
Fingerprint (sha256): 98:0d:9e:6e:64:f8:77:92:23:4a:c8:db:3f:6d:56:2b:5e:7d:10:73:b5:54:f3:bc:7c:b7:bc:67:a1:21:36:da

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate artifactory.rijksoverheid.nl

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artifactory.rijksoverheid.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artifactory.rijksoverheid.nl
logstash.rijksoverheid.nl
a-logstash.rijksoverheid.nl
monitor.rijksoverheid.nl
logging.platformrijksoverheid.nl
a-logging.platformrijksoverheid.nl

Other certificates including the domain name rijksoverheid.nl

(limited to 100 certificates)
test.coronadashboard.rijksoverheid.nl
coronadashboard.rijksoverheid.nl
acc.quarantaineverklaring.rijksoverheid.nl
prikkenzonderafspraak.rijksoverheid.nl
acc.quarantaineverklaring.rijksoverheid.nl
image.mailing.rijksoverheid.nl
wobcovid19.rijksoverheid.nl
coronadashboard.rijksoverheid.nl
a-rss.persberichten.rijksoverheid.nl
image.acc-mailing.rijksoverheid.nl
quarantaineverklaring.rijksoverheid.nl
mdm.dwr.rijksoverheid.nl
coronadashboard.rijksoverheid.nl
staging.coronadashboard.rijksoverheid.nl
mailing.rijksoverheid.nl
coronadashboard.rijksoverheid.nl
image.mailing.rijksoverheid.nl
mailing.rijksoverheid.nl
wobcovid19.rijksoverheid.nl
acc-mailing.rijksoverheid.nl
persberichten.rijksoverheid.nl
acc-mailing.rijksoverheid.nl
mailing.rijksoverheid.nl
acc.prikkenzonderafspraak.rijksoverheid.nl
sv1702757.dwr.rijksoverheid.nl
wobcovid19.rijksoverheid.nl
acc-mailing.rijksoverheid.nl
staging.origin.coronadashboard.rijksoverheid.nl
test.coronadashboard.rijksoverheid.nl
persberichten.rijksoverheid.nl
a1.platformrijksoverheid.nl
downloads.persberichten.rijksoverheid.nl
mailman.rijksoverheid.nl
staging.coronadashboard.rijksoverheid.nl
onderzoek.rijksoverheid.nl
onderzoek.rijksoverheid.nl
informatiepuntkinderopvangtoeslag.rijksoverheid.nl
kabinetvandekoning.nl
teverantwoordenregelingen.rijksoverheid.nl
image.mailing.rijksoverheid.nl
mailman.rijksoverheid.nl
a-downloads.persberichten.rijksoverheid.nl
abonneren.rijksoverheid.nl
rijksoverheid.nl
webanalyse.rijksoverheid.nl
quarantainecheck.rijksoverheid.nl
a-www.rijksoverheid.nl
mailman.rijksoverheid.nl
a-persbericht.rijksoverheid.nl
e-mailservices.rijksoverheid.nl
rss.persberichten.rijksoverheid.nl
*.rijksoverheid.nl
rijksoverheid.nl
rijksoverheid.nl
abonnerenmedia.rijksoverheid.nl
svw602142.dwr.rijksoverheid.nl
staging.coronadashboard.rijksoverheid.nl
attendering.rijksoverheid.nl
domeinnaamregistratie.rijksoverheid.nl
test.coronadashboard.rijksoverheid.nl
voorlichting.rijksoverheid.nl
test.coronadashboard.rijksoverheid.nl
wobcovid19.rijksoverheid.nl
abonnerenmedia.rijksoverheid.nl
voorlichting.rijksoverheid.nl
mailing.rijksoverheid.nl
satellite.mgmtdwr.rijksoverheid.nl
staging.coronadashboard.rijksoverheid.nl
e-maildiensten.rijksoverheid.nl
a-rss.persberichten.rijksoverheid.nl
mdm.dwr.rijksoverheid.nl
test.coronadashboard.rijksoverheid.nl
acc-mailing.rijksoverheid.nl
teverantwoordenregelingen.rijksoverheid.nl
rijksoverheid.nl
acc-mailing.rijksoverheid.nl
e-mailservices.rijksoverheid.nl
a-rss.persberichten.rijksoverheid.nl
rijksoverheid.nl
attendering.rijksoverheid.nl
wobcovid19.rijksoverheid.nl
statistiek.rijksoverheid.nl
image.acc-mailing.rijksoverheid.nl
magazines.rijksoverheid.nl
staging.coronadashboard.rijksoverheid.nl
a-rss.persberichten.rijksoverheid.nl
a1.platformrijksoverheid.nl
NAC024004.mgmtdwr.rijksoverheid.nl
persbericht.rijksoverheid.nl
origin.coronadashboard.rijksoverheid.nl
mailing.rijksoverheid.nl
quarantaineverklaring.rijksoverheid.nl
rss.persberichten.rijksoverheid.nl
e-mailservice.rijksoverheid.nl
mdm.dwr.rijksoverheid.nl
origin.coronadashboard.rijksoverheid.nl
persberichten.rijksoverheid.nl
test.coronadashboard.rijksoverheid.nl
a-attendering.rijksoverheid.nl
staging.coronadashboard.rijksoverheid.nl

Certificate

The complete raw certificate details for artifactory.rijksoverheid.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpCIY2c5B2fv5ThmU4FC
iJ+4R8E/7ntYmR5Jf4PokMlAKw6EwuCmYXtiNmaRXCsJsL4D3jpiiKBEKzDp2MBj
DShMWeb2DsH6fOYANocIq0X4vvu/z0dnDo0sOYmhjdVDZNzFmZej2vP5OrZY6Y0T
NlSzMl9fc//PXUmQ/Z3NvXd3CodvpltcUI2XE1UY5g+tSBsiUsZOFpLAuViKeA96
5vqdsDuQIn7yApWp2+dQ0FrwLmSvHxC2pmN5yHH3uyU7f8fya1a2iK5yq7Ub5H2H
Y1WL0nFTft6VXbYZ73Ye++2HiYntCuqPQmoj1MAkRWhvHYdETTaQfvnRrarZAXUX
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 709523774982012361155914417159974976314150329213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 09:57:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-07 10:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'artifactory.rijksoverheid.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24056549707181751530506281470580297837737444591203276899872864886845860919450900831990990534212069842068200211969913210905560500887044789781541173235677859169919073528785730158741243415583462910640954575024332529155625603816883604160934050082263846938039451965512068819419078881238759604871875788392789423900391516669643350727150663769664488018767149989652478593774682592188028740895321551772480914508043169767660780966082007414417131650361749087896946041873003663218197822214331788214164690863979232525927413459755675665398736253639069599807170764502718740953649100341020933428180658479841999407717941430928587167629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifactory.rijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logstash.rijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-logstash.rijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.rijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logging.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-logging.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the relevant QuoVadis Certification Practice Statement and other documents in the QuoVadis repository.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							123e45fad441b020b80db68d6a6f13048a19901e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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