gfdcd.ddj.co.za

Issued by SSL.com RSA SSL subCA

About this X.509 Certificate

This digital certificate with serial number 48:38:a2:60:b9:6f:76:ca:7d:39:b6:4f:0a:33:10:e3 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gfdcd.ddj.co.za

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 48:38:a2:60:b9:6f:76:ca:7d:39:b6:4f:0a:33:10:e3
Serial Number (int): 95998477734240764693693691408493514979
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: f8:f1:a5:1b:0a:73:4a:9a:c0:0a:af:58:4f:8d:42:ab:9e:f5:54:c1
Authority Key Identifier: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (SHA-1): 33:72:83:93:51:4e:d7:5c:ea:6c:d1:34:cc:32:b0:84:4d:78:4c:f9
Fingerprint (SHA-256): 9a:21:9e:fc:26:26:a3:2f:6a:05:7b:0f:62:b8:d5:52:8d:8e:f8:ca:4e:bd:ee:f8:15:32:11:30:0e:b3:19:64

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate gfdcd.ddj.co.za
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for gfdcd.ddj.co.za

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

gfdcd.ddj.co.za

Other certificates including the domain name ddj.co.za

(limited to 100 certificates)
kuaq.ddj.co.za
zujgfpn.ddj.co.za
wibak.ddj.co.za
unga.ddj.co.za
rjd.ddj.co.za
mdbselq.ddj.co.za
plbxf.ddj.co.za
sdo.ddj.co.za
www.ddj.co.za
sbff.ddj.co.za
jyxx.ddj.co.za
luq.ddj.co.za
wuumo.ddj.co.za
pwkb.ddj.co.za
ddj.co.za
www.ddj.co.za
www.ddj.co.za
jhpiyek.ddj.co.za
www.ddj.co.za
wabqg.ddj.co.za
pdau.ddj.co.za
wdvaw.ddj.co.za
zjqd.ddj.co.za
ddj.co.za
www.ddj.co.za
vecv.ddj.co.za
wavh.ddj.co.za
oxqijuv.ddj.co.za
ddj.co.za
brpnvqo.ddj.co.za
qhvz.ddj.co.za
ddj.co.za
phroair.ddj.co.za
ddj.co.za
zjcpxe.ddj.co.za
uhppkos.ddj.co.za
exlfatu.ddj.co.za
ddj.co.za
kaa.ddj.co.za
wptce.ddj.co.za
cjb.ddj.co.za
wfihk.ddj.co.za
pdd.ddj.co.za
www.ddj.co.za
www.ddj.co.za
pnu.ddj.co.za
gahg.ddj.co.za
kzb.ddj.co.za
ddj.co.za
nazsfrk.ddj.co.za
ddj.co.za
wkini.ddj.co.za
www.ddj.co.za
ftkevof.ddj.co.za
lookatthefloorsmu.ddj.co.za
ddj.co.za
ddj.co.za
nhjl.ddj.co.za
yzuttvz.ddj.co.za
ixs.ddj.co.za
gfdcd.ddj.co.za
www.ddj.co.za
wptwp.ddj.co.za
godxuui.ddj.co.za
vsf.ddj.co.za
etzpci.ddj.co.za
ddj.co.za
zcnbuns.ddj.co.za
ddj.co.za
wkior.ddj.co.za
fil.ddj.co.za
rgbgzlz.ddj.co.za
fday.ddj.co.za
cllqzd.ddj.co.za
szz.ddj.co.za
ybd.ddj.co.za
ddj.co.za
zje.ddj.co.za
tmos.ddj.co.za
fpd.ddj.co.za
pkc.ddj.co.za
obov.ddj.co.za
www.ddj.co.za
vbfhnwp.ddj.co.za
mcp.ddj.co.za
wjkcn.ddj.co.za
wjkkt.ddj.co.za
wvtvy.ddj.co.za
ddj.co.za
qfyp.ddj.co.za
rlc.ddj.co.za
ddj.co.za
ddj.co.za
dwsfozb.ddj.co.za
ddj.co.za

X.509 Certificate

The complete raw X.509 certificate details for gfdcd.ddj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzzCCA7egAwIBAgIQSDiiYLlvdsp9ObZPCjMQ4zANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTIzMDExNDEyNDkzM1oXDTIzMDQyODEyNDkyOFowGjEYMBYG
A1UEAwwPZ2ZkY2QuZGRqLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0qydnZJZdBR0BuuqBlOKc6+e+h3qKTK0SbLArxMjeLrBJi86I2Hn1yFx
RLQMV1wBgCQJS4J6u3vtU3mVpIFLCxIoeY0xE0T7+QpgfYmG3xSnxNXeJpIuTpQu
kjP7DaPGV78LS5bOgdCLwinQcXZiR2IQ0x7SM7Vec5ttkdG5ZCEJKTD/vMIwEkS5
ADRH8XJU9SBt5KOMJjIeBzdxal8IzXZnty4Mv9znz5nIV+BzDxEH5TvITEuL/Nd7
4kgBypO5kev+pvAfBEzuWtBQbY4GA/mjSEYNOq78PZI8B/54nQIV3zScLcd8+Tst
K0rQehcOGQx6vbFePH0+R9cqCfVU8wIDAQABo4IBwDCCAbwwDAYDVR0TAQH/BAIw
ADAfBgNVHSMEGDAWgBQmFH7g3Nem9+LUBCffYfHC7OcyyjByBggrBgEFBQcBAQRm
MGQwQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0LnNzbC5jb20vU1NMY29tLVN1YkNB
LVNTTC1SU0EtNDA5Ni1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3Nwcy5z
c2wuY29tMBoGA1UdEQQTMBGCD2dmZGNkLmRkai5jby56YTBRBgNVHSAESjBIMAgG
BmeBDAECATA8BgwrBgEEAYKpMAEDAQEwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93
d3cuc3NsLmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDATBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vY3Jscy5zc2wuY29tL1NTTGNv
bS1TdWJDQS1TU0wtUlNBLTQwOTYtUjEuY3JsMB0GA1UdDgQWBBT48aUbCnNKmsAK
r1hPjUKrnvVUwTAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw
DQYJKoZIhvcNAQELBQADggIBACnXjTsRIut99Zi2O1jnFH7ieBwWWzAc3IKkm6lJ
VQWG12hbcmlziTbKfun7BBj1YPM1r9AjF1Ui0WJ0Pm8o+s567iy4XSo35u5fu/BD
9G22F5b1cL9z0rVrZynAhEveFnCS945IKD7ziYeXjjKLoEfbrk3eCoId3h3MJl7h
J5u/gcoaRJSj1j6dhqrchzXa4yYtwRGGQI9Cd8bAcDTyVEolbXVWNWNuWdvGIy9Q
YkRwoNr3gzhKdpgQKViBEOh5pnnLxdaA8Md+/SqTYnBpudCFBWto9wC+kneEotM5
RO8spXGmT6W2qnXJ61GFzwtPvD4BXEOc+RLlHNKKALLYTr0ZOayGO/HaR43q17Za
bCZ5bNb9yL5wRv5HUCY1/jcfKyL8JwRrOsNmiC6pTERsS0W/UapE/wTOjTjfPc3r
a+sgL1NXysfwVkuW4c46JvazFNN7mcce93mQCHXoyOt/5E2cRY2K9PrT9bQfE0j7
hkPdprVJLgWjWk7pqaKBvCGL0ZKJkY6q5QlUlwYYa0n2SF8wmnzGnAA+idICiy8x
vGn+z6Bn4QCAvI+QjE8wemuYrilmbHW0Hza0/N6FtOX9dzyRsmQVzAsKNBQm/16p
H7LGYidaEJEqM3cc5MYfFTHx4TtBaEYzI3V14UMLxjcFoOhLfUpapq8+M0zyl5PC
J1Ud
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qydnZJZdBR0BuuqBlOK
c6+e+h3qKTK0SbLArxMjeLrBJi86I2Hn1yFxRLQMV1wBgCQJS4J6u3vtU3mVpIFL
CxIoeY0xE0T7+QpgfYmG3xSnxNXeJpIuTpQukjP7DaPGV78LS5bOgdCLwinQcXZi
R2IQ0x7SM7Vec5ttkdG5ZCEJKTD/vMIwEkS5ADRH8XJU9SBt5KOMJjIeBzdxal8I
zXZnty4Mv9znz5nIV+BzDxEH5TvITEuL/Nd74kgBypO5kev+pvAfBEzuWtBQbY4G
A/mjSEYNOq78PZI8B/54nQIV3zScLcd8+TstK0rQehcOGQx6vbFePH0+R9cqCfVU
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95998477734240764693693691408493514979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 12:49:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 12:49:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gfdcd.ddj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26595164009907761265456279707924337524045876621274075813428581429705551654370459405451001691301985940752950844231635440391028365399256285258149324711137642872100835324543652157147842904301231809960669275016113451665321748204490083303003989244525074828076328072120117769925141986989343187683146439389000372356663797599821638147966373459808429353785197434337397468341738373844256465527934710269182228627215887809489158300634280135210239658531622474120798326602403221292268581138004584443562482936621409737431844444124745772127354980374406216359470211665124120769792351848998010733329097973530410081485788556919213217011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfdcd.ddj.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8f1a51b0a734a9ac00aaf584f8d42ab9ef554c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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