www.restorandejavu.ru

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 6e:73:b7:c5:db:a5:ee:bc:b8:a6:4a:59 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.restorandejavu.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 6e:73:b7:c5:db:a5:ee:bc:b8:a6:4a:59
Serial Number (int): 34183245392505906540455545433
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e3:11:f2:85:b1:cd:6f:9f:43:1e:5b:91:61:bd:dc:25:b1:a7:55:55
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): e7:68:df:1c:96:61:41:59:05:23:c7:c8:c0:6d:8c:d8:7a:7a:50:c5
Fingerprint (sha256): a8:00:8f:84:31:ab:99:cf:b2:a2:2a:03:3f:d5:b2:50:f6:24:1a:2e:0d:54:25:2e:26:0a:11:5d:40:4f:92:78

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.restorandejavu.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.restorandejavu.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.restorandejavu.ru
autodiscover.restorandejavu.ru
mail.restorandejavu.ru
owa.restorandejavu.ru
restorandejavu.ru

Other certificates including the domain name restorandejavu.ru

(limited to 100 certificates)
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.owebo.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
www.restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.owebo.ru
restorandejavu.ru
www.restorandejavu.ru
restorandejavu.ru
restorandejavu.ru
restorandejavu.ru

Certificate

The complete raw certificate details for www.restorandejavu.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIMbnO3xdul7ry4pkpZMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yNDAyMTQwOTQ1NTda
Fw0yNDA5MTUwOTQ1NTdaMCAxHjAcBgNVBAMTFXd3dy5yZXN0b3JhbmRlamF2dS5y
dTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL798qQ2w/j7Z0t2x/aR
RmC6DNlm2noPsB6dTWc1vpEsnc/7811ULfdk2g1A9C5FEg2IX+snn+Gn1WnRKa+c
eGH5L48OSyKz8/RLlakataMarYVd1WcxWfpTkpCr8y5cfSyRbDfxtOlZZNm9NcXa
BHcdk7B3cZ0pdzG57VUuIxF3Qcbry8kKNVmG2X9a5WEWR+3raAyyd43CFdepul5J
uImr4T9/n3jsZZRsVl7sYgCrV9/Q/aDHilwbtcvT6Z6YIkI9DQgy4DboL5hIxDnH
OhKvHz0Ps3F++t2sBqyKrb584n2eE58sxANR2xNzc4LRK5XWKPHYFrizrC6srVkr
gQYaUEq3m3aJAOiahbjZ3Mw83/S3fvfMmr+CNLTOJJi8zDY0Ayuaa0nrg2d2SgsK
45oi06OQqWeqYWpszwNLejwPEoIrlRSJgSbi21d585UyVyEl7wb/0kyx+mATAwk1
VyBnu/sNMZTKzY0RJ571k0+lYbtqsFovnIyGbtzdX+6SP0eFk4hLPkx6Z4xy9TNc
dDqOwPbr7Ms+GQrgCIbrtR0ZYOzNws9fHYm2afV02TjZzOIdgV6+sENbI+ndzByO
1ELmqn7IBppWSK/BCTLDfgOQhIxSps/avEz03W/5wooZ8aQoJCEp/NFQbpD9sLVt
I8xKLlfNLpSPcF4ARn25G52VAgMBAAGjggJMMIICSDAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADCBkwYIKwYBBQUHAQEEgYYwgYMwRgYIKwYBBQUHMAKGOmh0
dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZ2NjcjNkdnRsc2Nh
MjAyMC5jcnQwOQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29t
L2dzZ2NjcjNkdnRsc2NhMjAyMDBWBgNVHSAETzBNMEEGCSsGAQQBoDIBCjA0MDIG
CCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5
LzAIBgZngQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC5nbG9iYWxz
aWduLmNvbS9nc2djY3IzZHZ0bHNjYTIwMjAuY3JsMIGCBgNVHREEezB5ghV3d3cu
cmVzdG9yYW5kZWphdnUucnWCHmF1dG9kaXNjb3Zlci5yZXN0b3JhbmRlamF2dS5y
dYIWbWFpbC5yZXN0b3JhbmRlamF2dS5ydYIVb3dhLnJlc3RvcmFuZGVqYXZ1LnJ1
ghFyZXN0b3JhbmRlamF2dS5ydTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwHwYDVR0jBBgwFoAUDZjAc3+rvb3ZR0tJrQpKDKw+x3wwHQYDVR0OBBYEFOMR
8oWxzW+fQx5bkWG93CWxp1VVMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBCoDwIDEvE+koU1HYsM+xFzw2851Y4kdfORjer93kOoURzhjyK
mMWzns0Yhe6XrcrdCo1zDbD3ySuMStwZwNK5hi0+tAQ9DrTgU6iWR3W70XWniF8S
aQ3CA5Tm99vNvlunlXeswF2Of51GsosIDxBPEmL+ro38MeMGl9lTr3qvry9DWoeU
24VhwwQXcYHxYt3aChQcn0KOEtG/BifHyGYfARSCJdtVIpRyoMw9zEF9iebmlgIV
RtgwewN+E5EWsFkJjoy5frKJ2sHhwTjblBOXXTq00GuUDJj8TumIrSSEK+uGWskC
7SGnaUTRK4z4KSXZKBIOTAHU7el2nNGeWbrz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvv3ypDbD+PtnS3bH9pFG
YLoM2Wbaeg+wHp1NZzW+kSydz/vzXVQt92TaDUD0LkUSDYhf6yef4afVadEpr5x4
Yfkvjw5LIrPz9EuVqRq1oxqthV3VZzFZ+lOSkKvzLlx9LJFsN/G06Vlk2b01xdoE
dx2TsHdxnSl3MbntVS4jEXdBxuvLyQo1WYbZf1rlYRZH7etoDLJ3jcIV16m6Xkm4
iavhP3+feOxllGxWXuxiAKtX39D9oMeKXBu1y9PpnpgiQj0NCDLgNugvmEjEOcc6
Eq8fPQ+zcX763awGrIqtvnzifZ4TnyzEA1HbE3NzgtErldYo8dgWuLOsLqytWSuB
BhpQSrebdokA6JqFuNnczDzf9Ld+98yav4I0tM4kmLzMNjQDK5prSeuDZ3ZKCwrj
miLTo5CpZ6phamzPA0t6PA8SgiuVFImBJuLbV3nzlTJXISXvBv/STLH6YBMDCTVX
IGe7+w0xlMrNjREnnvWTT6Vhu2qwWi+cjIZu3N1f7pI/R4WTiEs+THpnjHL1M1x0
Oo7A9uvsyz4ZCuAIhuu1HRlg7M3Cz18dibZp9XTZONnM4h2BXr6wQ1sj6d3MHI7U
QuaqfsgGmlZIr8EJMsN+A5CEjFKmz9q8TPTdb/nCihnxpCgkISn80VBukP2wtW0j
zEouV80ulI9wXgBGfbkbnZUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34183245392505906540455545433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 09:45:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 09:45:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.restorandejavu.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779179313197767401140984062570501400416573613579773810184907639709148011521736120366618077869273970520488824725947652929729501775791730359503227045961919794011440369925206224917791716950422247289170697643898222303633056231240785835368265392259795031873586463731226304662338837028682915768272192856392117885867389931414374579802282879519151493213756684774414775522035635006626099429754657091705356242647102006767145630209326831435071467295145909119971153649135510094379127613087778052133365794633870395826528983861620761526579648290898734549214102546467516491019507559111064864097228045245385712832197448124041666101234045885501217730057168466055908317323145740302370548879571826411183759076143799071582276316813437065377517945483763445147819355947183105195137442196682294116655967425998484226469621180499168897895384975541045922727149304537676505932305199183768481784997257784441433924961587264857461635696678462447929265042781477286532006091957468730379671141492593158108281246326336920175010368508104510761705720803246133974628504546151465618524615926107511243624585976908136377922311200429791248022101247062463404227852894534452158061524227343168179796616627457989418539868825864796191396893719151035349176692631819298936066907541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restorandejavu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.restorandejavu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.restorandejavu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.restorandejavu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorandejavu.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e311f285b1cd6f9f431e5b9161bddc25b1a75555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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