beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com

- Oracle Corporation -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:dc:6e:4a:15:56:1f:b8:61:e8:bc:8b:92:6f:4b:80 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:dc:6e:4a:15:56:1f:b8:61:e8:bc:8b:92:6f:4b:80
Serial Number (int): 19753734184410214659589703353970412416
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:08:58:3c:14:48:34:66:dc:89:ef:ad:20:0b:2c:f5:b3:de:cd:de
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): a4:32:c1:c5:73:8e:4a:ed:78:46:02:cd:fc:0c:c7:f0:50:9c:73:d3
Fingerprint (sha256): a8:71:17:fc:d9:a1:61:a6:90:a6:63:16:a6:68:ad:4a:58:db:d2:57:e9:d5:55:6c:c3:06:0d:06:6a:81:f1:8f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com
beta.generic.ca-toronto-1.ocir.io

Other certificates including the domain name oraclecloud.com

(limited to 100 certificates)
*.prj.us9.oraclecloud.com
*.ic.em3.oraclecloud.com
kms.ap-hyderabad-1.oraclecloud.com
ecra1-mgmt-exadata.uspp1.oraclecloud.com
bi.pp1.oraclecloud.com
streaming-delta.eu-frankfurt-1.oci.oraclecloud.com
*.storage.oraclecloud.com
*.eu-frankfurt-1.clusters.oci.oraclecloud.com
*.cloudem3.audc1.oraclecloud.com
digitalassistant.us-ashburn-1.oci.oraclecloud.com
*.bi.us2.oraclecloud.com
*.crm.us1.oraclecloud.com
*.hcm.ap5.oraclecloud.com
query.us-ashburn-1.oraclecloud.com
commercial.us-phoenix-1.oci.oraclecloud.com
*.bi.la1.oraclecloud.com
*.fs.em3.oraclecloud.com
helm-api.us-phoenix-1.oraclecloud.com
*.fs.ap5.oraclecloud.com
*.bi.us4.oraclecloud.com
console.ca-toronto-1.oraclecloud.com
aconex-status.oraclecloud.com
cwp.status.symantec.com
stg-cloud.oracle.com
statuspage.io
cgclmta01.ca3.oraclecloud.com
chclc4r210s1imap02.usdc2.oraclecloud.com
*.prj.la1.oraclecloud.com
mbclrp3980.ap4.oraclecloud.com
kms.us-phoenix-1.oraclecloud.com
aconex-status.oraclecloud.com
notification.ap-seoul-1.oci.oraclecloud.com
g1chclrp3980.us8.oraclecloud.com
cheis01nasx25.infra.oraclecloud.com
*.scm.us2.oraclecloud.com
*.prj.ap2.oraclecloud.com
*.hed.us1.oraclecloud.com
oc-141-144-146-91.compute.oraclecloud.com
oc-129-191-52-117.compute.oraclecloud.com
syd10-c-ad1-web-01.ap1.oraclecloud.com
*.fa.ca3.oraclecloud.com
*.cx.usd.oraclecloud.com
*.iad.bca.ocs.oraclecloud.com
nlclrv3990.em2.oraclecloud.com
*.scm.us2.oraclecloud.com
streaming.ap-sydney-1.oci.oraclecloud.com
nlclc2r303s2imap01.nldc1.oraclecloud.com
*.pbcs.us2.oraclecloud.com
statuspage.io
*.ic.oraclecloud.com
*.crm.us2.oraclecloud.com
ndcs.eu-zurich-1.oci.oraclecloud.com
mbclc1r402s1imap01.audc2.oraclecloud.com
*.fs.ap1.oraclecloud.com
g1iad38-opc-c7r111-zfs-1-ilom.usdc9.oraclecloud.com
statuspage.io
sgsmtp.email.ap-melbourne-1.oci.oraclecloud.com
*.prc.ap4.oraclecloud.com
*.prj.em2.oraclecloud.com
*.hcm.us4.oraclecloud.com
*.compute.us6.oraclecloud.com
*.fin.stg.us1.oraclecloud.com
ingestion.osms.me-abudhabi-1.oci.oraclecloud.com
*.fin.us9.oraclecloud.com
*.prc-sp.ap2.oraclecloud.com
oc-140-86-15-116.compute.oraclecloud.com
storage-gateway.eu-frankfurt-1.oci.oraclecloud.com
*.fs.la1.oraclecloud.com
*.prj.ap4.oraclecloud.com
search-head.phx-pp.ssvcs.ocp.oraclecloud.com
*.ic.us8.oraclecloud.com
*.ic.oraclecloud.com
*.social.ap4.oraclecloud.com
resourcemanager.uk-london-1.oraclecloud.com
concor-apics-production-lb-1.oraclecloud.com
g1iad38-opc-c7r105-zfs-2-ilom.usdc9.oraclecloud.com
*.cadc2.oraclecloud.com
*.ic.em5.oraclecloud.com
*.identity.us.oraclecloud.com
*.apm-agt.ap-mumbai-1.oci.oraclecloud.com
g1cheis01nasx11.usdc8.oraclecloud.com
*.fs.us1.oraclecloud.com
*.fs.ap1.oraclecloud.com
grafana.fra.ssvcs.ocp.oraclecloud.com
*.prc.ap2.oraclecloud.com
ctrl.email.ca-montreal-1.oci.oraclecloud.com
caal-test.social.us1.oraclecloud.com
*.scm.ap5.oraclecloud.com
*.ic.pp1.oraclecloud.com
*.fin.us1.oraclecloud.com
*.fin.ap4.oraclecloud.com
*.login.oraclecloud.com
fa.hsm.sa-santiago-1.ocs.oraclecloud.com
oc-129-150-200-210.compute.oraclecloud.com
*.scm.oraclecloud.com
qalw.oraclecloud.com
slc1-p-ad1-log-01.us11.oraclecloud.com
query.uk-london-1.oraclecloud.com
faopccicd.pp1.oraclecloud.com
interact.aftm9.origin.responsys.ocs.oraclecloud.com

Certificate

The complete raw certificate details for beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Gx/YjLw8WZIxBndLdX4
J4yi7eddspKJI2cCQ0O46re0x3XlYECoRq0Gjeb2SfxdrZRU02OZKpTBzWzX7Xl6
XRMVPFYolwOJ7cuImRE/+jnOw09gQ2bSouUpj633esF/lWr0o2erLHvnMchqkI4T
Oou1caCk4aSfYUK3D64+xtUZVWiZMU3Ano0Ggcq0+y8kXn6Wepd38GDPGZFh7QxV
FbpDZ/qnoizcxmcVhYN03xT0S84G1IYD7NJFrUI5/7PQsjXVyDUc4EOxvvxvExRI
T3dSZROziGPj68IHdUc2Uw1Wd9yTZ7JsMbKMTEUbkcmEi+WZ+bAUGgl4sfmX43vN
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19753734184410214659589703353970412416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27825929249273597126341437571017235368594603425852822874983272325937338765249257564425394075233483638599484865871096978372613774218150994460477054146042216890433599649211338018182810610249297357908336293095235763243424552441480181575373478185574633472065744255174165724869542814322193383153502547022343315055231724368575981194559968111242630193345713091689201176802846016229599972575475394373277399946344738152984118045452954882407973317054186244944464185150420858595853746485362038439914123785748570814057538653852852312815838859683360872341902181543564421837743428805729209266270609859913380764480937866481263955323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc08583c14483466dc89efad200b2cf5b3decdde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.generic.ca-toronto-1.ocir.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00062f83856599eb375fdef5c6f42a292cfb6137103d49acb88433705abd74300100152442c7843f1577c8d24621882e1782defe277962ec107e7036394d828abb17c47fbc391d5eab46e7dbf65a03b89a0bfd91743d06181fd9670b78909ee14a1407a2eb747bcc5c627ff27743218a3594ca06e4ca5762622a47cf672f38f2194bc776961ffd268fac1fe57cc4c8c73177b01d7a569a9c5f5a5f4cd72f6f1818cd08f2b0df5b8aeffded7df69879eb153ac2b0e4296d238f9e409222fbc6b4da746537d529c401b939cf53192ddfe388f78f982c9eccd3f601466b061d2c5f6ea0856e22d348702878e4245336bba9f094eed81d3134a1f5a7068266628e991b