Best Secret GmbH

- Best Secret GmbH -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 06:3b:6b:32:74:34:38:45:2b:c8:5e:3a:75:f3:58:6c was issued on by DigiCert, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Best Secret GmbH

Company registration number: HRB 56240
Organization: Best Secret GmbH
Address: Margaretha-Ley-Ring 27
State / Province: Bayern
Locality: Aschheim
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:3b:6b:32:74:34:38:45:2b:c8:5e:3a:75:f3:58:6c
Serial Number (int): 8283887704562157519857629297594554476
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 09:d6:68:35:5e:1b:9d:59:c0:fe:c0:24:01:8c:84:d8:fb:1c:8e:4e
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): d3:e3:c6:ef:47:9d:41:a2:85:33:35:d7:cb:ed:d6:a3:80:03:c0:44
Fingerprint (sha256): b1:6c:35:b9:b7:01:73:24:9c:30:05:63:57:c5:dc:b3:55:73:4a:2a:53:73:e5:92:d7:3d:7a:d4:19:06:62:73

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Best Secret GmbH

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Best Secret GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bestsecret.de
bestsecret.at
bestsecret.co.uk
bestsecret.se
bestsecret.fr
bestsecret.ch
bestsecret.nl
bestsecret.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Best Secret GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP9WGX40+OLAM8C1kLul
EY53VrIoQglFdGElGMkXTB9fYiObOzQNpFXLiXPfgqSsqulf7aES4Z5up15tz2vJ
sDyBjEEhAZe9KiIu27oNL30JtTRomg3+eaBIKUNSBFZtShja+10tith8PIn1+2Pd
Cb9a3vbS7VBtz73pLnvBwkjW5OOAMJSLN9x7e0CUcil4bUfXTGjQhLUtRpT3V7vj
gB22H3uW2XVfIwOSxHvYSHx8nwmLeTmPkzKQCiqbVD+XMWAlgXmcbi1410Q5pqUR
ur7okGQt9cIV3mQUQlr+Sxy1gIXJgbJfVjnLdBz2F8euIDjIPMgQjjz3Yg1+62yA
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8283887704562157519857629297594554476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 56240'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aschheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Margaretha-Ley-Ring 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Secret GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Secret GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '017976452'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23858712368980900607258883298455690577172747948035895161487593936834759590071905778086099483604363400499166872214773239814277078977147121675959688861223522865199070043915915091120491174978168849123471750115474992451766965192501779756455748550052686181936878260759947810103178737335095082151773399896162657784089982452793718932274004303464914356112643547875960551853136602484969187963659165367691994309454823827653770161127722284896191465349055305827956766340701858435547613096761349067789447002117666553845567175013239029373748860209148061636034793161235697116614687837816233577658457908768453663758164664574328733867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09d668355e1b9d59c0fec024018c84d8fb1c8e4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsecret.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0f90bb6bd1df546bc9141a066f8e00ea444035ca
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000972a875bda6a8cd2f696d1cce9bfed9e240ede23b92e4cd67126261450bd6d1a42d5008d5de1477011b554118f3eb5b5f754d9b9d385407d8d857a7b522cf62d828e0868cc8226b5341525b3877522713bfe1d24ce7b964d8b35ff1dea5c9f7dfce9f793c45249752307fe9431e4cffca4fd1970079fa705e76a4e4717954afd66de0b31c66990e27f5f6dc062b3b02a72a4fc592841e25bac753a11643f6ed73831aedf5d10896f09983bb1e4edd801002865bc99cfd2d9e358c48a01bfbc0eb79eaff8a5ff6c54fb24277b33e4cb83fae11f505242efc4fa786633069bb98c049f55809fc4d9b7065998f2b1a25590a5c50dce9bb1d0cafc567adc7d6f3f71706ea5a1f47c9dadbe09f9fecda0cca1f20f22838696e29b3a78c16fbdbacafc8b37bded6eccab9a4c1d5619dc96040f9b7bb2ae49ed275fa26b7cac307373c4495b29ee4d6ee31a47ada45250ffc6af96e880094535506dcf7f4c56b97e17faf4e47c3d7aaf4f5bd4b51546c78789ede112dcea230a8801eb6c906bfecbc3655e757b57d40c67a1715ed414e5e4aed38e850235b7a241c1fdac4aac7491ecb172bc103591d3c67af6e55ae3ea027bedc2f0f37c4866efc79f99276dbc6eb100b3526000a8e68772f5d47ab225f5573f11712a73da2d16995932a83084ec345e007f17d4f52ec99c2d7c99a3d3078b6a7fa045a6e067aa8af3affff6f642064