operaduomo.firenze.it

- Opera di Santa Maria del Fiore -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 1f:80:44:d9:00:ff:38:f3:83:e2:24:a8 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Opera di Santa Maria del Fiore

Company registration number: 00538420480
Organization: Opera di Santa Maria del Fiore
Organization unit: Ufficio comunicazione
Address: Via della Canonica 1
State / Province: Toscana
Locality: Firenze
Country: IT

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:80:44:d9:00:ff:38:f3:83:e2:24:a8
Serial Number (int): 9749102933308507533279896744
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: aa:eb:f5:61:c6:de:65:63:a0:2b:45:44:f3:1f:b2:8c:a6:ff:f8:22
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): cd:52:14:33:3b:bb:95:44:09:88:bf:58:ca:65:a7:60:21:f9:f6:1e
Fingerprint (sha256): c2:57:eb:b3:a2:79:1e:a8:e1:eb:f8:70:16:6a:22:e1:70:4a:5f:ac:c9:9a:a1:c4:56:a2:5f:35:94:74:75:ed

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate operaduomo.firenze.it

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for operaduomo.firenze.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

operaduomo.firenze.it
www.ilgrandemuseodelduomo.it
www.museumflorence.com
codicicorali.operaduomo.firenze.it
www.operaduomo.firenze.it

Other certificates including the domain name operaduomo.firenze.it

(limited to 100 certificates)
codicicorali.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
preview.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
sni.cloudflaressl.com
museology.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
operaduomo.firenze.it
preview.operaduomo.firenze.it
autography.operaduomo.firenze.it
preview.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.codicicorali.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
*.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it

Certificate

The complete raw certificate details for operaduomo.firenze.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9749102933308507533279896744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 12:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 12:55:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00538420480'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Toscana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firenze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Via della Canonica 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ufficio comunicazione'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Opera di Santa Maria del Fiore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'operaduomo.firenze.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857734422655151912228791743875138919844146107950126822676961956131617705388050592743462425911551385566534768032823320467837314470780504996442122532960290372621204357653071908906906474164153557174276639923045844047087512140036550264264873084923163795684760462980574761641557958304692198135055174951601902541394126906379939425833314755111224388314826624839422731514065791580765294290119008701972676958880306547274653443652037465544916329253571082931309155548986732144973331685134840350300939535979799390415863446401338834629782144872840674221495155669506751222005279349354657214907974583151409223922608457131495726482890509258112158082283915946575908873696022937008800767442681405041683489725523632052466443591144180297736065644662139875395148341782976531631147134349976056058900841581310144883057320076505867970083932168854823164441929074612738965223372939490234083918155315319391797129207315544613437906203113055177793675175855945539885255111796375038125255568794037976123153469039540450722312076837049221680982946499911497902099884468342451377185949413522377940020172976433862562188679559747114550914118844697678831166591573867997785736012511989385685689178689729047671039549045524747119497132996805199228178076629524654911161728953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgrandemuseodelduomo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumflorence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codicicorali.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaebf561c6de6563a02b4544f31fb28ca6fff822
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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