XTB S.A.

- XTB S.A. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this X.509 Certificate

This digital certificate with serial number 09:e4:2f:62:d6:08:d3:36:0b:3f:5f:dc:de:59:e5:26 was issued on by DigiCert, Inc..

With 13 subject alternative names, this certificate can be used to secure multiple FQDNs. This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.

XTB S.A.

Company registration number: 0000217580
Organization: XTB S.A.
Address: Prosta 67
Locality: Warsaw
Country: PL

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 09:e4:2f:62:d6:08:d3:36:0b:3f:5f:dc:de:59:e5:26
Serial Number (int): 13147856749661942506441525469837387046
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 89:d2:da:5c:ad:3c:27:80:b9:9f:11:86:24:4b:56:e0:45:f2:28:f2
Authority Key Identifier: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (SHA-1): 17:c4:4c:ec:a2:7b:67:5b:bc:88:2b:f2:8e:b8:a6:cb:54:66:7a:a9
Fingerprint (SHA-256): c4:1c:a5:25:d2:c8:02:b6:dc:ae:25:9e:4f:9d:7e:ef:da:a2:fe:6a:23:97:c0:23:85:7b:13:f1:e6:01:87:bf

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation Information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate XTB S.A.
13
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for XTB S.A.

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Extended Key Usages
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

xtb.it
xtb.global
xtb.hu
xtb.pt
xtb.sk
xtb.ae
xtb.de
xtb.es
xtb.fr
xtb.pl
xtb.ro
xtb.cz
xtb.com

Other certificates including the domain name XTB S.A

(limited to 100 certificates)

X.509 Certificate

The complete raw X.509 certificate details for XTB S.A. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK0VvqoEtwKeM6oMRWMx
bVxk9h5iVx3G2WUgoWBijovf9B6UmNYQHEtsS5Wur1uJ5GVzYgLGE7AcUw332pfv
BPZO5qyhft8uNhk5YiNFqu/ytfqO1qWIZbnOfRQR6Vf4J3ogehcp2jyQIlgycuMR
hwJH1371qCmclfBHo+v5QERsC8+eze6R1BNRFiAHQ6ksTCWOIS9ncNbhxVB0hLc2
elgX0KZUtfuENbyhZSJBtU2f8ASzMPeKcaMBgWWb3hIkSPNnhbbiKung+sFH0nZb
GzlcY6Y3u/ZiKs1YNc7Z+sRlkG0AHVIqjpSFcHxILXTVCe/cuvt/b2/YeviPArll
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13147856749661942506441525469837387046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0000217580'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warsaw'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Prosta 67'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XTB S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XTB S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018221028'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21798339819438113891307794814732674280271218592486683934814907652070250536947228150013688756214486936441908021401873003879269863542339943590388361746429373435731768713924637782215857248541268331253732596192448939181302032270924919048636095941103966952210092615637247002725829758988886760844828945984720227381187172287013116238905740380886375887836960533784284241899080765025769604210066024053425285264583994931508813332020076638422962320463096040518590067286262633482405307658421078108403548110944228052296136152387459484586041845277302681181200564415416853034499602765072243689274559669361896844045336885323523253647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89d2da5cad3c2780b99f1186244b56e045f228f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															0ab44020dd4af4495658ce19d1556366cbcd3060
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000e8e1f82e2cb95d9175c77a4a751caa1b2cc40f49e603bc81017f4589a0d0e57f311b70456dbf864c4892b48223f47c420ca4db7f6fa7d07ad715d9f155b7b57672fa48b249209e04dd448e48e117b3e2f9edc40dc3dc7c7d81e77b8595a4898bca193590632852b6d23c8787bac87f39c6a46f6db09e3a4727c009cbb5ed1274db5c15dcfc7a4946870a566e23d42ee5b4f344202b31da5353e1ffd5ee01a710a3b7d79c7a8889e6d18d1ebb80d3c67f3cb32f8165faa27c9bbd09d85a01c0f61ed8cb7223f065528b1185a22551b3891d4ea9c434fa220dbec9d86b1dcc7127a5bad0de007daeab65f43c4c643da85ffdae501437a385e08c9333afb3b7793b04cca0eb166e44772e7100e4462699414e24d7d1f5e4f7d02544ba6ffcc6c4b53a6237d4aa6593b0a428416a3024a1e9704ed3eb92a05d573039042f3dd3a9c9f22eb9f458cb74961e4e036f28575b48c8a0e3aad099d45c6f9cb122a0230fa8299c2b0fe145250944a68d9a6aff7bec964e80ae9d3f17c5faff2066349819acc3e36a153dfa8a375f3749c342a1bfe76749f08658cb3fc230ad03800fe701caf7a6bc1adc741e70dc6b99bccfa6b5c27e4a4a647a626675b9869dc44158c068cb4c0881980e218d69364d5995585cdadd0448ce269d4b054cc821690440169f9f1bee6a7b08b0a141d80ac609f4c03fa702e11e96b2b67f4352438869c234d