norma.novonordiskfonden.dk
- Novo Nordisk FONDEN -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 09:43:e4:78:84:0a:cd:b1:92:14:81:e8:1b:6c:1b:17 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Novo Nordisk FONDEN
Organization:
Novo Nordisk FONDEN
Locality:
HELLERUP
Country: DK
Country: DK
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:43:e4:78:84:0a:cd:b1:92:14:81:e8:1b:6c:1b:17Serial Number (int): 12315569789220292515165543745389861655
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f0:f2:d7:b2:ae:d5:bd:c5:55:f0:5a:64:46:b4:5a:4f:85:5f:70:c0
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 7d:e3:8d:50:38:f2:d0:80:51:69:c1:fd:74:b0:8b:88:fd:71:01:7d
Fingerprint (sha256): d2:18:80:ae:1f:4f:e1:d9:61:25:64:d6:f1:81:08:34:b0:a9:bc:22:14:8c:10:76:49:a9:91:52:fb:23:5b:8e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate norma.novonordiskfonden.dk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for norma.novonordiskfonden.dk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
norma.novonordiskfonden.dk
Other certificates including the domain name novonordiskfonden.dk
(limited to 100 certificates)
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
Certificate
The complete raw certificate details for norma.novonordiskfonden.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIQCUPkeIQKzbGSFIHoG2wbFzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwODAyMDAwMDAwWhcNMjAwODAxMTIw MDAwWjBjMQswCQYDVQQGEwJESzERMA8GA1UEBxMISEVMTEVSVVAxHDAaBgNVBAoT E05vdm8gTm9yZGlzayBGT05ERU4xIzAhBgNVBAMTGm5vcm1hLm5vdm9ub3JkaXNr Zm9uZGVuLmRrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vx5VuER 7UJCLnSMz08tvOOexUlUTJ6ZweX7dFROqygs7IdjsfSOwaKCTyXZgEBuUY1Dr0EI yZBQz6A/F4BdkHO/6jzNbiBehfY7tJc0HQekHKI9bcs29E4MyiO8M4bfUS0lNs+o +lEcZiqDNEDLSHr94citx0wYIw/JdFBDno0yV3I/GmULDSANbU//IiYUFMe3sL4X aY1vvf7k2ahVQhjayWzEJJ/ZZyCQCF/uEmrsxI9+up/fHRqwx6lg6bF24hoHEPwp IX1iCB6fJNmw5MNUV71ePM20nlBkBY7He/pXu0DkIglBxIFgRXrTAA7asQkJVKhx IskuOkkiEEe7RQIDAQABo4IB9zCCAfMwHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkB qppHponnQCAwHQYDVR0OBBYEFPDy17Ku1b3FVfBaZEa0Wk+FX3DAMCUGA1UdEQQe MByCGm5vcm1hLm5vdm9ub3JkaXNrZm9uZGVuLmRrMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdwYDVR0fBHAwbjA1oDOgMYYv aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmww NaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENB RzIuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0 dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHQGCCsGAQUFBwEB BGgwZjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMD4GCCsG AQUFBzAChjJodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxDQUcyLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBkTzRNaUMbLsd7AZ/K/9o3XNvAqm+wItOkv3hYonUwW4z/ MN1AZGQfbquMjuocdT0wKv0mRVDO8nUOg4HPc12sTXpZZgoqBnFyz1NTSbHwiAQo CIHtFbz3IxUyHle16DT72e41ZR29uyaGsLegeqONBPu+rmMUnfNHfOEwWHmVKcKX 7Qe3qqul4up7TvECkubxT4LuSHRRwpWB9lPjJKeWPuDDLxaUo60i4+gBzLSi8T4k ZH2Oj8PKMnNd9Yk2u+P3FF2CJR46CwP087lsSSEMKkIDPlusLPyrB63KA7xaArGz bdTb9NsXx332TnKMbru9ctvMJVVL/8Ca59pxvDDa -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vx5VuER7UJCLnSMz08t vOOexUlUTJ6ZweX7dFROqygs7IdjsfSOwaKCTyXZgEBuUY1Dr0EIyZBQz6A/F4Bd kHO/6jzNbiBehfY7tJc0HQekHKI9bcs29E4MyiO8M4bfUS0lNs+o+lEcZiqDNEDL SHr94citx0wYIw/JdFBDno0yV3I/GmULDSANbU//IiYUFMe3sL4XaY1vvf7k2ahV QhjayWzEJJ/ZZyCQCF/uEmrsxI9+up/fHRqwx6lg6bF24hoHEPwpIX1iCB6fJNmw 5MNUV71ePM20nlBkBY7He/pXu0DkIglBxIFgRXrTAA7asQkJVKhxIskuOkkiEEe7 RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12315569789220292515165543745389861655 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HELLERUP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novo Nordisk FONDEN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norma.novonordiskfonden.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26634543603519764819538628517248039440965089926603451431038903177814682198868223467215237422543973752444273272027550529201053457337841020789563260984273871485728031010581930103673284415691377083693208655519243381624950833818191897459661552157528126737863339300105451509901618911386175918987120591580716212609526357538794957843966134443227038037624100376477135309424376498676803988261048629641018738801393473168284914891675802043125052694678787233245834832312314781799824208219740254493914901747464998236271663066773321729661251976677321895305348814201882992727545825058413266789996118355404659452181299777143684184901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f0f2d7b2aed5bdc555f05a6446b45a4f855f70c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma.novonordiskfonden.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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