Credit Karma LLC

- Credit Karma LLC -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 01:0f:53:c8:a6:6d:88:75:db:05:51:26:ee:42:f9:c2 was issued on by DigiCert, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Credit Karma LLC

Company registration number: 7841076
Organization: Credit Karma LLC
Address: 1100 Broadway Ste 1800
State / Province: California
Locality: Oakland
Country: US

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:0f:53:c8:a6:6d:88:75:db:05:51:26:ee:42:f9:c2
Serial Number (int): 1408811785799473189418583416826427842
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 35:30:fb:20:c3:60:58:76:8b:2b:65:e1:87:ae:13:d4:a9:44:2e:bb
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 4f:af:5b:bc:cd:d0:b1:22:06:be:bd:a2:b4:8e:5c:11:13:16:59:53
Fingerprint (sha256): dc:d5:43:3e:d2:b5:6d:ce:50:0e:43:f7:bd:47:1c:7e:79:4e:00:b6:34:9e:b4:cc:36:7b:65:5c:9f:ee:cf:cd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Credit Karma LLC

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Credit Karma LLC

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

creditkarma.ca
creditkarma.co.uk
creditkarma.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Credit Karma LLC in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mx7ootBZVV5WsTS0RvF
Qi1NbTM9dofNQx0LPesknkrduxv1almU4YreaQxnoB0+PLtbrJf0Go6Zl2I95qBF
2YW/anEyC8lMkZePevZ2PhQss8wMspEbq3JqbC2IOS+Twu2P2zRgnhxFHF7xZdhy
bBEBNDh09ky9WWOI296zEuMiwt4D1W/+El2XYeCTG9pPiCfbuPVsfRkwcpPmOMvK
ivvVa2YWWFhMNtNsmEY4qGMZdtRzhBiIVMjSjfugkRGmBziXorMUrTIg4N4UToEY
91IS9HX5NRUxYCJ0upzhMp+vwgoE98IoHiVvk5YKPi0QA8ywdJwZrBqNl2VaZ6I0
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1408811785799473189418583416826427842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7841076'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1100 Broadway Ste 1800'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Credit Karma LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Credit Karma LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Prior Use Mark'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31613071177437350098111921930913776068249721743470112099547419615739957841356100093144995574317511734234178214585960700447680032605722491190684951493995337352036630631770475604375982820311121677850902442416334351779905162608008883852661636493731569640415764932356669873240169245901843516935458781293767734230523421805516856375450386145097631443912656224389515934665606104724071075555520260050613865656500096357521396049647236473726224581512448143870941958638803481607510613289201162605811322188847331120271342892405521425809661554118028466532551047781026826679830470080099179992704390163849938230836663547389039228083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3530fb20c36058768b2b65e187ae13d4a9442ebb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditkarma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditkarma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditkarma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															fe41c7f5a6afaf6bd7d7cb181acfbf33905059ee
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.4.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mark Certificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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