*.kairos-consulting.com

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 2e:66:e4:5a:30:a9:57:1e:77:93:91:19:0b:2f:43:a5 was issued on by Actalis S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.kairos-consulting.com

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:66:e4:5a:30:a9:57:1e:77:93:91:19:0b:2f:43:a5
Serial Number (int): 61678733620660941779174436339297764261
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 90:ba:f2:2c:c6:d2:ec:22:48:a4:6a:20:bc:79:fc:e7:61:97:62:a4
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 00:6d:e2:98:ed:da:e2:9e:e1:0d:70:1a:e8:48:4d:e5:3f:bf:b1:31
Fingerprint (sha256): dd:d7:f4:e0:25:19:4e:d8:f5:35:3f:d3:20:cb:a4:0f:a8:20:98:35:08:54:0b:5b:66:6c:c5:49:bd:54:71:2f

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate *.kairos-consulting.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kairos-consulting.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kairos-consulting.com
kairos-consulting.com

Other certificates including the domain name kairos-consulting.com

(limited to 100 certificates)
friends.zoompharmacy.co.nz
mail.kairos-consulting.com
keystonesurvey.keystone-solutions.be
kairos-consulting.com
survey.ello.co.za
kairos-consulting.com
kairos-consulting.com
surveys.taylormadeportal.com
mail.kairos-consulting.com
survey.credexo.com
survey.ello.co.za
kairos-consulting.com
kairos-consulting.com
kairos-consulting.com
mail.kairos-consulting.com
kairos-consulting.com
encuestas.hooli.com.do
survey.hawkgrips.com
kairos-consulting.com
kairos-consulting.com
kairos-consulting.com
keystonesurvey.keystone-solutions.be
survey.ello.co.za
contact.futureim.com.au
kairos-consulting.com
kairos-consulting.com
keystonesurvey.keystone-solutions.be
kairos-consulting.com
mail.kairos-consulting.com
kairos-consulting.com
kairos-consulting.com
survey.kairos-consulting.com
contact.futureim.com.au
kairos-consulting.com
keystonesurvey.keystone-solutions.be
mail.kairos-consulting.com
keystonesurvey.keystone-solutions.be
keystonesurvey.keystone-solutions.be
kairos-consulting.com
survey.art-cura.com
keystonesurvey.keystone-solutions.be
survey.ello.co.za
kairos-consulting.com
kairos-consulting.com
keystonesurvey.keystone-solutions.be
keystonesurvey.keystone-solutions.be
survey.caljan.com
kairos-consulting.com
*.kairos-consulting.com
keystonesurvey.keystone-solutions.be
survey.expeditionsresor.se
kairos-consulting.com
survey.ello.co.za
survey.ello.co.za
mail.kairos-consulting.com
kairos-consulting.com
survey.ello.co.za
survey.salontouchstudio.com

Certificate

The complete raw certificate details for *.kairos-consulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIDCCBAigAwIBAgIQLmbkWjCpVx53k5EZCy9DpTANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMS8wLQYDVQQDDCZB
Y3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBHMzAeFw0yMjEyMjgx
OTQ5MTRaFw0yNDAxMjgxOTQ5MTNaMCIxIDAeBgNVBAMMFyoua2Fpcm9zLWNvbnN1
bHRpbmcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6z872rl
W0UDbi8j7uYk8FeSLVLD3dqOBsLKHm05Xe+gcwkNGs2C3C8d/6MK0IDkEv5I6Bjv
AfpQ1WmsVNMjFKjW2NNxdSxV3rojkDVcmj6DgAW+B1EtGMKGQhnm3cTLFxioJWXO
3MInwmlUGkH44O3FifsNQPXiXGg/xlhivQIzo2CzM6u+R/mvLoYoRPv4LOi/84WX
f7PWgDHfxRWLe3pE3wLf/AnIH8zEAeUS+eYp7OMp8Uh/bw6ETdZq2WH+c9S10QqH
GNP44VEZEnDVR4Dlp3FhSEBSmf3gggFD0V3LQBsxGyQyfHJv8K1i+NdEysmp2ocT
g/ktjFoxs0s4EQIDAQABo4IB7TCCAekwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAW
gBRCg22AfAmEZ/2AV6vxJvV3yCKCcTB9BggrBgEFBQcBAQRxMG8wOgYIKwYBBQUH
MAKGLmh0dHA6Ly9jYWNlcnQuYWN0YWxpcy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGR2
ZzMwMQYIKwYBBQUHMAGGJWh0dHA6Ly9vY3NwMDYuYWN0YWxpcy5pdC9WQS9BVVRI
RFYtRzMwOQYDVR0RBDIwMIIXKi5rYWlyb3MtY29uc3VsdGluZy5jb22CFWthaXJv
cy1jb25zdWx0aW5nLmNvbTBRBgNVHSAESjBIMDwGBiuBHwEXATAyMDAGCCsGAQUF
BwIBFiRodHRwczovL3d3dy5hY3RhbGlzLml0L2FyZWEtZG93bmxvYWQwCAYGZ4EM
AQIBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBIBgNVHR8EQTA/MD2g
O6A5hjdodHRwOi8vY3JsMDYuYWN0YWxpcy5pdC9SZXBvc2l0b3J5L0FVVEhEVi1H
My9nZXRMYXN0Q1JMMB0GA1UdDgQWBBSQuvIsxtLsIkikaiC8efznYZdipDAOBgNV
HQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggIBAFUYzx4g2i1mHladbQJdwkq5Q0jqMHb9bWZTRDEIkE2FX/xVONSFoEYsv6Ma
3/sDfRFgtWy4W5z2HlVjF4uCCq4hKBSp4znoljz+pS4thPxqLMHLSPqyKngIWwGP
f9+jq9ESuauTTWCXP+c6RKT8e9VHODjn7Dyqs1weokxD1sJJmvdZFO3dnBmg7xQr
xju84yH1PJ5OcH40ZEktXnfXrJLnhgFZUB3mlnNVh1r6saPf8Ewed8PWNmPVYFwx
Jl7iavpCyfGhpUtJasr7RbveUiuoiuJO1qFgSlmJVjkp9x8hk4IoUYRWkexhP6Fy
AofNBrxmkyrZlo4bK2MBXs2CjMJeAvhbTMkhlnrloH4r+r1mt0C7CipDrM3kgKEb
5+mGQGIwJosAPwvExAnaBDZmkwTmllpaJbtIRM+I4AvOPt0YMNDZg7TCgOAScKVS
SE5g6mIBH5iZehqvrexgnfbQISwS+GK2Ck6IGlGgtm2Rq9ZFe6T7OBQl1xoHZbsc
ySonIYTZ6zq7lg+edIrQKDvMiBflgtQugVKAuBVFXSnZ/UUmoH2sfkyBZKyifHp5
F2t5bRLPSZw8QK9zjvp+OKUFrpWyMNkFe2Kyp/lsecpxjmD0EvkJvPErRRZvK1fp
jYbsV07qMVPNZRKHlwynxJjHF3uIkc6SBs8P/ErM0eSRp4H3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6z872rlW0UDbi8j7uYk
8FeSLVLD3dqOBsLKHm05Xe+gcwkNGs2C3C8d/6MK0IDkEv5I6BjvAfpQ1WmsVNMj
FKjW2NNxdSxV3rojkDVcmj6DgAW+B1EtGMKGQhnm3cTLFxioJWXO3MInwmlUGkH4
4O3FifsNQPXiXGg/xlhivQIzo2CzM6u+R/mvLoYoRPv4LOi/84WXf7PWgDHfxRWL
e3pE3wLf/AnIH8zEAeUS+eYp7OMp8Uh/bw6ETdZq2WH+c9S10QqHGNP44VEZEnDV
R4Dlp3FhSEBSmf3gggFD0V3LQBsxGyQyfHJv8K1i+NdEysmp2ocTg/ktjFoxs0s4
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61678733620660941779174436339297764261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 19:49:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 19:49:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kairos-consulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22681960164948618499114777889832285364289810373391704750559992064821267616677311854127788148664541617585685834015193546744994505064695875295360347996289381437631837272072789199627155147102769992641408295022867904946852680841780600607804733152218595111952114704623993368119226239198797732151479927828036799127831512522704808450162867404950151303584730062965926069641627418395188654519311623245715920962542669653931634827763275826938876989429652390224316949582740565610823310327069265531664145233831653689096352375970617796688057773385251996609959029939181868350419647631068184684909282150406036448835865297891573315601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kairos-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kairos-consulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90baf22cc6d2ec2248a46a20bc79fce7619762a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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