Transat Tours Canada Inc.

- Transat Tours Canada Inc. -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0e:54:8f:d1:e7:19:ad:94:59:35:9c:d2:5e:89:3d:37 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Transat Tours Canada Inc.

Company registration number: 897090-4
Organization: Transat Tours Canada Inc.
Address: 300 rue Léo-Pariseau,
State / Province: Quebec
Locality: Montreal
Country: CA

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:54:8f:d1:e7:19:ad:94:59:35:9c:d2:5e:89:3d:37
Serial Number (int): 19048261891887115531735994476110888247
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:66:17:21:7c:42:2d:15:09:43:1a:83:58:e2:6a:30:0f:c3:63:a0
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 57:23:0d:89:30:2b:47:8f:fa:55:ac:a2:14:28:fe:20:74:45:5f:1b
Fingerprint (sha256): e2:df:e5:a9:3f:2e:3d:b8:98:a6:2b:12:7d:c9:e4:6f:f6:6b:d5:37:24:3a:13:00:7b:9a:b4:6b:53:fe:24:08

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Transat Tours Canada Inc.

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Transat Tours Canada Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu.mst.transatmemberservice.com
mst.transatmemberservice.com

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Transat Tours Canada Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCKn96A5LTuPJslUsMzZ
LMj0cs08iODDDwbBQRpGO+IBYraCpyopQ10ahpsKYjiuyiAzuUWui4ED0YlZ3dw0
qpXcsKCCiXzpAXNxP5HW0o+L3JBMG9YHvY5O32bY2Wfmbw2382EHEIUpXKcrEt6B
5cZBiaGjnob54M6mkbX9ee7POwbmrDkQ6cs8RXaqICw7EshDMAtOYxQpyzBOHdIG
nQsQCmF+nvCf3i06n6oyvtSea9YYYOzTwGLigj8qzrSB9u3Vp8tRUOE5eKQZwC/O
2hNT5FJTfn2R01xCKmkf4s6pRKLPPa2L5K17X6CqaCntjsNUi7CKj0ScB5VPbOvX
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19048261891887115531735994476110888247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '897090-4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '300 rue Léo-Pariseau,'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Transat Tours Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Transat Tours Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA613585'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19205311925645089502395004050107838885162359035428314615404578435851580176074350948746140076014264204756053803477095347246200616894269260811805450689456202216620334872197447579464533065453320932251149380008899385047777963157764014108679816801619721188679899349139508363574379170404759107369041679082004554961567824512843718027183590594814165483437183252906281944792150970579341615113105354764028739245197336881258590533881493545528545497289612234034517553601669033409797892704576300573377430976829400957287487725895207771954928826293537599565123573777231588878363504249137366012659205422199610989076905172548958541581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c6617217c422d1509431a8358e26a300fc363a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.mst.transatmemberservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mst.transatmemberservice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															319592556a919184739c4038c14d1675ea70c03c
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005f0053a24baf9f70dc48029f0359195177113040ddc5ad47a669a7f4d0a8905d41b7c3d157d8a3e22c22b09c616ed66fda039b73fc760b14b2cba8f8c018c019c2c5653324e60906851bf10404826c06c0cb2b3541521103023ea24aad5f9a6396ca4d7e57430bb251e139b483de78de5e6aba5cef443100cf0926067e503fad030be5578750e7c5e7d149c909064fc2c63098e6a2a585f346b14cfcdc6bc4763896d9a8b6a13e2a43b52c695637f84caef1749e7ed9451deaacd09280db19fc1270fe4113c2cecba98ce7c86158456d6645c9ec5e97e52a6336f6032c252f2511398febb9173c6f75f7e063cefb0d84111ba019e0b1dca8b3c0eaae7577afc19e70a99e9a3d01cd35aafb4b0e720091543512c9ea3b470c67794bde6ac04512126605b8885a74269df41a749f3d1f1f6dc056ca0a3225f618384e9dd590e0621dcce91ba8937891f24d147a4c86847e40086efea75d2cd948863822ad4af1bba958110743a2854cfe29dc283dc80f9b329e2c648cb2cbe1ebfa2f1d0451e3ba3cb9f4604987eaf58877cfc4b5cbc73e4d8a8a7bf06d85797632588220f77a1bdd7ea9513d8471b1c52bbf6df2cb54288facbc144874aa6a21a0f2c5048c4b5b7895db9c3df13311aeef7ecfa5269acce7b553253af8afb47adcaaa2e445ca4a02b3f09c54257f77d7d2d89fb180c46a8f3ff001f581b8650cb78c069a4c3685