qfyp.ddj.co.za

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 26:78:35:d0:0b:1f:19:f3:3d:8c:10:90:5b:e5:98:87 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qfyp.ddj.co.za

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:78:35:d0:0b:1f:19:f3:3d:8c:10:90:5b:e5:98:87
Serial Number (int): 51134830913459713345881685369815406727
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 4e:5b:be:f2:62:fa:a2:4c:11:85:8e:5b:5d:85:aa:94:b7:6e:ad:68
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 17:db:11:69:0a:c8:d1:8b:50:b9:a5:b6:59:d4:36:f3:d5:9c:a8:b7
Fingerprint (sha256): e8:bb:ca:43:00:e1:fc:62:fe:49:7c:2a:9f:3d:67:2a:87:36:77:a0:af:c4:d1:ae:b9:c8:c9:68:04:12:67:93

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate qfyp.ddj.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qfyp.ddj.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qfyp.ddj.co.za

Other certificates including the domain name ddj.co.za

(limited to 100 certificates)
kuaq.ddj.co.za
zujgfpn.ddj.co.za
wibak.ddj.co.za
unga.ddj.co.za
rjd.ddj.co.za
mdbselq.ddj.co.za
plbxf.ddj.co.za
sdo.ddj.co.za
www.ddj.co.za
sbff.ddj.co.za
jyxx.ddj.co.za
luq.ddj.co.za
wuumo.ddj.co.za
pwkb.ddj.co.za
ddj.co.za
www.ddj.co.za
www.ddj.co.za
jhpiyek.ddj.co.za
www.ddj.co.za
wabqg.ddj.co.za
pdau.ddj.co.za
wdvaw.ddj.co.za
zjqd.ddj.co.za
ddj.co.za
www.ddj.co.za
vecv.ddj.co.za
wavh.ddj.co.za
oxqijuv.ddj.co.za
ddj.co.za
brpnvqo.ddj.co.za
qhvz.ddj.co.za
ddj.co.za
phroair.ddj.co.za
ddj.co.za
zjcpxe.ddj.co.za
uhppkos.ddj.co.za
exlfatu.ddj.co.za
ddj.co.za
kaa.ddj.co.za
wptce.ddj.co.za
cjb.ddj.co.za
wfihk.ddj.co.za
pdd.ddj.co.za
www.ddj.co.za
www.ddj.co.za
pnu.ddj.co.za
gahg.ddj.co.za
kzb.ddj.co.za
ddj.co.za
nazsfrk.ddj.co.za
ddj.co.za
wkini.ddj.co.za
www.ddj.co.za
ftkevof.ddj.co.za
lookatthefloorsmu.ddj.co.za
ddj.co.za
ddj.co.za
nhjl.ddj.co.za
yzuttvz.ddj.co.za
ixs.ddj.co.za
gfdcd.ddj.co.za
www.ddj.co.za
wptwp.ddj.co.za
godxuui.ddj.co.za
vsf.ddj.co.za
etzpci.ddj.co.za
ddj.co.za
zcnbuns.ddj.co.za
ddj.co.za
wkior.ddj.co.za
fil.ddj.co.za
rgbgzlz.ddj.co.za
fday.ddj.co.za
cllqzd.ddj.co.za
szz.ddj.co.za
ybd.ddj.co.za
ddj.co.za
zje.ddj.co.za
tmos.ddj.co.za
fpd.ddj.co.za
pkc.ddj.co.za
obov.ddj.co.za
www.ddj.co.za
vbfhnwp.ddj.co.za
mcp.ddj.co.za
wjkcn.ddj.co.za
wjkkt.ddj.co.za
wvtvy.ddj.co.za
ddj.co.za
qfyp.ddj.co.za
rlc.ddj.co.za
ddj.co.za
ddj.co.za
dwsfozb.ddj.co.za
ddj.co.za

Certificate

The complete raw certificate details for qfyp.ddj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzTCCA7WgAwIBAgIQJng10AsfGfM9jBCQW+WYhzANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTIzMDExNDEyNTEzMVoXDTIzMDQyODEyNTEyNlowGTEXMBUG
A1UEAwwOcWZ5cC5kZGouY28uemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEUMmeYFiE8lKmR1noMfTwzaYCgQQwGRUkYc4NhQRwOhqGguX8wtBiHykb
aUZmpEtUBM9UfzU5252hfK9q2eUmqSWA64eQpxolG/eilPsP3vug/6So10PvBfeG
i/jsybTXT4s++wlyq4jEaD/M2l+PZL0A08qkJ/hzoLOmbk69alluwWCC7qQZ/sKN
9HWgeLwOUDyXsJUYFhI6zPw4/I55KAhYlW5T4Q5J6gFrDNEygphnI++hStJ4JxO+
HlNgSa8zETOzxhIyzpMgXSgaFE1GM111OigbPfJVUvBEvDp/lYxUO+In6+pkx7ir
Gp8B5QR/Got1rcJgGqSwXXeAFFyzAgMBAAGjggG/MIIBuzAMBgNVHRMBAf8EAjAA
MB8GA1UdIwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHIGCCsGAQUFBwEBBGYw
ZDBABggrBgEFBQcwAoY0aHR0cDovL2NlcnQuc3NsLmNvbS9TU0xjb20tU3ViQ0Et
U1NMLVJTQS00MDk2LVIxLmNlcjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3BzLnNz
bC5jb20wGQYDVR0RBBIwEIIOcWZ5cC5kZGouY28uemEwUQYDVR0gBEowSDAIBgZn
gQwBAgEwPAYMKwYBBAGCqTABAwEBMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3
LnNzbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybHMuc3NsLmNvbS9TU0xjb20t
U3ViQ0EtU1NMLVJTQS00MDk2LVIxLmNybDAdBgNVHQ4EFgQUTlu+8mL6okwRhY5b
XYWqlLdurWgwDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4ICAQApGy+qeXX/njEClN6qpmrOH0YffzmRaku/xPsuQ5O2
NAhQWnyxLN9kF8rQcHwGZXeZGutPkueTgq91TaMQmWh12dHwts0/MyhCDa0eSAHL
AzIz0S9+etrWvwh1qAeg8j8lfm2LXA/G74gLw5somZVFomNRXIfPe+dicrfOW1eg
nrDyG0oIWtD7iUBtZUHFql6gmgsM9IgBSed0dqId3nAwVixVHeBtskRb6uAQruIP
viSW1wnIlyq+4DBKYg/TjmR2QOa4oZ/8lHs9MSl2LYgMe+IAEzSZggbXq7WFHCPN
s31466qxpW3ZdkYOZWnaOs3YDb4ezyjMMugyEsaz7KoUEqlILsUPjDy6SmRfuPXI
y5ndGrAz0BtThNZnAPD6WArQukVf2bA8ce6VdCMmIyOy1pC/y9I+hJB2hJVv8Irs
Zw7kRE7rQp9l0+4O+uRL57A11nZgPJeELJ9VksrCiYUHsVCe5FmOzyU6TdoZasdo
WD9LgRT20bG8hGie5wbI4A913JERll5VBqqVWXTpGaO+B3F+OFg9yfaZzGJcS/Pb
ZiUxR+hkZM8Qo6MDF+L9QLJcV1xsfFC9eeMvCnqU894a95zEefwFGdRkn1x/jbUc
//3ymX3245VseMKiHDWFsi9eAPwzY9SQtHjsq0cvMeEd0llVXm7Ud+5HJnWVk68b
2w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFDJnmBYhPJSpkdZ6DH0
8M2mAoEEMBkVJGHODYUEcDoahoLl/MLQYh8pG2lGZqRLVATPVH81OdudoXyvatnl
JqklgOuHkKcaJRv3opT7D977oP+kqNdD7wX3hov47Mm010+LPvsJcquIxGg/zNpf
j2S9ANPKpCf4c6Czpm5OvWpZbsFggu6kGf7CjfR1oHi8DlA8l7CVGBYSOsz8OPyO
eSgIWJVuU+EOSeoBawzRMoKYZyPvoUrSeCcTvh5TYEmvMxEzs8YSMs6TIF0oGhRN
RjNddTooGz3yVVLwRLw6f5WMVDviJ+vqZMe4qxqfAeUEfxqLda3CYBqksF13gBRc
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51134830913459713345881685369815406727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 12:51:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 12:51:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'qfyp.ddj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24782545610311789746290125534603804694246789365357523641811230837819584943442204086726744011603079786451704252935901511155260623883322448929084419271210974962160098341145701056711304344255197431908083725649905511492262489044062546026233574535698583820813392957244596527659554183198825410150378800128146128797230233892141998360759199632282609611437418794525215785939316888167525037907990823377037291705444059528577414667059055838416494554750388713192496130994638220682730956120643612546806535656869275209324305270853003720504708947070588624892948892310237962148617804148004712086770824013062716512550638062183552146611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qfyp.ddj.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e5bbef262faa24c11858e5b5d85aa94b76ead68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00291b2faa7975ff9e310294deaaa66ace1f461f7f39916a4bbfc4fb2e4393b63408505a7cb12cdf6417cad0707c066577991aeb4f92e79382af754da310996875d9d1f0b6cd3f3328420dad1e4801cb033233d12f7e7adad6bf0875a807a0f23f257e6d8b5c0fc6ef880bc39b28999545a263515c87cf7be76272b7ce5b57a09eb0f21b4a085ad0fb89406d6541c5aa5ea09a0b0cf4880149e77476a21dde7030562c551de06db2445beae010aee20fbe2496d709c8972abee0304a620fd38e647640e6b8a19ffc947b3d3129762d880c7be2001334998206d7abb5851c23cdb37d78ebaab1a56dd976460e6569da3acdd80dbe1ecf28cc32e83212c6b3ecaa1412a9482ec50f8c3cba4a645fb8f5c8cb99dd1ab033d01b5384d66700f0fa580ad0ba455fd9b03c71ee957423262323b2d690bfcbd23e84907684956ff08aec670ee4444eeb429f65d3ee0efae44be7b035d676603c97842c9f5592cac2898507b1509ee4598ecf253a4dda196ac768583f4b8114f6d1b1bc84689ee706c8e00f75dc9111965e5506aa955974e919a3be07717e38583dc9f699cc625c4bf3db66253147e86464cf10a3a30317e2fd40b25c575c6c7c50bd79e32f0a7a94f3de1af79cc479fc0519d4649f5c7f8db51cfffdf2997df6e3956c78c2a21c3585b22f5e00fc3363d490b478ecab472f31e11dd259555e6ed477ee4726759593af1bdb