test-rt.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6d:82:60:e5:44:f0:d4:9f:f1:91:99:78:20:4f:50:c3:97:fd:6d:e0 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:82:60:e5:44:f0:d4:9f:f1:91:99:78:20:4f:50:c3:97:fd:6d:e0
Serial Number (int): 625187531691356930530696893321824883905218309600
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5a:f4:21:fb:05:67:00:fa:4f:c6:5b:58:a5:de:3c:c3:ef:77:84:fc
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): b5:1e:81:d6:c0:98:8a:07:71:7b:8e:80:ab:17:c1:f1:4b:e4:c4:42
Fingerprint (sha256): f0:e3:b0:02:48:df:a4:29:b2:b7:7a:12:a6:25:68:da:79:8a:01:3c:04:f0:dc:4e:a4:7b:9e:15:ec:57:0a:77

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate test-rt.trinity.edu.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-rt.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-rt.trinity.edu.au
test-rt02.trinity.unimelb.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)
ctxnsg01.trinity.unimelb.edu.au
gallery.trinity.edu.au
*.trinity.edu.au
casper02.trinity.unimelb.edu.au
ldap.trinity.edu.au
texas.trinity.edu.au
tcole-qa.trinity.edu.au
texas.trinity.edu.au
portal.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
storefront.trinity.edu.au
tcole.trinity.edu.au
wiki.trinity.edu.au
manage.trinity.edu.au
mrbs.trinity.edu.au
rt.trinity.edu.au
wiki.trinity.edu.au
*.trinity.edu.au
portal.trinity.edu.au
texas.trinity.edu.au
tcole.trinity.edu.au
ezproxy2.trinity.edu.au
cacti.trinity.edu.au
director.trinity.edu.au
*.trinity.edu.au
*.ezproxy.trinity.edu.au
texas.trinity.edu.au
mail.trinity.edu.au
wiki.trinity.edu.au
sts.trinity.edu.au
netscaler.trinity.edu.au
internal.trinity.edu.au
ios.trinity.edu.au
portal.trinity.edu.au
mx.trinity.edu.au
monit.trinity.edu.au
mrbs.trinity.edu.au
mypersonalhealth.trinity.edu.au
portal.trinity.edu.au
webprint.trinity.edu.au
ezproxy.trinity.edu.au
casper02.trinity.unimelb.edu.au
cacti.trinity.edu.au
sts.trinity.edu.au
winapps.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
mail.trinity.edu.au
sts.trinity.edu.au
*.trinity.edu.au
test-rt.trinity.edu.au
rt.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
rt.trinity.edu.au
img.trinity.edu.au

Certificate

The complete raw certificate details for test-rt.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMDCCBBigAwIBAgIUbYJg5UTw1J/xkZl4IE9Qw5f9beAwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIwMDEyMzIyMjQx
OVoXDTIyMDEyMzIyMzQwMFowdzELMAkGA1UEBhMCQVUxETAPBgNVBAgMCFZpY3Rv
cmlhMRIwEAYDVQQHDAlNZWxib3VybmUxIDAeBgNVBAoMF1VuaXZlcnNpdHkgb2Yg
TWVsYm91cm5lMR8wHQYDVQQDDBZ0ZXN0LXJ0LnRyaW5pdHkuZWR1LmF1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP97DexxK3igb8i6qHxWt9Mo5+em
MqkFcrRvd7vUmjXFjSBKVBb09OoABNN6LFbMVsUgNOwGSrCrGe8phfkLxdcR7vjE
/Y/Vntmvwdh7ZqvEzxx7ck8F+4WKSvmIeQTuYB8hvtrD9KXYj3NO3pnFr3a1pWij
uBt9dii2mXw3ludv5cSLCJG29M/tgqrjHwDnCG0mnRDCIUceUH4Hh9H0SpTL66fu
UyKh0mKDC17m2ul4lcXQUDLJ+R0kNFyr7cRJiGtMhsBDgEZ1kRNX+YmyeHhQsJGF
iNPLNve5N2nzbh8K3vYD4yX3GT6nQRHObMHysSZDpW3+CGAzDS7Kr7niuQIDAQAB
o4IB3DCCAdgwCQYDVR0TBAIwADAfBgNVHSMEGDAWgBSzEom1qUs1vBUA8IDp2HiH
8RN8djBzBggrBgEFBQcBAQRnMGUwNwYIKwYBBQUHMAKGK2h0dHA6Ly90cnVzdC5x
dW92YWRpc2dsb2JhbC5jb20vcXZzc2xnMy5jcnQwKgYIKwYBBQUHMAGGHmh0dHA6
Ly9vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTBDBgNVHREEPDA6ghZ0ZXN0LXJ0LnRy
aW5pdHkuZWR1LmF1giB0ZXN0LXJ0MDIudHJpbml0eS51bmltZWxiLmVkdS5hdTBR
BgNVHSAESjBIMEYGDCsGAQQBvlgAAmQBATA2MDQGCCsGAQUFBwIBFihodHRwOi8v
d3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsG
AQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1
b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNybDAdBgNVHQ4EFgQUWvQh+wVnAPpP
xltYpd48w+93hPwwDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4ICAQCrGggLzfX1Y35qrYHr2qoBdZR57ZWgyr6FRt9Z
YeIq19Tt7pkXMA2Xrn+1gIBJmBJJcfVFtFXijs35TdeV9m4AHvG+26q8iuX5LGeH
kCxwSGIkW5QeuE7xgoRCZ1UOV4nK5P/hnbnjgmS+PDZ1NTjF2FbDYAZ6JFk3VK7q
51ga2LpAUcvfNLgcv5ack1vmmSlb5zjf+jW2DbJaIaJB3+/iNKdyYKuDyuBGe8QQ
mJ7wMe9nt4GIuOiwUdIkKmsGe9adQOWTYbtiIGQDTRpcmG/yV/ZvYFP5TuhyQgbc
8XyjAgzAAtshlqdYIE0c66sY8pJe8IC4kBJ44xXfSzz+XKjEd8r5M3ibRyrtSBm6
F25e2FY58l166i/sH5r+wKR0uNFrsWbiawO1argQ94e/XJmP9HrQdsVGAYvW5Cea
7ZK1PixoJ01LHGBCfDFracErPGryGXsgIFHycsdmul8DtAp0dm6H9p/3cy/lmKub
wSfYI9XNzmEZz9aXTAhE97ORY6+qiY4tU0EWzFmenqDEgVjqEoxzNFhJcl4KFPLb
fespNZQ/gYpDupswBzYNJfmsV8paIMAi4ZEnavwOlLyzjBWu+607V7x13Ema4ioU
+g37gRnKZHPkwmFTbx/guynWRf7c55BAbMfP7Sb7qraAJyLbrWTTYS7JK1Jsq/UU
BoPcAA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP97DexxK3igb8i6qHxW
t9Mo5+emMqkFcrRvd7vUmjXFjSBKVBb09OoABNN6LFbMVsUgNOwGSrCrGe8phfkL
xdcR7vjE/Y/Vntmvwdh7ZqvEzxx7ck8F+4WKSvmIeQTuYB8hvtrD9KXYj3NO3pnF
r3a1pWijuBt9dii2mXw3ludv5cSLCJG29M/tgqrjHwDnCG0mnRDCIUceUH4Hh9H0
SpTL66fuUyKh0mKDC17m2ul4lcXQUDLJ+R0kNFyr7cRJiGtMhsBDgEZ1kRNX+Ymy
eHhQsJGFiNPLNve5N2nzbh8K3vYD4yX3GT6nQRHObMHysSZDpW3+CGAzDS7Kr7ni
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 625187531691356930530696893321824883905218309600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 22:24:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-23 22:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-rt.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20829064233758551418770426704761255991453414368968934554394060038791145094168378478317172053640952603357125300155364506221103157125152564558337550979029177000799480602420858668236963214122935545764852647569234091988311273461786293343246455701955848820114944059002875625299628553173494441639763119840021709012196956510816969251292141924803194897064355990141377481758835494635238247209354183114200159850865622791086646064633500002706047014047880811059368546250441844178296190006517391832407101894034295222500538154672552047769760926309189802646804543420649044750111292272243876719470595903584335415841102943464942330553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-rt.trinity.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-rt02.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5af421fb056700fa4fc65b58a5de3cc3ef7784fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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