rt.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 0e:06:af:49:da:8a:e4:bb:cc:58:6a:15:8a:0b:18:cf:52:96:39:d9 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:06:af:49:da:8a:e4:bb:cc:58:6a:15:8a:0b:18:cf:52:96:39:d9
Serial Number (int): 80074945043868659665671538305478203740205234649
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 66:b9:e6:52:72:fd:9a:cf:20:8b:56:a9:94:cd:ca:00:44:df:da:88
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 4b:fa:cf:5f:d1:f1:37:75:29:c1:9e:23:76:ef:ab:60:1c:70:eb:cd
Fingerprint (sha256): f1:79:5a:3b:d9:6d:2b:94:9b:67:25:13:c1:94:f2:03:4f:32:3d:44:a3:d3:4c:0a:f8:71:c0:c8:98:a1:6a:93

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate rt.trinity.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rt.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rt.trinity.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)
ctxnsg01.trinity.unimelb.edu.au
gallery.trinity.edu.au
*.trinity.edu.au
casper02.trinity.unimelb.edu.au
ldap.trinity.edu.au
texas.trinity.edu.au
tcole-qa.trinity.edu.au
texas.trinity.edu.au
portal.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
storefront.trinity.edu.au
tcole.trinity.edu.au
wiki.trinity.edu.au
manage.trinity.edu.au
mrbs.trinity.edu.au
rt.trinity.edu.au
wiki.trinity.edu.au
*.trinity.edu.au
portal.trinity.edu.au
texas.trinity.edu.au
tcole.trinity.edu.au
ezproxy2.trinity.edu.au
cacti.trinity.edu.au
director.trinity.edu.au
*.trinity.edu.au
*.ezproxy.trinity.edu.au
texas.trinity.edu.au
mail.trinity.edu.au
wiki.trinity.edu.au
sts.trinity.edu.au
netscaler.trinity.edu.au
internal.trinity.edu.au
ios.trinity.edu.au
portal.trinity.edu.au
mx.trinity.edu.au
monit.trinity.edu.au
mrbs.trinity.edu.au
mypersonalhealth.trinity.edu.au
portal.trinity.edu.au
webprint.trinity.edu.au
ezproxy.trinity.edu.au
casper02.trinity.unimelb.edu.au
cacti.trinity.edu.au
sts.trinity.edu.au
winapps.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
mail.trinity.edu.au
sts.trinity.edu.au
*.trinity.edu.au
test-rt.trinity.edu.au
rt.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
rt.trinity.edu.au
img.trinity.edu.au

Certificate

The complete raw certificate details for rt.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBDCCA+ygAwIBAgIUDgavSdqK5LvMWGoVigsYz1KWOdkwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIwMDEyMzIxMzQw
MFoXDTIyMDEyMzIxNDMwMFowcjELMAkGA1UEBhMCQVUxETAPBgNVBAgMCFZpY3Rv
cmlhMRIwEAYDVQQHDAlNZWxib3VybmUxIDAeBgNVBAoMF1VuaXZlcnNpdHkgb2Yg
TWVsYm91cm5lMRowGAYDVQQDDBFydC50cmluaXR5LmVkdS5hdTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMK7nLFSel7zqfP6xRCcNPIQaV5UHE8KPowj
7C9SIDiZwVdODv/utBYeObjA9o9DVSw5mWJfFNrG1byabSbqKd5gEBodR8LnAyjC
qUT62Py7UQ328dsalIxifd4jcTA07dD/qc8QvFN0EnfSUVxyxcI2BzvsQuSIb+62
MlIgoPGl4tj3CcvhYSxlS+JadS/15fR8aoC+nSfb98ls6JhXmaI0vHLU4kOjpr8B
KlWP1e882Tl5QNesLn8kLuoM6fdfq9wFcuZiOGFoxjUCa57PSqHZ4gvnL16iBTQN
u7erNENhQMTAxvkcxujVrtiWGmRHDKIeVmYUhw2pj721GarnEXcCAwEAAaOCAbUw
ggGxMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYw
cwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFk
aXNnbG9iYWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2Nz
cC5xdW92YWRpc2dsb2JhbC5jb20wHAYDVR0RBBUwE4IRcnQudHJpbml0eS5lZHUu
YXUwUQYDVR0gBEowSDBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcCARYoaHR0
cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAU
BggrBgEFBQcDAgYIKwYBBQUHAwEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2Ny
bC5xdW92YWRpc2dsb2JhbC5jb20vcXZzc2xnMy5jcmwwHQYDVR0OBBYEFGa55lJy
/ZrPIItWqZTNygBE39qIMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAFLmKpLAJUG9iPxik0GBYkKXe66lUxb7H
hpTD5DEUWhbMFIpWT6PagcK+vkJz0Qp10XqW5aZvZXV0ZaQ6i1CX25pKovmY9xx0
kUCLRqMf3GrSDqIUEquQmUG1xGyVgvs03BYSc5fYRiBKBeLOgNJjUhb8zjvGnr1D
BZL1VrIJnzGHnAL+uRFy9RQyAD6qX2/OyrIDoL8Fq+tmkD0NTRAZr8htuVRe9EtP
tHRxgSxxkpiIvBDEf+j+7pEWHtqqWZFZnPfYXmI2Oh9XqDbZeEQzJeusuOZv4RPn
OFCUNciczm0ZLfhceRWmvi47wVm3vFPc2fbj9DtdgnDnABlvsxrp+2g8+nskqlRL
CmZVts1c5cytQhsNqoSE1G7axG50Vhs6ngOxmlZiH0ndFaRWCrE9Zm4emryJ4vwL
JGkbI6k5/N9adlUHTXzF7s+sRuSGMXqprnkc61umcXw4xou1dzT4kNNxWarNUKCZ
gwmMNWzjXHz6m3+ZnAgetfxtU4XBspODm60zaqPeyI6TPbyQty7yPHt+BEFMHKw3
0xaP/A3lLxE7HXrdZbGr7ceqzzQ7oEd0YohdOUGGGmpqAI/mizYcn+B2Ui1FwMaw
FuSdKslrNb+zLaChzgY39rf1ZoASXfjwfImuNlJWDAs41wTMipcm3qAYUd0rSLox
ue5UwyoRQ/E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrucsVJ6XvOp8/rFEJw0
8hBpXlQcTwo+jCPsL1IgOJnBV04O/+60Fh45uMD2j0NVLDmZYl8U2sbVvJptJuop
3mAQGh1HwucDKMKpRPrY/LtRDfbx2xqUjGJ93iNxMDTt0P+pzxC8U3QSd9JRXHLF
wjYHO+xC5Ihv7rYyUiCg8aXi2PcJy+FhLGVL4lp1L/Xl9HxqgL6dJ9v3yWzomFeZ
ojS8ctTiQ6OmvwEqVY/V7zzZOXlA16wufyQu6gzp91+r3AVy5mI4YWjGNQJrns9K
odniC+cvXqIFNA27t6s0Q2FAxMDG+RzG6NWu2JYaZEcMoh5WZhSHDamPvbUZqucR
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80074945043868659665671538305478203740205234649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 21:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-23 21:43:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rt.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24582746128499229737366005889673684278292825857038185600504934734431912676438018162341383905324394053216208015613603712065672205088707595854771849931714561621614785763517740689968986560850612807495622656421527019164881190514960227452184159148638736238043591414510140672618353387408970095098837921815566248266171365573301058819242775629301025329571769816803813701787818087248366701441492652849869535176580633254736733430065041828210804878121533833766657031503691802425858830243579417564461268732736400217961382545195514627403524988278537967779629191702434328141643753703422863448203511960895594929964856955126940111223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.trinity.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66b9e65272fd9acf208b56a994cdca0044dfda88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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