|  | This certificate comes from the CT database. The encoding of validity fails to be parsed using the strict rules. | 
|  |  | 
|  |  | 
|  | $ openssl asn1parse -i < [TBS CERTIFICATE] | 
|  | 0:d=0  hl=4 l=1276 cons: SEQUENCE | 
|  | 4:d=1  hl=2 l=   3 cons:  cont [ 0 ] | 
|  | 6:d=2  hl=2 l=   1 prim:   INTEGER           :02 | 
|  | 9:d=1  hl=2 l=   3 prim:  INTEGER           :2821D5 | 
|  | 14:d=1  hl=2 l=  13 cons:  SEQUENCE | 
|  | 16:d=2  hl=2 l=   9 prim:   OBJECT            :sha1WithRSAEncryption | 
|  | 27:d=2  hl=2 l=   0 prim:   NULL | 
|  | 29:d=1  hl=3 l= 220 cons:  SEQUENCE | 
|  | 32:d=2  hl=2 l=  11 cons:   SET | 
|  | 34:d=3  hl=2 l=   9 cons:    SEQUENCE | 
|  | 36:d=4  hl=2 l=   3 prim:     OBJECT            :countryName | 
|  | 41:d=4  hl=2 l=   2 prim:     PRINTABLESTRING   :US | 
|  | 45:d=2  hl=2 l=  16 cons:   SET | 
|  | 47:d=3  hl=2 l=  14 cons:    SEQUENCE | 
|  | 49:d=4  hl=2 l=   3 prim:     OBJECT            :stateOrProvinceName | 
|  | 54:d=4  hl=2 l=   7 prim:     PRINTABLESTRING   :Arizona | 
|  | 63:d=2  hl=2 l=  19 cons:   SET | 
|  | 65:d=3  hl=2 l=  17 cons:    SEQUENCE | 
|  | 67:d=4  hl=2 l=   3 prim:     OBJECT            :localityName | 
|  | 72:d=4  hl=2 l=  10 prim:     PRINTABLESTRING   :Scottsdale | 
|  | 84:d=2  hl=2 l=  37 cons:   SET | 
|  | 86:d=3  hl=2 l=  35 cons:    SEQUENCE | 
|  | 88:d=4  hl=2 l=   3 prim:     OBJECT            :organizationName | 
|  | 93:d=4  hl=2 l=  28 prim:     PRINTABLESTRING   :Starfield Technologies, Inc. | 
|  | 123:d=2  hl=2 l=  57 cons:   SET | 
|  | 125:d=3  hl=2 l=  55 cons:    SEQUENCE | 
|  | 127:d=4  hl=2 l=   3 prim:     OBJECT            :organizationalUnitName | 
|  | 132:d=4  hl=2 l=  48 prim:     PRINTABLESTRING   :http://certificates.starfieldtech.com/repository | 
|  | 182:d=2  hl=2 l=  49 cons:   SET | 
|  | 184:d=3  hl=2 l=  47 cons:    SEQUENCE | 
|  | 186:d=4  hl=2 l=   3 prim:     OBJECT            :commonName | 
|  | 191:d=4  hl=2 l=  40 prim:     PRINTABLESTRING   :Starfield Secure Certification Authority | 
|  | 233:d=2  hl=2 l=  17 cons:   SET | 
|  | 235:d=3  hl=2 l=  15 cons:    SEQUENCE | 
|  | 237:d=4  hl=2 l=   3 prim:     OBJECT            :serialNumber | 
|  | 242:d=4  hl=2 l=   8 prim:     PRINTABLESTRING   :10688435 | 
|  | 252:d=1  hl=2 l=  28 cons:  SEQUENCE | 
|  | 254:d=2  hl=2 l=  11 prim:   UTCTIME           :1401070000Z | 
|  | 267:d=2  hl=2 l=  13 prim:   UTCTIME           :160401070000Z | 
|  | 282:d=1  hl=3 l= 235 cons:  SEQUENCE | 
|  | 285:d=2  hl=2 l=  19 cons:   SET | 
|  | 287:d=3  hl=2 l=  17 cons:    SEQUENCE | 
|  | 289:d=4  hl=2 l=  11 prim:     OBJECT            :1.3.6.1.4.1.311.60.2.1.3 | 
|  | 302:d=4  hl=2 l=   2 prim:     PRINTABLESTRING   :US | 
|  | 306:d=2  hl=2 l=  24 cons:   SET | 
|  | 308:d=3  hl=2 l=  22 cons:    SEQUENCE | 
|  | 310:d=4  hl=2 l=  11 prim:     OBJECT            :1.3.6.1.4.1.311.60.2.1.2 | 
|  | 323:d=4  hl=2 l=   7 prim:     PRINTABLESTRING   :Arizona | 
|  | 332:d=2  hl=2 l=  29 cons:   SET | 
|  | 334:d=3  hl=2 l=  27 cons:    SEQUENCE | 
|  | 336:d=4  hl=2 l=   3 prim:     OBJECT            :businessCategory | 
|  | 341:d=4  hl=2 l=  20 prim:     PRINTABLESTRING   :Private Organization | 
|  | 363:d=2  hl=2 l=  20 cons:   SET | 
|  | 365:d=3  hl=2 l=  18 cons:    SEQUENCE | 
|  | 367:d=4  hl=2 l=   3 prim:     OBJECT            :serialNumber | 
|  | 372:d=4  hl=2 l=  11 prim:     PRINTABLESTRING   :R-1724741-6 | 
|  | 385:d=2  hl=2 l=  11 cons:   SET | 
|  | 387:d=3  hl=2 l=   9 cons:    SEQUENCE | 
|  | 389:d=4  hl=2 l=   3 prim:     OBJECT            :countryName | 
|  | 394:d=4  hl=2 l=   2 prim:     PRINTABLESTRING   :US | 
|  | 398:d=2  hl=2 l=  16 cons:   SET | 
|  | 400:d=3  hl=2 l=  14 cons:    SEQUENCE | 
|  | 402:d=4  hl=2 l=   3 prim:     OBJECT            :stateOrProvinceName | 
|  | 407:d=4  hl=2 l=   7 prim:     PRINTABLESTRING   :Arizona | 
|  | 416:d=2  hl=2 l=  19 cons:   SET | 
|  | 418:d=3  hl=2 l=  17 cons:    SEQUENCE | 
|  | 420:d=4  hl=2 l=   3 prim:     OBJECT            :localityName | 
|  | 425:d=4  hl=2 l=  10 prim:     PRINTABLESTRING   :Scottsdale | 
|  | 437:d=2  hl=2 l=  36 cons:   SET | 
|  | 439:d=3  hl=2 l=  34 cons:    SEQUENCE | 
|  | 441:d=4  hl=2 l=   3 prim:     OBJECT            :organizationName | 
|  | 446:d=4  hl=2 l=  27 prim:     PRINTABLESTRING   :Starfield Technologies, LLC | 
|  | 475:d=2  hl=2 l=  43 cons:   SET | 
|  | 477:d=3  hl=2 l=  41 cons:    SEQUENCE | 
|  | 479:d=4  hl=2 l=   3 prim:     OBJECT            :commonName | 
|  | 484:d=4  hl=2 l=  34 prim:     PRINTABLESTRING   :valid.sfi.catest.starfieldtech.com | 
|  | 520:d=1  hl=4 l= 290 cons:  SEQUENCE | 
|  | 524:d=2  hl=2 l=  13 cons:   SEQUENCE | 
|  | 526:d=3  hl=2 l=   9 prim:    OBJECT            :rsaEncryption | 
|  | 537:d=3  hl=2 l=   0 prim:    NULL | 
|  | 539:d=2  hl=4 l= 271 prim:   BIT STRING | 
|  | 814:d=1  hl=4 l= 462 cons:  cont [ 3 ] | 
|  | 818:d=2  hl=4 l= 458 cons:   SEQUENCE | 
|  | 822:d=3  hl=2 l=  12 cons:    SEQUENCE | 
|  | 824:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Basic Constraints | 
|  | 829:d=4  hl=2 l=   1 prim:     BOOLEAN           :255 | 
|  | 832:d=4  hl=2 l=   2 prim:     OCTET STRING      [HEX DUMP]:3000 | 
|  | 836:d=3  hl=2 l=  14 cons:    SEQUENCE | 
|  | 838:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Key Usage | 
|  | 843:d=4  hl=2 l=   1 prim:     BOOLEAN           :255 | 
|  | 846:d=4  hl=2 l=   4 prim:     OCTET STRING      [HEX DUMP]:030205A0 | 
|  | 852:d=3  hl=2 l=  29 cons:    SEQUENCE | 
|  | 854:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Extended Key Usage | 
|  | 859:d=4  hl=2 l=  22 prim:     OCTET STRING      [HEX DUMP]:301406082B0601050507030106082B06010505070302 | 
|  | 883:d=3  hl=2 l=  45 cons:    SEQUENCE | 
|  | 885:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Subject Alternative Name | 
|  | 890:d=4  hl=2 l=  38 prim:     OCTET STRING      [HEX DUMP]:3024822276616C69642E7366692E6361746573742E737461726669656C64746563682E636F6D | 
|  | 930:d=3  hl=2 l=  29 cons:    SEQUENCE | 
|  | 932:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Subject Key Identifier | 
|  | 937:d=4  hl=2 l=  22 prim:     OCTET STRING      [HEX DUMP]:041470EF9012A65C1E984F5BDB33C30F6DCBED401A64 | 
|  | 961:d=3  hl=2 l=  31 cons:    SEQUENCE | 
|  | 963:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Authority Key Identifier | 
|  | 968:d=4  hl=2 l=  24 prim:     OCTET STRING      [HEX DUMP]:30168014494B5227D11BBCF2A1216A627B51427A8AD7D556 | 
|  | 994:d=3  hl=2 l=  56 cons:    SEQUENCE | 
|  | 996:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 CRL Distribution Points | 
|  | 1001:d=4  hl=2 l=  49 prim:     OCTET STRING      [HEX DUMP]:302F302DA02BA0298627687474703A2F2F63726C2E737461726669656C64746563682E636F6D2F736673332D302E63726C | 
|  | 1052:d=3  hl=3 l= 141 cons:    SEQUENCE | 
|  | 1055:d=4  hl=2 l=   8 prim:     OBJECT            :Authority Information Access | 
|  | 1065:d=4  hl=3 l= 128 prim:     OCTET STRING      [HEX DUMP]:307E302A06082B06010505073001861E687474703A2F2F6F6373702E737461726669656C64746563682E636F6D2F305006082B060105050730028644687474703A2F2F6365727469666963617465732E737461726669656C64746563682E636F6D2F7265706F7369746F72792F73665F696E7465726D6564696174652E637274 | 
|  | 1196:d=3  hl=2 l=  82 cons:    SEQUENCE | 
|  | 1198:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Certificate Policies | 
|  | 1203:d=4  hl=2 l=  75 prim:     OCTET STRING      [HEX DUMP]:30493047060B6086480186FD6E010717033038303606082B06010505070201162A687474703A2F2F63657274732E737461726669656C64746563682E636F6D2F7265706F7369746F72792F | 
|  | -----BEGIN TBS CERTIFICATE----- | 
|  | MIIE/KADAgECAgMoIdUwDQYJKoZIhvcNAQEFBQAwgdwxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwd | 
|  | Bcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG | 
|  | 9naWVzLCBJbmMuMTkwNwYDVQQLEzBodHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY | 
|  | 29tL3JlcG9zaXRvcnkxMTAvBgNVBAMTKFN0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGlvbiBB | 
|  | dXRob3JpdHkxETAPBgNVBAUTCDEwNjg4NDM1MBwXCzE0MDEwNzAwMDBaFw0xNjA0MDEwNzAwMDB | 
|  | aMIHrMRMwEQYLKwYBBAGCNzwCAQMTAlVTMRgwFgYLKwYBBAGCNzwCAQITB0FyaXpvbmExHTAbBg | 
|  | NVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRQwEgYDVQQFEwtSLTE3MjQ3NDEtNjELMAkGA1UEB | 
|  | hMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJDAiBgNVBAoTG1N0 | 
|  | YXJmaWVsZCBUZWNobm9sb2dpZXMsIExMQzErMCkGA1UEAxMidmFsaWQuc2ZpLmNhdGVzdC5zdGF | 
|  | yZmllbGR0ZWNoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3UsdA7Nr22Qr | 
|  | HAYv7/IqL8V7kczSyO9wziJzVdWu+l7Brg//TgjMZKMgY7cJdpICvFAxLOxO3Z1w721InVmTxz0 | 
|  | 1lczx5WrH3aJMwR/05By5tanNaas9zdMAWFtWd8SYKm2xcSC3FsAhue2s14OT+EE92XgNgVhF2b | 
|  | dlOTgkwh/+q4Nl7k62LncnRSzFZdJKiorI811vrvVD45NB9IOPuRUXj5GLcUh4BXXp3ZSekFbVu | 
|  | A2oDnIhNGyQcThtf3wcM0dRMeKgemAD59d96NaQYH/QVA3gdtlzKxgeF/UvlxYG3P3DknTRiaMz | 
|  | l/Na9NzdRQX2i7ubskThqoRs05Zv0CAwEAAaOCAc4wggHKMAwGA1UdEwEB/wQCMAAwDgYDVR0PA | 
|  | QH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAtBgNVHREEJjAkgiJ2YWxp | 
|  | ZC5zZmkuY2F0ZXN0LnN0YXJmaWVsZHRlY2guY29tMB0GA1UdDgQWBBRw75ASplwemE9b2zPDD23 | 
|  | L7UAaZDAfBgNVHSMEGDAWgBRJS1In0Ru88qEhamJ7UUJ6itfVVjA4BgNVHR8EMTAvMC2gK6Aphi | 
|  | dodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmczMtMC5jcmwwgY0GCCsGAQUFBwEBBIGAM | 
|  | H4wKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnN0YXJmaWVsZHRlY2guY29tLzBQBggrBgEFBQcw | 
|  | AoZEaHR0cDovL2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmX2l | 
|  | udGVybWVkaWF0ZS5jcnQwUgYDVR0gBEswSTBHBgtghkgBhv1uAQcXAzA4MDYGCCsGAQUFBwIBFi | 
|  | podHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8= | 
|  | -----END TBS CERTIFICATE----- | 
|  |  | 
|  | ERROR: Failed parsing validity | 
|  |  | 
|  | -----BEGIN ERRORS----- | 
|  | RVJST1I6IEZhaWxlZCBwYXJzaW5nIHZhbGlkaXR5Cg== | 
|  | -----END ERRORS----- |