issuer:Test CA subject:ct-insufficient-scts.example.com extension:subjectAlternativeName:*.example.com extension:embeddedSCTList:secp256r1:20160101,alternate:20160101