lstat.kuleuven.be

- Katholieke Universiteit te Leuven -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:6d:ee:9e:bc:bc:a5:5c:5c:ce:52:9d:a6:2f:1c:33 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Katholieke Universiteit te Leuven

Organization: Katholieke Universiteit te Leuven
Organization unit: ICTS
Locality: Leuven
Country: BE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:ee:9e:bc:bc:a5:5c:5c:ce:52:9d:a6:2f:1c:33
Serial Number (int): 5887712130666546849209216378342415411
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 40:12:a1:86:cf:c3:7d:e2:b4:7b:cd:60:0b:1d:cb:c0:6f:5d:bc:db
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): cb:0a:c7:ca:ce:0c:bf:34:ed:82:14:33:47:64:92:f3:ab:4a:a7:ec
Fingerprint (sha256): 00:a0:45:7b:2e:5d:17:3e:f1:c6:7b:52:ea:7a:64:b6:bb:12:49:24:7c:0b:e9:d1:61:9a:b7:9d:1a:32:a8:93

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate lstat.kuleuven.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lstat.kuleuven.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lstat.kuleuven.be

Other certificates including the domain name kuleuven.be

(limited to 100 certificates)
alum.kuleuven.be
support.themallschool.org.uk
print.t.icts.kuleuven.be
fac.ppw.kuleuven.be
icts-s-dc2.luna.kuleuven.be
mysql.cs.kotnet.kuleuven.be
bbup1.q.icts.kuleuven.be
account.kuleuven.be
faber.kuleuven.be
workflow.groupware.oad.icts.kuleuven.be
icts-s-exmbx8.luna.kuleuven.be
cwisdb.kuleuven.be
iks32.fys.kuleuven.be
icts-s-desigo3.LUNAH.KULEUVEN.BE
dylius.icts.kuleuven.be
lstat.kuleuven.be
ICTS-S-RDADYL1.lunah.kuleuven.be
vsm-rdg.fysad.fys.kuleuven.be
zebra.cs.kuleuven.be
testjo.t.icts.kuleuven.be
ICTS-S-RDSIVAT1.tad.kuleuven.be
testjo.t.icts.kuleuven.be
voxtron.icts.kuleuven.be
synth.cs.kuleuven.be
*.apps.sp2019.groupware.oad.icts.kuleuven.be
www-sso.groupware.t.icts.kuleuven.be
blackboard-saas.t.icts.kuleuven.be
*.apps-sp2016.groupware.oad.icts.kuleuven.be
kulapp.t.icts.kuleuven.be
groupware.tad.icts.kuleuven.be
fys.kuleuven.be
squaredup.q.icts.kuleuven.be
icts-s-scomgw2.lunah.kuleuven.be
extranet.kuleuven.be
dagkrant.kuleuven.be
fys.kuleuven.be
icts-s-exmbx23.luna.kuleuven.be
ccis-iam-voucherservice.q.icts.kuleuven.be
*.sp2007.groupware.oad.icts.kuleuven.be
spub.icts.kuleuven.be
scanner.ghum.kuleuven.be
butler.cs.kuleuven.be
gbw-s-llk01.luna.kuleuven.be
tickatlab.q.gbiomed.kuleuven.be
TD-GBS-metasys.icts.kuleuven.be
*.apps.ncbgroupware.oad.icts.kuleuven.be
icts-s-dc2.tad.kuleuven.be
prep.cc.kuleuven.be
sg1.icts.kuleuven.be
apitest.feb.kuleuven.be
*.kuleuven.be
mtm.kuleuven.be
*.groupware.t.icts.kuleuven.be
iiw.kuleuven.be
lioo-hardware.icts.kuleuven.be
testjo.t.icts.kuleuven.be
tfs.q.icts.kuleuven.be
sp.biw.kuleuven.be
graduateland.com
webi11.aps.kuleuven.be
gbw-s-vibdock01.luna.kuleuven.be
nexus.icts.kuleuven.be
ICTS-S-RDA1.tad.kuleuven.be
fs.q.icts.kuleuven.be
wayf.q.icts.kuleuven.be
my.kuleuven.be
qmp4e4.cc.kuleuven.be
nieuws.kuleuven.be
co-de.experiments.cs.kuleuven.be
hiva.esat.kuleuven.be
pool01.icts.kuleuven.be
www.cosic.esat.kuleuven.be
icts-p-idm-12.lnx.icts.kuleuven.be
toledo.q.icts.kuleuven.be
legacy-owa.groupware.kuleuven.be
find.kuleuven.be
listserv.icts.kuleuven.be
ICTS-S-RDSLIO1.tad.kuleuven.be
lidkaart.alum.kuleuven.be
*.apps-sp2016.groupware.z.icts.kuleuven.be
GHUM-S-VSH00.LUNA.KULEUVEN.BE
search.t.icts.kuleuven.be
nextvib.gbiomed.kuleuven.be
icts-d-ua-3.lnx.icts.kuleuven.be
rdweb.icts.kuleuven.be
pad.esat.kuleuven.be
icts-d-idm-3.lnx.icts.kuleuven.be
onderwijsaanbod.kuleuven.be
find.t.icts.kuleuven.be
webp12.aps.kuleuven.be
find.q.icts.kuleuven.be
wmsopleiding.cc.kuleuven.be
*.am.thomasmore.ezproxy.kuleuven.be
icts-s-crdwts1.tad.kuleuven.be
ida2014.org
icts-s-dc1.qad.kuleuven.be
drives.kuleuven.be
lyncaccess.kuleuven.be
icts-s-sfbt01.icts.kuleuven.be
stage.soc.kuleuven.be

Certificate

The complete raw certificate details for lstat.kuleuven.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskodHgPKXtbVMAelTFO6
qxvSd6szVB8Q8GTFPtalM2ji3eu3O5d/7mta8RuyXbykSa+RkPkF57/eJHIKPDEN
4YJYuxKO1STqMR/I8RlG5B/cOzKeSoHy8dfrOC/34YiFxF3WbFRFuoOUyv2mGf4B
fPJQXYT3Cc/v1P6PBIufa1d+19swLMaBCIJK2njkIqEf1JZ+8K3dcA+mAbKZ02iM
7rzSWvK1q3BBKTYabwtK73ZGfbmWRXyC9BhVEL6AD3/81kcBH1E8Aa1nEABaMqJk
xzhIMuNVt3noMUBBLPZRSMNeVdj6i0Ie7JpDzFX7oPbTDUTX3Zz+a/1381siluYk
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5887712130666546849209216378342415411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katholieke Universiteit te Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICTS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lstat.kuleuven.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22506965130897122486898743428720297014191759127361243123199030002802762851301626688877438843672146124160863684028135149993200236088387865541164459892577800276610596698542604457098119842854904844734229737016569695239203361488687124609893843282886846369081494120141394305826415198884609157613328361558571138547109022116153949157338153403493055884425950945497064158280004882652562499615253870180238773055643002764306861298982788424041697747224916088371043696300571134252930064737441257456026797230471719184322071876842028763497769460876729900330867729379004622794109633922150101656916928115797645990962177560978699723781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:0|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lstat.kuleuven.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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