apowebtest.dsi.universite-paris-saclay.fr

- UNIVERSITE PARIS-SACLAY -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 08:33:ac:2d:d9:cd:05:4d:82:36:91:8d:ef:8d:d3:1b was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UNIVERSITE PARIS-SACLAY

Organization: UNIVERSITE PARIS-SACLAY
Locality: Saint-Aubin
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:33:ac:2d:d9:cd:05:4d:82:36:91:8d:ef:8d:d3:1b
Serial Number (int): 10902123313189846387361056262154212123
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:d2:3b:e7:f6:b6:17:0d:8b:08:e5:f2:6d:a3:73:24:8e:6d:91:c3
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 52:a0:92:31:3c:cd:46:66:d1:32:53:60:a3:dc:39:72:72:d8:95:ec
Fingerprint (sha256): 01:9a:4f:07:93:34:fa:1c:4e:ea:c9:d0:b1:ca:cc:9e:73:de:7a:a7:b4:d2:9b:b5:12:1f:59:91:55:15:3b:2c

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate apowebtest.dsi.universite-paris-saclay.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apowebtest.dsi.universite-paris-saclay.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apowebtest.dsi.universite-paris-saclay.fr

Other certificates including the domain name universite-paris-saclay.fr

(limited to 100 certificates)
bbb.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
apo-wsprofiltest.dsi.universite-paris-saclay.fr
sports.universite-paris-saclay.fr
video.dsi.universite-paris-saclay.fr
connecteursprep.dsi.universite-paris-saclay.fr
apowebtest.dsi.universite-paris-saclay.fr
atlas.universite-paris-saclay.fr
hebergement.universite-paris-saclay.fr
piatest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.agora.universite-paris-saclay.fr
gitlab.dsi.universite-paris-saclay.fr
web-bib.imo.universite-paris-saclay.fr
snwtest.dsi.universite-paris-saclay.fr
inception.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.photo-club.asso.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
www2.lpgp.universite-paris-saclay.fr
gate.universite-paris-saclay.fr
www-test.c2n.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
ecandidatprep.dsi.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
rh.c2n.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.dpo.universite-paris-saclay.fr
www.faculte-sciences-sport.universite-paris-saclay.fr
lmodb.imo.universite-paris-saclay.fr
*.universite-paris-saclay.fr
awacstest.dsi.universite-paris-saclay.fr
pacestest.dsi.universite-paris-saclay.fr
ipa-user.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
iaprimotest.dsi.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
annuaire-ladiagonaletest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.ifsbm.universite-paris-saclay.fr
www.imo.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
www.sciences-sif.universite-paris-saclay.fr
resa.imo.universite-paris-saclay.fr
www.licence-pro-technico-commercial-cachan.u-psud.fr
bibliolabs.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
www.dep-chimie.universite-paris-saclay.fr
sso.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
pia.dsi.universite-paris-saclay.fr
sihamperso.universite-paris-saclay.fr
adonis-api.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.persay.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
Athena.universite-paris-saclay.fr
sihampersoform.dsi.universite-paris-saclay.fr
www.collecsciences.universite-paris-saclay.fr
www.cesfo.universite-paris-saclay.fr
*.portailtest.universite-paris-saclay.fr
ecandidattest-gestionnaire.dsi.universite-paris-saclay.fr
sportstest.dsi.universite-paris-saclay.fr
www.apoil.asso.universite-paris-saclay.fr
bdd.c2n.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
mahery2.imo.universite-paris-saclay.fr
re7-extranet.universite-paris-saclay.fr
bernardotest.dsi.universite-paris-saclay.fr
edith-www.c2n.universite-paris-saclay.fr
api.focus.universite-paris-saclay.fr
e-missions-dev.imo.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
share.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.kiosk-lpgp.universite-paris-saclay.fr
gateprep1.dsi.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
wp.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
idm1.idm.universite-paris-saclay.fr
bibliotheque.imo.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
extranet.universite-paris-saclay.fr
*.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
wims.universite-paris-saclay.fr
www.iut-orsay.universite-paris-saclay.fr
www.universite-paris-saclay.fr
copernic.universite-paris-saclay.fr
weblosco1.dsi.universite-paris-saclay.fr
www.biocis.universite-paris-saclay.fr
pjweb.universite-paris-saclay.fr

Certificate

The complete raw certificate details for apowebtest.dsi.universite-paris-saclay.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10902123313189846387361056262154212123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Aubin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNIVERSITE PARIS-SACLAY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apowebtest.dsi.universite-paris-saclay.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783238238300992846835202256697389563300113363057619367049118740305875152149918752334286220786343536237530707400441084815567265251110886348924768019673421904106667013311336433814654205553009883088026657016986813600572316550018805231381314117929283959470781438258378961783621996850390026131418634635242934057501713353581066070739560149766163375317955943426163113772585753401047352351599593291545765167178230330646062228803944119646981511934278773364859199789483372818439535222051105172859848276776000080523270514852554824740840709294815471927806737182863660464127092035491086626443656468804107794910852274120138604701043582172694059047032279950626185159478479959095504558588419306698709133124240167451042591239342471606117933973446933305823230858583281618113287932452162641144884827585101323863352537701924619067852707978013896869721133414999712865863157862084860811485943634751377017863965763690809734835294171924730469687967405333460852812801622361743077929933094916756570907393848348043560430266730390311569043598733566382658045880810829412070124402595306945607300474119582447449148248877920509224212729235424837478043647469954237106353472452607110531376575254219043779566983258571355948311523388701594667434614627313845829637212319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1d23be7f6b6170d8b08e5f26da373248e6d91c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apowebtest.dsi.universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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