promedica.org
Issued by R3
About this certificate
This digital certificate with serial number 03:35:6e:dd:09:97:9d:60:63:ab:c7:2f:f6:c3:14:49:64:35 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=promedica.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:35:6e:dd:09:97:9d:60:63:ab:c7:2f:f6:c3:14:49:64:35Serial Number (int): 279519186013786400092978487692696639595573
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f4:3e:ce:d4:f2:70:1a:61:f4:98:25:4d:d4:d0:ae:2d:80:dd:2b:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a1:ff:de:58:77:74:8a:76:67:be:9d:ed:e0:05:f4:bf:72:1d:ba:0b
Fingerprint (sha256): 01:a0:3f:87:5f:8f:ce:1c:95:e0:e0:5f:72:78:58:6b:a7:d0:10:31:34:09:07:6e:73:81:74:04:fd:5c:46:7e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate promedica.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promedica.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promedica.org
Other certificates including the domain name promedica.org
(limited to 100 certificates)
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
phsimail.promedica.org
promedica.org
clearpass.phsi.promedica.org
careers.promedica.org
www2.promedica.org
phspacsids5.pacs.promedica.org
promedica.org
phsimail.promedica.org
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
*.pss.promedica.org
lyncae13.phsi.promedica.org
epicnpce02.promedica.org
yourhealth.promedica.org
promedica.org
careers.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
promedica.org
promedica.org
*.voice.promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
cloud.stayconnected.promedica.org
phsimail.promedica.org
epicceprxy.promedica.org
yourhealth.promedica.org
promedica.org
tthucexpwe02.promedica.org
mdm.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
support.promedica.org
promedica.org
epicceprxy.promedica.org
promedica.org
phsimail.promedica.org
promedica.org
giving.promedica.org
phsvidyoportal.phsi.promedica.org
promedica.org
webvpn01.promedica.org
support.promedica.org
promedica.org
promedica.org
careers.promedica.org
promedica.org
foundations.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
employersolutions.promedica.org
promedica.org
yourhealth.promedica.org
promedica.org
csg.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
*.promedica.org
isepsn01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
yourhealth.promedica.org
promedica.org
promedica.org
syngoviaprxyvip.phsi.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
giving.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
phsimail.promedica.org
promedica.org
clearpass.phsi.promedica.org
careers.promedica.org
www2.promedica.org
phspacsids5.pacs.promedica.org
promedica.org
phsimail.promedica.org
*.pss.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
*.pss.promedica.org
lyncae13.phsi.promedica.org
epicnpce02.promedica.org
yourhealth.promedica.org
promedica.org
careers.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
promedica.org
promedica.org
*.voice.promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
cloud.stayconnected.promedica.org
phsimail.promedica.org
epicceprxy.promedica.org
yourhealth.promedica.org
promedica.org
tthucexpwe02.promedica.org
mdm.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
support.promedica.org
promedica.org
epicceprxy.promedica.org
promedica.org
phsimail.promedica.org
promedica.org
giving.promedica.org
phsvidyoportal.phsi.promedica.org
promedica.org
webvpn01.promedica.org
support.promedica.org
promedica.org
promedica.org
careers.promedica.org
promedica.org
foundations.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
employersolutions.promedica.org
promedica.org
yourhealth.promedica.org
promedica.org
csg.promedica.org
promedica.org
tthucexpwe01.promedica.org
webvpn02.promedica.org
*.promedica.org
isepsn01.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
pthrelayweb01.promedica.org
yourhealth.promedica.org
promedica.org
promedica.org
syngoviaprxyvip.phsi.promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
promedica.org
giving.promedica.org
promedica.org
Certificate
The complete raw certificate details for promedica.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAzVu3QmXnWBjq8cv9sMUSWQ1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEyMDgxNDA2MzRaFw0yMzAzMDgxNDA2MzNaMBgxFjAUBgNVBAMT DXByb21lZGljYS5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDK 3Qsh3Nnetbvku19CnopTaxZt24rU72MsuQthVrSMyPXhoUCQPYcbrgyeok4pKP3G NPUvaQQaQSej8S4l1QTTUjLkXEqUdy2ML4j3el9R37jXPRaus8yuJYrkTDUpYgLI VILY003QYZp2cQx0FBGs+V4SfD0b/QsjIfYCqfu4pENvjxW6s5M1K22H6DC5Kc8z LlxLTfrjZISrg3xc530vmfCe/qeooO+aCL497ZX6zCVsFhVMEDMusbOr6wNwHJuE J0kGwP2cBXSM6jwibFZ/mboPIrp6R17McN0YMlFfXKHTYkS06qet94YIr2s5aDcG 3FVlVcDygPcbVAZs2pRFuIj+RL7TcbLavwtiEPYsaOKNgs4UM7tQ3jyClYubB/nJ nfQ2AGd7o/Fr3Cevw+zL+uBnTXMHiFRqAQwCUw17sD/eRV2pwA7goDsOrt+pEzXU mxnl/pOhLtjmu5B8YHsxLCMZhtdqKaLQa2x9KbYLBzN8wj7C39TGzALPfYfS+2ex p6wljQ9oo1avXkiY0ABCHcztna5wqwIvUblJXLlGXbZQxNXTNHNoVazSfgzIua92 RGiTLFMdhVykVR8z9tshkf20BcLpSg0V80c4OuR73kERtxD+gxi9wt3JS6D3OS4w AZS64xC88fBv0qGZPQNkI+KJr9GG1Ca1xJ3MVNsYzwIDAQABo4IBVTCCAVEwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBT0Ps7U8nAaYfSYJU3U0K4tgN0r3zAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzAYBgNVHREEETAPgg1wcm9tZWRpY2Eub3JnMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQBLZrESXk40gYaWH6p6q8FOZtENe+Dx4mcmSWKmxCvw JgekWaSi5GfXM6fTwv6Xj29/V/7+Lx0QcKDQxv85glEJvNsd1aKU0OJHjy2sMC35 ZGZk5pLImLGWCwIKmEtTtTQARdJKnkbxC6UnQupetptXh+Xj2fauVfhOC498JF4F 7dZ7SzE7bub0YT7rk7F4EHTp0BPK/u5TNeI7VUpGl4/Vjt2Y1p3CGmOP0gd2U0UM mE9dDum09K3f7A9jodrFSpHkKLy7afZOQK7KUMB/l6fK74qSLoQrG+VwMOkadvcw yAyQH/WcAEqh/Ue/7wsO17/EcXAX74pQ7MMYwC0jmIsP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyt0LIdzZ3rW75LtfQp6K U2sWbduK1O9jLLkLYVa0jMj14aFAkD2HG64MnqJOKSj9xjT1L2kEGkEno/EuJdUE 01Iy5FxKlHctjC+I93pfUd+41z0WrrPMriWK5Ew1KWICyFSC2NNN0GGadnEMdBQR rPleEnw9G/0LIyH2Aqn7uKRDb48VurOTNStth+gwuSnPMy5cS03642SEq4N8XOd9 L5nwnv6nqKDvmgi+Pe2V+swlbBYVTBAzLrGzq+sDcBybhCdJBsD9nAV0jOo8ImxW f5m6DyK6ekdezHDdGDJRX1yh02JEtOqnrfeGCK9rOWg3BtxVZVXA8oD3G1QGbNqU RbiI/kS+03Gy2r8LYhD2LGjijYLOFDO7UN48gpWLmwf5yZ30NgBne6Pxa9wnr8Ps y/rgZ01zB4hUagEMAlMNe7A/3kVdqcAO4KA7Dq7fqRM11JsZ5f6ToS7Y5ruQfGB7 MSwjGYbXaimi0GtsfSm2CwczfMI+wt/UxswCz32H0vtnsaesJY0PaKNWr15ImNAA Qh3M7Z2ucKsCL1G5SVy5Rl22UMTV0zRzaFWs0n4MyLmvdkRokyxTHYVcpFUfM/bb IZH9tAXC6UoNFfNHODrke95BEbcQ/oMYvcLdyUug9zkuMAGUuuMQvPHwb9KhmT0D ZCPiia/RhtQmtcSdzFTbGM8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279519186013786400092978487692696639595573 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 14:06:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 14:06:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promedica.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827610674959620486851706359060801922198474222515913948563260878732863226029593630565094614512911321764486407357015572829768216593044459313310934808098123599784083670370760291305682693517500005584629905177199636797772281218348389075189168309764478869691137663226545922081489284542965510308015411293364973620760782113328543280217748542080548467217934631803087903694385333764193870075588495526180902993188816986532433132016204651914748910272835916915141288644257852406194365852462516573754365762280939131408404725521146033513245451289138735942342079866001204992936273088455700296332333208725504070781477745698660335448901427399858763685423741571270106175531185222806120767174015229585174028204387011412012118324813110679009653550850128899944099031263622184866592145390263903447568058883555980960847568579736764274782875188381281489531849250040032590931874626185017455309047959424256437134885507370460585996564342617455036177735583214486166947450305183105262357750924126159108578017695396676845531349976500911515822408514755069335199364864644769089625995897856976036132083327350966790021922854453858503497449747019381172680856122736824300473042043536727916908193690519570785182532909442650894957125527166360494726958503968094231583201487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f43eced4f2701a61f498254dd4d0ae2d80dd2bdf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promedica.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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