svn.insa-lyon.fr

- Institut national des sciences appliquées de Lyon -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:4a:87:46:d9:8a:4f:51:bb:8b:6c:6f:b7:7e:93:b7 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut national des sciences appliquées de Lyon

Organization: Institut national des sciences appliquées de Lyon
Locality: Villeurbanne
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:4a:87:46:d9:8a:4f:51:bb:8b:6c:6f:b7:7e:93:b7
Serial Number (int): 3045429697694731433320865021686617015
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8e:81:6a:9a:39:ef:fa:04:c3:ec:82:ba:88:9e:7e:b0:21:03:60:73
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 4b:59:ee:80:8e:22:fb:7d:bc:4a:04:3b:60:af:bd:f6:38:e3:70:84
Fingerprint (sha256): 03:61:17:7b:02:df:5a:0c:a7:45:68:d3:7e:e7:aa:ca:db:48:4c:c9:d6:11:54:b6:e8:07:1e:52:fd:3a:46:95

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate svn.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for svn.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

svn.insa-lyon.fr
www.svn.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for svn.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonQdKNeErswHGiEp6V4q
5WHFg+I0tcOSk9rB9LZgeMpTz86l4djgjhoGEM5oko43a0QJoCe0pN3fIhna6rZ6
Wmwmv8SWOKcu9AdB9vzOhqYP3elocu3HsTrkzmAWYzkpWwFg2K6/cMZeoN2DNcFy
b+u5caVlHj96Ghx1OxBuk5dmpKfOHbJfcGxix/VK6K8bVmi65t7F0K9wPOwAztov
0EWd2OsluVvHfMg9XZQEHqcTs905XxsYZIc5hNj9a2cGocZrh/E7DhpOg7xVZD2N
LopJrmqara00t3AojJoLwXmgjgST/8sP23vUHn0T4IG8qDtsYZj/WbZac6u1HF1X
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3045429697694731433320865021686617015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Villeurbanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut national des sciences appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'svn.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20507863304815705623493853739423359444285444832399747903020459487983376503323454614488976158460472167249032020027054996664993590715548294457104688729736468840483100950702665432187463720622715484699188416192943165575309494726153779011547857280875595963718624665850938589609762084733774542230772613879686445548419330738215487710032024551772350573016102311641351321705480606887302470833507067073458938712301217697516428079003943128938996389178693254857691097402727448305610532573338177899852338470341234794017834143964071640839376990825076361214303229347743904369571377307189405809476231554011109024846715479107183662901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e816a9a39effa04c3ec82ba889e7eb021036073
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svn.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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