incident.ac-grenoble.fr

- Academie de Grenoble -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:9b:9c:cc:36:fd:66:3b:ee:26:be:f7:5d:17:3f:82 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Academie de Grenoble

Organization: Academie de Grenoble
Organization unit: ac-grenoble
Locality: Grenoble
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:9b:9c:cc:36:fd:66:3b:ee:26:be:f7:5d:17:3f:82
Serial Number (int): 15429494202168827004490010793063432066
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:de:52:5a:7e:60:c3:90:50:b6:d9:ea:a0:7e:ee:1b:49:48:f3:2c
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): db:64:d4:dc:c7:de:06:2e:f3:f5:fd:14:2a:c7:02:8d:83:dd:fd:c4
Fingerprint (sha256): 03:70:f8:ce:33:d2:03:dc:94:0c:88:47:0e:df:d3:db:da:e2:1b:ff:d1:0c:cf:d1:78:1c:da:fc:f1:46:df:44

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate incident.ac-grenoble.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for incident.ac-grenoble.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

incident.ac-grenoble.fr
incidents.ac-grenoble.fr

Other certificates including the domain name ac-grenoble.fr

(limited to 100 certificates)
documentation.ac-grenoble.fr
publinet.ac-grenoble.fr
test-admin-adm.ac-grenoble.fr
*.clg-pierre-aiguille.ac-grenoble.fr
incident.ac-grenoble.fr
ds-airwatch.ac-grenoble.fr
assistance.ac-grenoble.fr
drupal-cas.ac-grenoble.fr
*.lyc-champollion.ac-grenoble.fr
bas-moodle33.ac-grenoble.fr
andromede.ac-grenoble.fr
*.emwiki.ac-grenoble.fr
*.clg-charvieu.ac-grenoble.fr
dafco-appli.ac-grenoble.fr
airwatch-preprod.ac-grenoble.fr
drupal-cas.ac-grenoble.fr
visio.ac-grenoble.fr
*.lyc-louise-michel.eple.in.ac-grenoble.fr
devnat.ac-grenoble.fr
jitsi.ac-grenoble.fr
extranet.ac-grenoble.fr
documentation.ac-grenoble.fr
pia-sso1.ac-grenoble.fr
documentation.ac-grenoble.fr
lec.ac-grenoble.fr
smtp.ac-grenoble.fr
aloes.0380105H.ac-grenoble.fr
pronote.lec.ac-grenoble.fr
airwatch.ac-grenoble.fr
pia.ac-grenoble.fr
bv.ac-grenoble.fr
lyc-guillaume-fichet.ac-grenoble.fr
ent.ac-grenoble.fr
gestiondeparc.ac-grenoble.fr
moodle.ac-grenoble.fr
cordelia.ac-grenoble.fr
pia-sso.ac-grenoble.fr
extranet.ac-grenoble.fr
smtp.ac-grenoble.fr
portail-captif.ac-grenoble.fr
mdm.cg-drome-1.ac-grenoble.fr
webmail.ac-grenoble.fr
fluence.ac-grenoble.fr
*.lyc-guillaume-fichet.ac-grenoble.fr
devnat.ac-grenoble.fr
extranet.ac-grenoble.fr
*.lyc-guillaume-fichet.ac-grenoble.fr
perdition.ac-grenoble.fr
incident.ac-grenoble.fr
documentation.ac-grenoble.fr
documentation.ac-grenoble.fr
moodle.ac-grenoble.fr
ocean.ac-grenoble.fr
*.lyc-pheroult.ac-grenoble.fr
clg-ggaud.ac-grenoble.fr
extranet.ac-grenoble.fr
lec.ac-grenoble.fr
proxyecole.ac-grenoble.fr
erea-amelie-gex.ac-grenoble.fr
stswebnet.ac-grenoble.fr
sql.ac-grenoble.fr
ocean.ac-grenoble.fr
rhea.ac-grenoble.fr
webmail.ac-grenoble.fr
clg-louis-lumiere.ac-grenoble.fr
netsync.in.ac-grenoble.fr
bas-moodle33.ac-grenoble.fr
*.lyc-stendhal.ac-grenoble.fr
clg-louis-lumiere.ac-grenoble.fr
netsync.ac-grenoble.fr
ts.ac-grenoble.fr
documentation.ac-grenoble.fr
clg-champoulant-adm.ac-grenoble.fr
bv.ac-grenoble.fr
pia.ac-grenoble.fr
clg-barnave.ac-grenoble.fr
moodle.ac-grenoble.fr
bv.ac-grenoble.fr
*.lyc-pneruda.ac-grenoble.fr
devnat.ac-grenoble.fr
netsync.ac-grenoble.fr
assistance.ac-grenoble.fr
*.clg-belledonne.ac-grenoble.fr
pluton.ac-grenoble.fr
clg-barnave.ac-grenoble.fr
vpn-etab.ac-grenoble.fr
listes.ac-grenoble.fr
documentation.ac-grenoble.fr
lec.ac-grenoble.fr
ocean.ac-grenoble.fr
assistance.ac-grenoble.fr
pia-sso.ac-grenoble.fr
clg-jean-monnet.ac-grenoble.fr
ocean.ac-grenoble.fr
ocean.ac-grenoble.fr
*.clg-fleming.ac-grenoble.fr
*.clg-barnave.ac-grenoble.fr
lp-moutiers.ac-grenoble.fr
teleservices.ac-grenoble.fr
moodle.ac-grenoble.fr

Certificate

The complete raw certificate details for incident.ac-grenoble.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydYSmWZa0q6F3tEVcdSr
TkcSlVkQVHS62E55ncmznHQih4LoGL1g0VFvzMhYevuymCXppnsH66vCt5fPWtho
910A7gwqkTDh+E+Jq0wVL9yUpKLtybyjpdOsqhswVFbEpPdIUcg4Amd925G/wOBn
r0S8Q53v2vD6goEZVH6znW9EyVS/RChLBbPbSP0yXU5grt9TY06vdNlH9VRR0tLu
YTjOME12lUtghOcOSjI9BlhEZRFxYwDLS9LX6GTvFHkuLoV3L0OeCTrv2rkiVoO8
k3+1uWcFoP1zYbOhC7BEHClFxPoPx6puxQiGIVQOjPoPbj3fPd4qTCcIQaljLK8n
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15429494202168827004490010793063432066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grenoble'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Academie de Grenoble'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-grenoble'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'incident.ac-grenoble.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25479462457861348421082845834775946374071682765729410641485344183547825816385931664336237691194937365691156957128111126383597453810192412845209338581233166057630809906115935882771056763452334510140363378900222700573079064841559177880510206938221086249073858366232586125915624956832415368571931371403717649530429816671374299571230243137794220849024707141609960068581067162673666016514672951642494205345185896457460070384455269659973450079735984469967915962094856636224308817827021532387360721262398348897937550983500844731756965902234217802794902879131898645778932201067528071602834116230515904137341860982940947654617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90de525a7e60c39050b6d9eaa07eee1b4948f32c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incident.ac-grenoble.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incidents.ac-grenoble.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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