int-caml.lucorp.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 2e:a6:7e:33:72:e2:30:e6:ab:b8:39:75:69:87:70:2a:ca:e9:42:a4 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luzerner Kantonalbank AG

Organization: Luzerner Kantonalbank AG
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:a6:7e:33:72:e2:30:e6:ab:b8:39:75:69:87:70:2a:ca:e9:42:a4
Serial Number (int): 266326492815987258755950943342490772804370776740
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 7b:f9:01:34:89:67:06:6d:53:38:11:41:4a:a3:80:0f:6d:8a:70:96
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 1d:44:f6:f9:9f:3c:fb:e6:87:32:33:7e:c3:45:27:56:72:6f:d5:c6
Fingerprint (sha256): 04:9d:bc:fe:23:f1:31:d5:0b:07:a5:84:af:2d:58:bf:cc:9b:07:63:fd:d8:7e:4a:2e:f6:63:f6:dd:b1:eb:1e

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate int-caml.lucorp.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-caml.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-caml.lucorp.ch
int-caml.lukb.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-caml.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+KHxlvo4Bid7zRuQ3edk
Mkzsxcf658LH6box+1vp4hZC61QZabgA7BkvTtZLphm9VU6K+QC0kNlQxPWijl0O
MKslmGsXAgMHcSJ/qVlxkii0FDlxHnSdIwFKe1KBHjtv+N78ytkyfYNTM0ii92m/
IIvk9r3ZP3FOcUJ+HVO+oCDzfb07F+wWgCqQ7VR+mKPRRmR2kIPBGZYWN/HvPrRw
8h8i08EDRVSTrHwkj9Sok7Pfw0bOGS9uv3ifjQz2E3NhtsYYXKtpEPggrHeyktvu
+62yrFQtgwsSNd3I9UKiCzCuHFl2EwaOW0yrsbHmQWCxSIDI+W5E1cWTiC0LxrML
K0W6cfzyyEMQ9uOa4+ahBD7eYjiMWltNfQr2z7qWbaQ9VAp/p9Zyrq7HdmAEhRWA
+/DEElQUmrfz7U2bzEopUmfZ93tTgQ2QjUUa5Fkjzk2fspMHlrUmUxchw3RYqy6d
5raij0CPH4cS5LFf3fzIMIBQRgt/qRYXoNQR8Tthf4sXaJrmyrFx/7v9HHbqf8Mi
zOP7ipEj6sOXQKLg2d32/iDyNYF19OCZl+F07fwglPsa74lkUVCcrNBusacNYiwj
ofN3RYWvGJaLH7HWLgrB7I036PXxBm0+Qspne7az7PGPBqPVgwxQtuo1cDqut8sd
f7p57qyMeIWSx1GJu6ehMCcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266326492815987258755950943342490772804370776740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 04:34:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-03 04:34:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-caml.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1014332481586895951117747889135756170011431154863641485339188382664226970628259187857074505927305092839641142269428359552861952088001836234403631042435302582306340928185535800006378630125936921462940302967429160065996960792326684830682982732154106105896497451729713195707879924515241988925357523043423392569957368857012944569539057306986482571900147755479342854252028846033802842657195521343592665535264935791707198488281226578234751195981641922502453267462051433708806720565942913456647782064322708819983640949744789882969581599336288275381625948170696489393334831833580390842524203958604328855234038156329617462928195510515351090598525595988880210852834657196888895803011939761619591640024155609333476254860646078481198818824481473933242176991518462782758762021025497598041351813952300091017611779667292272168685027565465944426088347028046198323775198796229884574955667254435409531655242684642757354079262391683658780972247750016341650971618868857040503149181453900682742041078714594582306663786679658293772794831908443780668661623172727748960994404412953354023067263859443397994944259936487416047652072218061755690295873111751855877641511626243719747166522835262435781022462294762598299990564913184618890248615388062092063456440359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-caml.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-caml.lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bf901348967066d533811414aa3800f6d8a7096
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00c2c6261cb43e8ef0ec2b8dfd23f331b0eef2366190db8280c2f6651b628fef1235ddeec002d5ba87503adb3135a2fcb0a1fdba8617fbc325abbc4804dfd8d4de1c4bf55af7506e48814fc9342afbe5ea071b8d1137666d1a6ee09bb81c966c2d056abe9ba1ce2c9e01a5c6284fdba98700783e3c54a7e67c41109c0ab1289724348ec3d099f913ce70e84040d159b0e3cd4766a24eab2e7f15367e00451a612153bf7522f8f454cf8a5a9ee114ea2ffc879c01bef80d33e519f340d0ecd6103644d6d4044199e40b6c57233a24ba53c1564bb3ac54698890382dfff9ad9bf16994e7e32e38f4842b124f3372105ff940aca1863f8070d8a234a7bbbca40e74cd6a0d7fb5c59e5636b0f616d375dd7dc4fb4033b9336eb0a8ebc623db4157c45b104173aa9d30864c189e51ce09080f29d78168a7ad6819bf7ff5237d7bf06d8ca61a5dedc5738c00d35ce3d6c82af5d380616ad9e5781b88efcfd0a42a78d486ad28153a8dcfafd63cee0ad268706d8d2fe548dcac296ebda5cd73db12f2d697b67cdcf83b8a9c1deef1507b55e78e9b9ccf91ca5e6fd88772868e5e35fe1b95f715d9b6fa9a68f6026c4f62fe037082700a395b99e56c907852960745cc3b5e820ca2f690184294e5b549c4816fcb2f2aa0cc883a22c6d96b41a72b95e4bce2d73f88a1269ea812ad41647d1caf5abbb0bb27c843292bbc12326b49ff726fbc