gate.universite-paris-saclay.fr

- UNIVERSITE PARIS-SACLAY -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0c:f6:8c:7d:4c:aa:cf:49:6a:8b:46:2e:95:a0:79:95 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UNIVERSITE PARIS-SACLAY

Organization: UNIVERSITE PARIS-SACLAY
Locality: Saint-Aubin
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f6:8c:7d:4c:aa:cf:49:6a:8b:46:2e:95:a0:79:95
Serial Number (int): 17230890441210740608274029364341930389
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1a:fd:1b:05:2f:7a:55:71:54:5d:d3:36:85:6b:1a:64:18:0f:15:32
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 76:ce:7f:02:36:d0:5b:fc:92:2e:65:e4:f9:23:1d:fd:41:4b:2e:79
Fingerprint (sha256): 0a:f2:28:39:b9:dd:4b:08:62:5b:92:58:f9:c8:a3:52:a4:cc:85:fa:2e:b9:98:96:b0:df:2b:a5:0f:a0:83:44

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate gate.universite-paris-saclay.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gate.universite-paris-saclay.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gate.universite-paris-saclay.fr

Other certificates including the domain name universite-paris-saclay.fr

(limited to 100 certificates)
bbb.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
apo-wsprofiltest.dsi.universite-paris-saclay.fr
sports.universite-paris-saclay.fr
video.dsi.universite-paris-saclay.fr
connecteursprep.dsi.universite-paris-saclay.fr
apowebtest.dsi.universite-paris-saclay.fr
atlas.universite-paris-saclay.fr
hebergement.universite-paris-saclay.fr
piatest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.agora.universite-paris-saclay.fr
gitlab.dsi.universite-paris-saclay.fr
web-bib.imo.universite-paris-saclay.fr
snwtest.dsi.universite-paris-saclay.fr
inception.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.photo-club.asso.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
www2.lpgp.universite-paris-saclay.fr
gate.universite-paris-saclay.fr
www-test.c2n.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
ecandidatprep.dsi.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
rh.c2n.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.dpo.universite-paris-saclay.fr
www.faculte-sciences-sport.universite-paris-saclay.fr
lmodb.imo.universite-paris-saclay.fr
*.universite-paris-saclay.fr
awacstest.dsi.universite-paris-saclay.fr
pacestest.dsi.universite-paris-saclay.fr
ipa-user.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
iaprimotest.dsi.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
annuaire-ladiagonaletest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.ifsbm.universite-paris-saclay.fr
www.imo.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
www.sciences-sif.universite-paris-saclay.fr
resa.imo.universite-paris-saclay.fr
www.licence-pro-technico-commercial-cachan.u-psud.fr
bibliolabs.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
www.dep-chimie.universite-paris-saclay.fr
sso.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
pia.dsi.universite-paris-saclay.fr
sihamperso.universite-paris-saclay.fr
adonis-api.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.persay.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
Athena.universite-paris-saclay.fr
sihampersoform.dsi.universite-paris-saclay.fr
www.collecsciences.universite-paris-saclay.fr
www.cesfo.universite-paris-saclay.fr
*.portailtest.universite-paris-saclay.fr
ecandidattest-gestionnaire.dsi.universite-paris-saclay.fr
sportstest.dsi.universite-paris-saclay.fr
www.apoil.asso.universite-paris-saclay.fr
bdd.c2n.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
mahery2.imo.universite-paris-saclay.fr
re7-extranet.universite-paris-saclay.fr
bernardotest.dsi.universite-paris-saclay.fr
edith-www.c2n.universite-paris-saclay.fr
api.focus.universite-paris-saclay.fr
e-missions-dev.imo.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
share.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.kiosk-lpgp.universite-paris-saclay.fr
gateprep1.dsi.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
wp.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
idm1.idm.universite-paris-saclay.fr
bibliotheque.imo.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
extranet.universite-paris-saclay.fr
*.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
wims.universite-paris-saclay.fr
www.iut-orsay.universite-paris-saclay.fr
www.universite-paris-saclay.fr
copernic.universite-paris-saclay.fr
weblosco1.dsi.universite-paris-saclay.fr
www.biocis.universite-paris-saclay.fr
pjweb.universite-paris-saclay.fr

Certificate

The complete raw certificate details for gate.universite-paris-saclay.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17230890441210740608274029364341930389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Aubin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNIVERSITE PARIS-SACLAY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gate.universite-paris-saclay.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776546683915374055638772412160314401372606362969307617547915891017784565094241964452392460820149090411430020023743953531194563595004846664054695620316830319191742767005965875324230904913813587879229172998036889879806276378077910562384266353594560893722447085201373523944673634409462096426800106700666257461106486525537157411346222454721881415467881575259765949861795482466850541332899336438749228735837002685800987335712514367361687599947275370891632827050780725780806299528148203476664721694298127053340387658887007800198553226840733451077652500170063399079976534783793396673353015534316259489289214575581545200082362039293557764328034064165534362501701791122741492662578376542997674217808375883778551631469174670232307909400767306856923090631228265093934613505762760208913870340443272891877559023512548994430570028209506427063203285896069047469596865864316619040739366284989522805872541661901412673924725816725617802420432936022447878635225663243104851839419784124984362709196255553403473130158081290231976404259595554704319373733731443608537672312789939565762043909680455052775056448869771433236796622212928542947566181939138108423400530418268921782044248753407578357703187029366021760574252762001772911436787410898371197304105397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1afd1b052f7a5571545dd336856b1a64180f1532
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gate.universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b96a888141847e36e549260fa04b02d1c9a4168c1b3558b1ffdfc1c6969c4f642e2f98f90a6030e725e03103257abedf959a82ed4831135a23b226eb0f442cb4420c0b15e23e75e20537ac9eebe4291ddd7984cde9428aa185a3edaf2444952de28ea745ce7ea71f1f41c1b8eedf336843233102c1c8867bbdd164262a4e36510737378fa5655c71b610aabe0f4d03556a90d3c3ff61b84cb441e77a7b8debbc0d60274f25fc98759f74a30b19e5e69f8681bbdcf3d1dae2ac4f111e23234df816430c76c8142862b55f711326a3c224f2f1cbc2d54066be9721fc47a7a8e00c3c2bff2dfd1d4d974e8513345a2d9e3042a11363aed157dc1939aa5a27e7133