zeugs.bbaw.de

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:a2:f0:f7:3b:05:b2:14:e8:a9:d5:f0 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
Organization unit: Informationstechnologie
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:a2:f0:f7:3b:05:b2:14:e8:a9:d5:f0
Serial Number (int): 10409989235436633341324547568
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 7a:27:88:c3:3e:3a:0a:4f:af:03:12:e6:78:30:fc:40:68:92:b2:cc
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 5c:46:4e:46:b5:8b:22:86:d3:80:d3:55:04:71:a2:5a:29:8d:67:77
Fingerprint (sha256): 12:37:99:4c:ad:0e:ca:ee:ab:c7:98:fa:33:40:2f:80:66:3f:ec:5f:9e:e2:49:53:a0:ba:3a:95:e3:b0:5e:75

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate zeugs.bbaw.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zeugs.bbaw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zeugs.bbaw.de

Other certificates including the domain name bbaw.de

(limited to 100 certificates)
cil.bbaw.de
telotawebpublic.bbaw.de
nubes.bbaw.de
telotawebdev.bbaw.de
gorkon.bbaw.de
achard.bbaw.de
abfallenergieverwertung.bbaw.de
bibelexegese.bbaw.de
wirt1.bbaw.de
login.bbaw.de
veranstaltungszentrum.bbaw.de
virtuelles-schuelerlabor.bbaw.de
bareos-director.bbaw.de
mgh.bbaw.de
bureau.bbaw.de
brainudl.bbaw.de
aaew.bbaw.de
praesidenten.bbaw.de
gitlab.bbaw.de
mx1.bbaw.de
zeugs.bbaw.de
devbib.bbaw.de
cil.bbaw.de
shibboleth.bbaw.de
mailman.bbaw.de
census.bbaw.de
wsus64.bbaw.de
cmg.bbaw.de
www.gentechnologiebericht.de
clarin.bbaw.de
ldap.bbaw.de
edoc.bbaw.de
syslog.bbaw.de
vimes.bbaw.de
proxy.bbaw.de
cmg.bbaw.de
xmlpublic.bbaw.de
forschungsdatenmanagement.bbaw.de
telotadev.bbaw.de
www.bbaw.de
bureau.bbaw.de
akademieregistres.bbaw.de
pdrprod.bbaw.de
xmledit.bbaw.de
praesidenten.bbaw.de
login.bbaw.de
achard.bbaw.de
mailman.bbaw.de
www2.bbaw.de
actaborussica.bbaw.de
telotadev.bbaw.de
pdrprod.bbaw.de
eduroam2.bbaw.de
www.correspsearch.net
proxy2.bbaw.de
mailix.bbaw.de
digiclass.bbaw.de
mailix2.bbaw.de
aaew-dev.bbaw.de
lebenswelten-digital.bbaw.de
shibboleth.bbaw.de
brainudl.bbaw.de
mailix.bbaw.de
wwwdev.bbaw.de
gaerten.bbaw.de
vimes.bbaw.de
gerechtigkeit.bbaw.de
census-lod.bbaw.de
login2.bbaw.de
brainjae.bbaw.de
hws.bbaw.de
ldap.bbaw.de
kollokationen.bbaw.de
telotadev.bbaw.de
edoc.bbaw.de
shibboleth.bbaw.de
frauenvertretung.bbaw.de
bibliothek.bbaw.de
kant.bbaw.de
vimes.bbaw.de
agora.bbaw.de
bibelexegese.bbaw.de
edition-humboldt.de
t3extern.bbaw.de
mittelalterzentrum.bbaw.de
tla.bbaw.de
actaborussica.bbaw.de
tableau.bbaw.de
dschutz.bbaw.de
ostwald.bbaw.de
encoding-correspondence.bbaw.de
forschungsdatenmanagement.bbaw.de
avh-r.bbaw.de
cil.bbaw.de
aaew.bbaw.de
hippo.bbaw.de
agora.bbaw.de
hippo.bbaw.de
idqw.bbaw.de
inetbbaw.bbaw.de

Certificate

The complete raw certificate details for zeugs.bbaw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10409989235436633341324547568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 12:24:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-21 12:24:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'zeugs.bbaw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 970301551678055595336407428572335314787509659774581791152023125062244801078412102267610844035099452391201714373668832576583320665807487975822089058556723157099911396841343058732552069028075367387743039882044342080034703275896444771087477027409274724893802836995597736616509585610500843076077168591815803528573783120891210729382224215266039281645547660941840329141624941643750468685208301862283780953739794192473534644631827540245399435313403438749057156499992810152875441762776788428425626777727374895128676721894374562689227240563999443325614844188756605502315910940033745136122303623760917857763436856508551206279344229441497263234242176909583223492431791296232808655592172190942037683924127142910997481699477097430801334722872311840689547014612695723527631829611104639581906548885430488184314789469785393286870077716227284021744438766115879009938311309176110623503610224463864009366950139440311535120951717290485895916554373790366924534658985725459596841127550843180982200949724959678096457059872371877490848585663121425304168894587023318635285682053086796172417201355271917171316040302949785799194442508800042641460077540911503856168179992683401392127240349813801513854304263280511548455005804403930040222689958137059132528920193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a2788c33e3a0a4faf0312e67830fc406892b2cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeugs.bbaw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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