beheer.demo.wis.nl
Issued by R3
About this certificate
This digital certificate with serial number 04:c5:8d:b7:a8:cc:41:19:2a:dd:e3:e7:1a:85:b4:02:25:11 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=beheer.demo.wis.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:c5:8d:b7:a8:cc:41:19:2a:dd:e3:e7:1a:85:b4:02:25:11Serial Number (int): 415673144771824154417922832282477115090193
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3a:3e:4a:be:c0:cf:87:4b:59:4a:80:f0:79:09:6f:b1:12:e7:ed:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ef:f4:f3:18:e5:d4:8b:32:9a:01:e7:ac:b3:f2:3e:1c:82:99:a5:7c
Fingerprint (sha256): 12:aa:6e:08:d5:22:a0:d7:bd:b9:67:84:e4:2a:e9:41:a1:30:6c:69:56:1a:b7:e1:bd:80:bb:d3:1c:a5:67:87
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate beheer.demo.wis.nl
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for beheer.demo.wis.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beheer.demo.wis.nl
demo.wis.nl
ouders.demo.wis.nl
personeel.demo.wis.nl
pr.demo.wis.nl
som.demo.wis.nl
demo.wis.nl
ouders.demo.wis.nl
personeel.demo.wis.nl
pr.demo.wis.nl
som.demo.wis.nl
Other certificates including the domain name wis.nl
(limited to 100 certificates)
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
beheer.demo.wis.nl
3737.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
wis-studio6.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
*.support.wis.nl
wiscommunicator.wis.nl
support.anevia.com
wiscommunicator.wis.nl
*.wis.nl
3737.inextenso.fr
fdus-42.freshdesk.com
support.anevia.com
support.anevia.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
fdus-42.freshdesk.com
vpn.wis.nl
support.anevia.com
fdus-42.freshdesk.com
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
fdus-42.freshdesk.com
3737.inextenso.fr
wiscommunicator.wis.nl
*.wis.nl
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.lobi.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
*.mas.wis.nl
fdus-21a.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.demo.wis.nl
*.wis.nl
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.lobi.wis.nl
*.mas.wis.nl
wis-studio7.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-38.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
3737.inextenso.fr
wis-studio7.wis.nl
support.anevia.com
support.anevia.com
*.wiscollect-test.wis.nl
support.anevia.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
*.school-studios.wis.nl
*.mas.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
fdus-38.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
beheer.demo.wis.nl
3737.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
wis-studio6.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
*.support.wis.nl
wiscommunicator.wis.nl
support.anevia.com
wiscommunicator.wis.nl
*.wis.nl
3737.inextenso.fr
fdus-42.freshdesk.com
support.anevia.com
support.anevia.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
fdus-42.freshdesk.com
vpn.wis.nl
support.anevia.com
fdus-42.freshdesk.com
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
fdus-42.freshdesk.com
3737.inextenso.fr
wiscommunicator.wis.nl
*.wis.nl
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.lobi.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
*.mas.wis.nl
fdus-21a.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.demo.wis.nl
*.wis.nl
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.lobi.wis.nl
*.mas.wis.nl
wis-studio7.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-38.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
3737.inextenso.fr
wis-studio7.wis.nl
support.anevia.com
support.anevia.com
*.wiscollect-test.wis.nl
support.anevia.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
*.school-studios.wis.nl
*.mas.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
fdus-38.freshdesk.com
Certificate
The complete raw certificate details for beheer.demo.wis.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEVzCCAz+gAwIBAgISBMWNt6jMQRkq3ePnGoW0AiURMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDIxMTMxMTFaFw0yNDA3MDExMTMxMTBaMB0xGzAZBgNVBAMT EmJlaGVlci5kZW1vLndpcy5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgJpb5MKPdKWiksPFEtXufuLMCe8Jst1bm0fPPgA2cU+0QCwDp6QwZSDvio TC0OH23sMsqeslY/7sCe8rIB1qhGZpH4eD+bOP8UKJ8hywH1CPEUrC5rqC153Kq6 2VK3xCTtqv9uVTv0MZ6xmIhAQs6JSuhhiCEMdbRsclPxe5RAtxAis9N71MCOewiN QD60YEFdzyjNIv6xKHC+/8bPqg6MVBf2fF9upLzNYEJ1K2QXCuZ1PuClc18uHfRf 5XnI7GOUuyAYqWmlqSJ6Z3GV33tMxp7CmKf6iP51un8g//dHYS328a9t8IbyV1TB gXebbKxl2mIDW1kDjHpFbIC4MJcCAwEAAaOCAXowggF2MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUOj5KvsDPh0tZSoDweQlvsRLn7bswHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wdgYDVR0RBG8wbYISYmVoZWVyLmRlbW8ud2lzLm5sggtkZW1vLndpcy5u bIISb3VkZXJzLmRlbW8ud2lzLm5sghVwZXJzb25lZWwuZGVtby53aXMubmyCDnBy LmRlbW8ud2lzLm5sgg9zb20uZGVtby53aXMubmwwEwYDVR0gBAwwCjAIBgZngQwB AgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAEJslDW6 IacHhuH77dM5Wc0NjUb5qWK1CBi9zK9v/mwK1XtEwEJlIHEVpIQ1WB51ToMjAprY 710ca1Xyim5aQUlU2DqJi+jOg4LmKWczgHUzJUwkJN7RNloQ6f2cdfSk+TBow7nJ Os+4a/QG0I2FlX2wPPzNC0ovi77LvitYp8gqsn8tcJy+BlszSThSU9o2E1GlEJBX qE9ok4OZ684wVkByDslbmjtdMCnY8JpdDco+d39H5eo3XVtKoTMdTJ2Pxe4hcXKH bsIEGbrMANbUR3XpCDXN+6zkwRTY2UJfK8axmp0EeGSyN75WbhFe3sumJj0ifXOL On7VCKG5LB2RCKM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAmlvkwo90paKSw8US1e 5+4swJ7wmy3VubR88+ADZxT7RALAOnpDBlIO+KhMLQ4fbewyyp6yVj/uwJ7ysgHW qEZmkfh4P5s4/xQonyHLAfUI8RSsLmuoLXncqrrZUrfEJO2q/25VO/QxnrGYiEBC zolK6GGIIQx1tGxyU/F7lEC3ECKz03vUwI57CI1APrRgQV3PKM0i/rEocL7/xs+q DoxUF/Z8X26kvM1gQnUrZBcK5nU+4KVzXy4d9F/lecjsY5S7IBipaaWpInpncZXf e0zGnsKYp/qI/nW6fyD/90dhLfbxr23whvJXVMGBd5tsrGXaYgNbWQOMekVsgLgw lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415673144771824154417922832282477115090193 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 11:31:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 11:31:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beheer.demo.wis.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25252418320698234591669402196531386928600818372467484267983711265756752394116227295047587778227810442419808064016363324864904528548472899900698535307293161150715250995503863376643016104441609299246480805847040215637670449306328682323788790824529406376838888266513341299959446153711485215429145176516177000453026385144753855953715975658899409463226297905704530891702483743551407907728489119409401531252747661904526335914688821953044414806636720233102935695294316868657876307544552917448961649255326248464793949332206276815072355151211138729817178622096729901208547549909906440563958976029780221410923438528158139691159 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a3e4abec0cf874b594a80f079096fb112e7edbb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beheer.demo.wis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.wis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouders.demo.wis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personeel.demo.wis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.demo.wis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'som.demo.wis.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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