www-t0.viajeselcorteingles.es

- El Corte Ingles S.A. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:5d:40:6f:7c:22:73:f0:df:47:f0:0e:db:08:e4:33 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

El Corte Ingles S.A.

Organization: El Corte Ingles S.A.
Locality: Madrid
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:5d:40:6f:7c:22:73:f0:df:47:f0:0e:db:08:e4:33
Serial Number (int): 16434926464221194445714512143146607667
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:c4:69:5d:63:7f:14:15:bd:d8:03:91:81:46:87:c6:69:bb:04:4b
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e9:31:d3:f0:4f:6b:ee:9e:29:be:49:fd:de:d7:07:43:55:85:51:43
Fingerprint (sha256): 14:c3:17:35:e0:da:99:67:82:75:60:e8:c9:d8:6d:db:e0:1f:dd:3f:5f:d4:ce:fb:91:fb:9b:c9:0a:e2:7f:59

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www-t0.viajeselcorteingles.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-t0.viajeselcorteingles.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-t0.viajeselcorteingles.es

Other certificates including the domain name viajeselcorteingles.es

(limited to 100 certificates)
nprogrupoeci.elcorteingles.es
support.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
extranet.viajeselcorteingles.es
*.extranethotel.viajeselcorteingles.es
grupoeci.elcorteingles.es
inbusiness.viajeselcorteingles.es
grupoeci.elcorteingles.es
vuelo-hotel.viajeselcorteingles.es
grupoeci.viajeselcorteingles.es
formulario.viajeselcorteingles.es
comercial.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
cruceros.viajeselcorteingles.es
support.viajeselcorteingles.es
formulario.viajeselcorteingles.es
grupoeci.elcorteingles.es
eci.bewin.altabox.net
grupoeci.elcorteingles.es
eci.bewin.altabox.net
webservices-t0.viajeselcorteingles.es
comercial.viajeselcorteingles.es
chatbot.viajeselcorteingles.es
extranet.viajeselcorteingles.es
intranet-pre.viajeselcorteingles.es
grupoeci.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
www.viajeselcorteingles.es
dtrafico.sapienssoftware.com
contenido.viajeselcorteingles.es
ovyrak.viajeselcorteingles.es
www-t0.viajeselcorteingles.es
webservices-pre.viajeselcorteingles.es
pymes.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.viajeselcorteingles.es
transporte-hotel-tc.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
eci.bewin.altabox.net
apps.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
www.revelex.com
grupoeci.viajeselcorteingles.es
formulario.viajeselcorteingles.es
grupoeci.elcorteingles.es
www.viajeselcorteingles.es
grupoeci.elcorteingles.es
cruceros.viajeselcorteingles.es
appmovil.viajeselcorteingles.es
contenidoinbusiness.viajeselcorteingles.es
empresas.viajeselcorteingles.es
intranet-t0.viajeselcorteingles.es
appmovil.viajeselcorteingles.es
www.viajeselcorteingles.es
itinerario.viajeselcorteingles.es
appmovil.viajeselcorteingles.es
clientes.viajeselcorteingles.es
grupoeci.elcorteingles.es
cruceros.viajeselcorteingles.es
pymes.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
vacaciones-multidestino.viajeselcorteingles.es
grupoeci.elcorteingles.es
cruceros.viajeselcorteingles.es
grupoeci.viajeselcorteingles.es
sapienssoftware.com
grupoeci.elcorteingles.es
www.revelex.com
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
inbusiness.viajeselcorteingles.es
grupoeci.elcorteingles.es
common.viajeselcorteingles.es
contenidoinbusiness.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
inbusiness.viajeselcorteingles.es
cruises.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
pymes.viajeselcorteingles.es
eci.bewin.altabox.net
appmovil.viajeselcorteingles.es
grupoeci.elcorteingles.es
transporte-hotel.viajeselcorteingles.es
vuelo-hotel.viajeselcorteingles.es
grupoeci.elcorteingles.es
grupoeci.elcorteingles.es
transporte-hotel.viajeselcorteingles.es
eventos.viajeselcorteingles.es
grupoeci.elcorteingles.es
support.viajeselcorteingles.es

Certificate

The complete raw certificate details for www-t0.viajeselcorteingles.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzbbdlxbZiBHyuzKHp8MJ
lSTppL0tdC1run41vj5TCDt5uks/zFrUWPFz3HXMHILTTRdTCAzJUeh19uyfhjA7
8KcnLvZYMg04D5S6E39u0fQ4CmeUgiT3UZAhxjdl+KRUPdg8N6SYrkyTesFnwFba
nt9YDXNabBmSGDSBX8HuKciqZMQ3QayVnOwlPn1isRqz9r3zxTd+4jkLozoUGjUL
HDN+BLvbjMH+8MJsySjWYjwNB59hHTkCg6Lq0eKH9e2XUao+AnxACD4RExsSf+9u
k7PHak5gyy8RXiuIjwfVTngGsOjh/CVuDeuIJvEDnkLwjGvPd9SY+irlvO+0ADN+
FtIUkOIcPxtlF6eozTvKqBwt7uW1xiq4LiTj4wv7a5oog2NYK+YWiBFYi0VrPZMl
Y8XEFZVeZ8m1hMsmMNfFQVwBSsj/xxCtVyU2leiBt1/O3y3ExOV8Y+5YqF9fcHW1
V4bVDWocOUk71ic8cQs9Z8LnX84zaX5kcKfJ15k9tPL2HP7zn+l66bFZC2i4OnT8
OXtlL9DzuETSDZMjJktyJ1xurN60i/IOiC4va/HShJkP3lYmyqQ5cz6G/RaLz0+9
EI+zyifsiz0lBm7jXQHQbAjA3wUuls9U8IqqcyJoZdral13JoVerX26u6yQdSIHL
VecjcVQl6Ibt1RzqTkaLaUUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16434926464221194445714512143146607667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'El Corte Ingles S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-t0.viajeselcorteingles.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839241199983115099135596807940379807580525108433142716237240410920987850541680312377897498539058807147199084410324343326023612172243034541634103016998117465906978855880325424559993729488627836986000986727382952406848152384320463413724070429687171436252750312636489511571862948980282810960411197881653372689873006221598264181430694137598597141673769005241891693806352371177520716866858438041685080121669615722729324873565941052958003656742163383966666236656784540512624331564066272430690023477183251910885190455179985127102577363578191044912912844458496825073169922350994931090542857990439094294622006233399281350915466053875293141345482682238797450540674808943219278240689825152077697092350763876196066538797518108366325785337139594361043761205547124189977174377381638894006499684942219263265135771410119596530675660377539023556858035129988691856898299997501668372082520181352975467496121462811852145918128657196518106118195199289541258885264366906777470921471939705415356019161373647326343460436199607047523461508984497770084405159766338132709863670060165840875848449340771286956587237957308048480534875859945216250457823330440562268795421621821664804390388355305148052075981528423295430795564513465378931864222650772805992309287237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96c4695d637f1415bdd80391814687c669bb044b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-t0.viajeselcorteingles.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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